$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa File: 454fde4e-a5a1-3b9d-9523-906df8478324.roa (raw, json) Hash identifier: gJ6qK4nK7testzR4C6xs4uxn3AJEO7pHyQ544IP6pX4= Subject key identifier: 2B:3D:5B:C0:A6:81:16:B2:01:CA:50:0E:EB:2F:A4:9E:72:99:D5:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DE8E4166286D6D6892C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396590 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:de:8e:41:66:28:6d:6d:68:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=7b8da948-0084-4671-bc73-332f5e8222ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:fe:e0:7c:b0:e5:7b:bc:6b:83:24:d7:92: 71:ed:6d:70:6f:de:e3:b0:81:6c:62:b5:0d:4d:7d: be:15:0b:a6:c4:2d:91:39:b2:30:2a:8c:45:d5:a3: 1b:ad:70:ec:a7:61:5c:a6:27:a0:dd:1d:a3:9b:d8: b0:20:9a:0d:d6:60:7f:ac:41:15:70:46:67:48:1b: c2:11:b3:71:37:60:ef:52:be:e0:99:2c:41:f9:62: 5b:f9:57:9c:19:e2:db:f8:7c:e6:79:c6:5f:2e:75: 3d:7e:f9:8b:4b:78:c2:8b:10:54:c9:f4:45:61:c2: 97:b6:78:eb:b6:de:c9:15:03:52:b2:42:99:ed:d2: 88:4c:36:11:ee:32:11:9b:0b:5d:7f:f5:54:5d:c5: 54:71:63:d2:c8:a1:34:59:ca:24:c5:4c:e2:91:91: 10:69:55:dc:30:17:f9:d7:5f:d3:68:e2:c4:d9:5b: 08:81:ea:8b:5e:83:c1:1f:28:b0:ef:8e:47:3f:78: 53:6d:30:22:bf:08:fb:32:4d:98:b4:01:0f:5f:0f: 3d:f0:96:47:1f:1c:2e:d9:ea:e9:f8:ee:0c:08:fc: b7:46:91:4b:a2:8c:57:12:a9:17:9c:2e:6d:bd:7c: 93:1b:a6:00:8f:31:d1:b4:a5:0a:a2:38:c9:97:60: bb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3D:5B:C0:A6:81:16:B2:01:CA:50:0E:EB:2F:A4:9E:72:99:D5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f6:ac:c6:14:fb:c1:84:a5:9a:79:f7:da:97:fa:9a:0a:31: 33:43:a0:e0:58:10:1f:ad:d5:51:e4:57:e7:3e:83:5b:44:4a: 26:38:f4:0b:56:83:58:96:fa:1b:0c:ae:d4:d5:1a:40:75:5b: 35:01:52:e8:bb:f3:47:55:b9:8c:37:b5:f9:3f:ce:59:bc:ec: eb:52:ea:bc:51:df:84:af:8e:61:b2:36:65:8b:1e:cc:f2:b2: ae:ad:4d:e7:a7:35:60:40:62:ce:20:7d:65:78:d8:2a:95:bd: 58:40:07:8c:48:1b:33:7f:90:33:db:37:1b:fe:fa:aa:81:2b: 17:84:40:06:64:55:06:b6:1b:97:08:ab:67:82:96:ef:77:58: 94:93:98:d2:96:9c:f7:d0:41:1f:b2:6b:a4:d3:61:26:c1:26: 41:18:cf:97:b3:7c:6c:b2:25:a6:bc:8f:e1:3c:77:d4:37:90: f1:07:18:5a:45:71:02:03:93:e7:e1:4e:39:59:a4:6d:65:a3: c3:cc:0e:f2:a5:46:be:dd:d0:3b:bf:b9:11:0f:2f:86:7c:ab: 99:dd:14:11:c9:a1:c4:ae:78:19:5c:73:0d:fb:ab:cb:9c:68: b6:f4:7c:86:e0:51:8d:98:71:de:12:e4:c2:4f:36:9f:e6:ea: 55:a3:2b:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN6OQWYobW1oksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk N2I4ZGE5NDgtMDA4NC00NjcxLWJjNzMtMzMyZjVlODIyMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPT+4Hyw5Xu8a4Mk15Jx7W1wb97jsIFsYrUN TX2+FQumxC2RObIwKoxF1aMbrXDsp2Fcpieg3R2jm9iwIJoN1mB/rEEVcEZnSBvC EbNxN2DvUr7gmSxB+WJb+VecGeLb+HzmecZfLnU9fvmLS3jCixBUyfRFYcKXtnjr tt7JFQNSskKZ7dKITDYR7jIRmwtdf/VUXcVUcWPSyKE0WcokxUzikZEQaVXcMBf5 11/TaOLE2VsIgeqLXoPBHyiw745HP3hTbTAivwj7Mk2YtAEPXw898JZHHxwu2erp +O4MCPy3RpFLooxXEqkXnC5tvXyTG6YAjzHRtKUKojjJl2C7bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCs9W8CmgRayAcpQDusvpJ5ymdX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0ZmRlNGUtYTVhMS0z YjlkLTk1MjMtOTA2ZGY4NDc4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAET2rMYU+8GEpZp599qX+poKMTNDoOBYEB+t1VHkV+c+g1tESiY4 9AtWg1iW+hsMrtTVGkB1WzUBUui780dVuYw3tfk/zlm87OtS6rxR34SvjmGyNmWL Hszysq6tTeenNWBAYs4gfWV42CqVvVhAB4xIGzN/kDPbNxv++qqBKxeEQAZkVQa2 G5cIq2eClu93WJSTmNKWnPfQQR+ya6TTYSbBJkEYz5ezfGyyJaa8j+E8d9Q3kPEH GFpFcQIDk+fhTjlZpG1lo8PMDvKlRr7d0Du/uREPL4Z8q5ndFBHJocSueBlccw37 q8ucaLb0fIbgUY2Ycd4S5MJPNp/m6lWjK5k= -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:21 2026 by rpki-client