$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa File: 501a8a2f-40a3-33f1-af80-31368c8026b6.roa (raw, json) Hash identifier: +aTGQ1C7Gkhz07i7hLY/frmdKtZ9iaz5Tw950KOlf0k= Subject key identifier: BB:30:92:48:E1:7C:E4:CE:D5:11:AC:4E:F1:02:0A:02:A4:F9:CE:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DD0200EFD39FFEC21A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396592 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:dd:02:00:ef:d3:9f:fe:c2:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=c89cc852-54f0-4b0a-b932-daca3f1d5a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:57:70:9f:18:88:83:b7:fa:60:34:43:c3: ec:52:7c:5b:e9:0f:84:28:26:bc:90:49:54:67:ba: 68:ce:d9:db:d5:73:b0:6b:13:69:99:6b:60:93:cf: 2d:7f:5c:39:c4:bc:f6:2a:fe:df:1f:ae:90:09:74: 5b:ba:32:df:23:13:d3:7a:54:00:11:93:87:4e:fb: 6b:62:9e:38:c2:60:a7:fd:4d:e4:ef:2b:ab:80:b6: 70:aa:52:1a:26:94:53:6b:e8:74:32:5c:03:16:65: 56:e7:87:1d:eb:57:7c:6e:86:06:e8:58:d3:da:6e: 6f:82:ac:34:46:4b:fa:9f:89:fd:3f:d3:0f:17:f5: 18:e2:18:8a:e3:b3:d5:e3:22:38:9c:35:38:61:cc: b6:f7:2c:b4:c3:27:3a:ca:36:58:90:6e:52:79:53: 18:53:9b:b6:f3:0c:76:ba:e8:a6:62:58:24:6a:6f: 39:c5:d1:45:d3:81:af:a8:48:ab:5e:7d:45:a2:d9: 79:fe:97:af:98:00:67:f9:63:5d:06:74:57:e8:b0: 8f:9c:a3:77:7f:d3:95:cb:72:35:ff:35:82:2d:70: c4:0d:6d:b3:13:0c:5c:b5:9a:5e:41:31:f9:5d:91: 14:7f:c2:96:b4:01:e0:eb:b3:ac:ff:bc:5b:22:e5: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:92:48:E1:7C:E4:CE:D5:11:AC:4E:F1:02:0A:02:A4:F9:CE:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b5:6c:b4:67:52:40:5f:06:89:83:3a:dc:93:cf:5e:cf:a2: c4:14:05:69:05:f1:6e:80:bd:05:ec:8a:90:a8:43:f1:62:be: 5a:60:6d:2a:f3:b3:62:71:95:81:42:36:bd:f8:8a:14:6e:61: 90:06:21:92:0e:69:dc:f3:6b:49:d9:79:18:cf:71:ce:f1:4e: b7:cb:ff:eb:af:30:3d:58:09:5b:02:3c:dd:f0:e8:18:ec:6c: ae:55:ab:28:8c:51:d9:ac:9c:4a:f4:52:69:5a:cc:f4:85:0e: 05:46:b6:0f:3e:58:78:57:06:ed:32:0a:6c:28:6e:3a:f8:34: de:1a:3b:d5:6a:57:ce:59:1e:01:12:24:a5:e7:03:f6:86:7d: 53:85:6d:dc:0b:3d:4c:6f:f1:c5:07:f2:4b:dc:4e:b9:93:05: 8e:07:af:5f:17:a6:0c:10:cd:84:60:af:18:6c:3a:c2:b3:c1: 71:b6:a7:0d:48:90:03:a6:c1:3b:1b:66:71:fa:67:1a:a8:f9: 5e:e8:1f:03:66:21:d0:f0:54:a1:2b:78:a5:a8:7e:28:ea:25: d2:e9:04:6d:06:b9:6f:d5:d7:05:fa:3e:15:fb:b3:a8:4e:96: f3:8a:27:46:71:90:3c:70:6e:a8:a1:10:6b:6b:c1:7a:da:f1: bf:7d:b9:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN0CAO/Tn/7CGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Yzg5Y2M4NTItNTRmMC00YjBhLWI5MzItZGFjYTNmMWQ1YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb9XcJ8YiIO3+mA0Q8PsUnxb6Q+EKCa8kElU Z7poztnb1XOwaxNpmWtgk88tf1w5xLz2Kv7fH66QCXRbujLfIxPTelQAEZOHTvtr Yp44wmCn/U3k7yurgLZwqlIaJpRTa+h0MlwDFmVW54cd61d8boYG6FjT2m5vgqw0 Rkv6n4n9P9MPF/UY4hiK47PV4yI4nDU4Ycy29yy0wyc6yjZYkG5SeVMYU5u28wx2 uuimYlgkam85xdFF04GvqEirXn1Fotl5/pevmABn+WNdBnRX6LCPnKN3f9OVy3I1 /zWCLXDEDW2zEwxctZpeQTH5XZEUf8KWtAHg67Os/7xbIuWtoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLswkkjhfOTO1RGsTvECCgKk+c7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAxYThhMmYtNDBhMy0z M2YxLWFmODAtMzEzNjhjODAyNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAa1bLRnUkBfBomDOtyTz17PosQUBWkF8W6AvQXsipCoQ/Fivlpg bSrzs2JxlYFCNr34ihRuYZAGIZIOadzza0nZeRjPcc7xTrfL/+uvMD1YCVsCPN3w 6BjsbK5VqyiMUdmsnEr0UmlazPSFDgVGtg8+WHhXBu0yCmwobjr4NN4aO9VqV85Z HgESJKXnA/aGfVOFbdwLPUxv8cUH8kvcTrmTBY4Hr18XpgwQzYRgrxhsOsKzwXG2 pw1IkAOmwTsbZnH6Zxqo+V7oHwNmIdDwVKEreKWofijqJdLpBG0GuW/V1wX6PhX7 s6hOlvOKJ0ZxkDxwbqihEGtrwXra8b99uTQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:19:40 2026 by rpki-client