$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa File: 5def59c5-37b7-3c90-bfa1-36532b4634f2.roa (raw, json) Hash identifier: 93sMZ7yNNI9Kqd8tnKcmXunalupg5XVylzMu+GZADPM= Subject key identifier: DE:40:3B:B2:B3:9B:C1:14:E6:9F:E3:60:7F:19:EC:AC:60:18:19:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5B34D4549434F4F904E8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 36618 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5b:34:d4:54:94:34:f4:f9:04:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=43e792c6-8ce9-4d1e-8e93-287cb4f00d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:de:db:63:1a:4c:b8:4f:0f:50:64:6b:0c: 0f:de:a2:7f:90:57:90:d0:3f:08:ee:49:04:75:46: ab:f8:ad:7c:d6:11:f7:bb:07:82:41:10:22:a5:11: d1:13:17:91:c6:b4:56:ac:d4:f2:94:65:4a:ae:f5: ac:2e:25:93:77:27:1c:47:f7:97:91:83:33:14:c8: 92:54:74:d4:81:0d:f6:0e:dd:cd:e4:67:02:4d:a8: 25:6c:fb:98:6c:a7:89:fe:46:d5:4e:fb:0e:55:bc: 1e:c5:ed:07:1f:60:20:49:f8:f2:46:04:ef:a2:4c: 5f:2f:58:a7:b8:f5:40:71:e1:ba:a7:d2:10:b4:2d: 0c:ba:bc:d7:e5:37:10:f1:f5:1d:ec:23:4b:f8:25: 7e:4b:28:7a:8d:9d:60:0f:e3:63:5b:b4:44:be:d6: a0:ad:b1:b9:47:14:09:49:50:b3:ce:c8:c0:10:48: 12:28:cd:da:dd:d7:d3:8b:27:df:31:ad:e8:f8:3d: 60:0e:49:39:c0:2f:25:24:24:28:1d:9c:a7:f2:b2: 16:c8:98:ed:53:88:bf:46:dc:bb:32:d2:10:e2:fe: 04:3a:70:75:b0:8c:1c:4d:a5:3c:fd:f5:21:c9:5b: a9:07:25:82:41:0e:09:a8:18:43:7c:86:e1:bd:72: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:3B:B2:B3:9B:C1:14:E6:9F:E3:60:7F:19:EC:AC:60:18:19:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5def59c5-37b7-3c90-bfa1-36532b4634f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8b:02:b6:22:37:7d:6e:de:dd:7c:50:16:bd:26:c4:3c:ba: 67:67:a8:3c:42:f1:b6:ab:aa:1a:88:81:31:82:7b:f0:f1:3a: 84:fe:5b:ab:62:22:43:20:94:15:0c:57:3b:f1:5e:7a:03:c1: 05:49:3b:ff:9f:86:e8:56:03:74:41:5b:e0:9a:ff:ba:7c:57: d5:0c:3b:66:55:95:24:58:36:f0:e3:88:16:89:df:96:0a:14: 72:fb:65:4f:47:03:80:19:4d:9c:1e:c8:1b:a2:80:62:9d:b2: e2:d3:4b:a0:99:d9:c5:55:48:0d:45:40:d8:32:9c:18:78:68: 16:39:7b:c3:e6:f9:07:56:53:6b:f8:ef:16:cf:7c:b3:fb:70: ac:6a:ec:16:c6:69:27:e9:8b:54:42:b6:2a:37:6a:ed:fe:5e: 36:e8:6b:70:21:ca:65:0a:24:83:2d:4e:76:c7:b2:76:fd:08: 1d:43:3a:5f:92:5f:42:c9:5b:8e:63:f9:6d:61:af:8e:24:4f: b0:65:1c:9d:45:cb:a2:c5:95:64:30:29:78:98:3f:0a:fd:b8: 97:75:a7:a8:bb:93:06:34:43:75:f8:6f:ec:52:ae:e6:89:d2: 72:ea:8f:a0:b5:95:d5:9c:a0:ff:37:eb:30:6f:cc:38:90:a2: 5f:6f:5f:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1s01FSUNPT5BOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk NDNlNzkyYzYtOGNlOS00ZDFlLThlOTMtMjg3Y2I0ZjAwZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKve22MaTLhPD1BkawwP3qJ/kFeQ0D8I7kkE dUar+K181hH3uweCQRAipRHRExeRxrRWrNTylGVKrvWsLiWTdyccR/eXkYMzFMiS VHTUgQ32Dt3N5GcCTaglbPuYbKeJ/kbVTvsOVbwexe0HH2AgSfjyRgTvokxfL1in uPVAceG6p9IQtC0MurzX5TcQ8fUd7CNL+CV+Syh6jZ1gD+NjW7REvtagrbG5RxQJ SVCzzsjAEEgSKM3a3dfTiyffMa3o+D1gDkk5wC8lJCQoHZyn8rIWyJjtU4i/Rty7 MtIQ4v4EOnB1sIwcTaU8/fUhyVupByWCQQ4JqBhDfIbhvXKb5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN5AO7Kzm8EU5p/jYH8Z7KxgGBmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWRlZjU5YzUtMzdiNy0z YzkwLWJmYTEtMzY1MzJiNDYzNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMiwK2Ijd9bt7dfFAWvSbEPLpnZ6g8QvG2q6oa iIExgnvw8TqE/lurYiJDIJQVDFc78V56A8EFSTv/n4boVgN0QVvgmv+6fFfVDDtm VZUkWDbw44gWid+WChRy+2VPRwOAGU2cHsgbooBinbLi00ugmdnFVUgNRUDYMpwY eGgWOXvD5vkHVlNr+O8Wz3yz+3CsauwWxmkn6YtUQrYqN2rt/l426GtwIcplCiSD LU52x7J2/QgdQzpfkl9CyVuOY/ltYa+OJE+wZRydRcuixZVkMCl4mD8K/biXdaeo u5MGNEN1+G/sUq7midJy6o+gtZXVnKD/N+swb8w4kKJfb18V -----END CERTIFICATE-----Generated at Fri Jul 24 05:20:53 2026 by rpki-client