$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7c606127-3be2-35db-a217-a488ba1744a5.roa File: 7c606127-3be2-35db-a217-a488ba1744a5.roa (raw, json) Hash identifier: toRg3JUOFiDeZ00J5IWa9wKUTQkybAEgFA7iG3wCQj0= Subject key identifier: 21:BF:BF:9E:AF:DD:19:66:42:9A:2E:52:F6:C1:2C:86:37:89:B8:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5AAE69E919344571FFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7c606127-3be2-35db-a217-a488ba1744a5.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 396561 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5a:ae:69:e9:19:34:45:71:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=c2840318-0713-47a1-ae28-430424f5114f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:1d:f8:dc:fb:f7:13:6c:38:fd:8c:28:4e: c6:7f:f8:69:6d:26:b1:a3:0f:6e:d6:62:90:9b:6a: 2e:eb:f2:a0:d1:9a:48:d0:43:9e:b3:12:6a:b9:15: 00:65:fc:fc:43:96:8e:71:c7:1d:67:91:0b:15:b8: a2:07:e9:83:cc:74:44:35:30:fb:4d:84:48:e5:0f: dc:4a:33:40:7d:e1:59:93:5a:d2:49:c9:59:7e:2a: 8f:12:da:ba:18:16:9d:35:68:cb:13:cd:90:92:7e: 5e:58:52:3f:79:7a:2c:77:c6:75:9c:d9:8e:7b:63: 81:97:12:4d:e5:99:77:1f:53:fa:5f:1c:58:b8:d4: 59:7f:ec:c7:ed:f7:61:cf:b0:90:e1:62:1f:82:cd: 7f:65:98:c9:1e:3b:a8:99:f9:fb:2e:48:53:05:7e: d0:2d:de:7b:20:ed:57:31:15:df:15:28:bc:a5:b0: c5:cf:b0:21:b7:ee:32:35:11:13:41:04:2c:d3:5b: da:93:28:dc:8f:28:0f:8b:67:71:09:70:6e:81:6e: b0:1d:a2:fa:e0:fb:52:00:67:85:5d:5c:a7:14:c9: 7d:4a:bc:dc:57:90:1d:79:09:2e:96:5d:6e:af:42: f6:46:69:6b:23:2a:a7:37:44:51:0c:c9:af:01:de: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:BF:9E:AF:DD:19:66:42:9A:2E:52:F6:C1:2C:86:37:89:B8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7c606127-3be2-35db-a217-a488ba1744a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bc:40:c2:88:82:c8:1c:9b:64:26:32:d2:12:61:31:dd:3c: bb:44:58:8d:01:71:56:3c:07:62:d1:74:50:a9:d1:9a:34:72: bb:64:88:77:4a:63:24:05:f5:a7:4a:2f:bb:fe:e1:99:b6:4e: 82:b4:22:3a:c7:af:7d:12:39:5b:93:5d:41:82:b9:72:f6:7e: eb:be:25:e4:5c:64:a1:d6:b8:53:69:16:ea:ee:e3:93:08:a1: 5e:44:7d:7e:ff:c9:1a:9f:68:0a:76:0a:41:3f:b6:67:1f:dd: 0d:1b:68:82:f3:4d:c1:e1:14:14:5d:5b:cc:99:52:d7:67:ee: d8:59:79:d9:b9:f2:25:a7:60:02:5f:bf:5f:96:04:9a:cc:09: e0:05:05:e7:1c:0b:a1:7c:7f:09:4c:b7:1f:60:3e:d5:2f:ca: 08:ae:91:1f:72:87:cb:4c:9a:c5:e4:6f:0f:94:15:e5:b9:d1: 12:15:54:13:5a:28:60:64:91:cb:54:ae:5d:26:b0:65:a8:42: 70:75:28:f3:d9:88:ef:fb:d7:e4:3c:2e:dd:33:04:a1:57:9a: 11:09:18:c8:91:e0:74:ed:d9:43:84:0e:ab:ba:7e:84:93:73: 52:d7:68:d7:44:3a:21:e6:a2:6f:2f:12:b9:98:36:dc:58:06: d5:76:6f:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1quaekZNEVx/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YzI4NDAzMTgtMDcxMy00N2ExLWFlMjgtNDMwNDI0ZjUxMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfId+Nz79xNsOP2MKE7Gf/hpbSaxow9u1mKQ m2ou6/Kg0ZpI0EOesxJquRUAZfz8Q5aOcccdZ5ELFbiiB+mDzHRENTD7TYRI5Q/c SjNAfeFZk1rSSclZfiqPEtq6GBadNWjLE82Qkn5eWFI/eXosd8Z1nNmOe2OBlxJN 5Zl3H1P6XxxYuNRZf+zH7fdhz7CQ4WIfgs1/ZZjJHjuomfn7LkhTBX7QLd57IO1X MRXfFSi8pbDFz7Aht+4yNRETQQQs01vakyjcjygPi2dxCXBugW6wHaL64PtSAGeF XVynFMl9SrzcV5AdeQkull1ur0L2RmlrIyqnN0RRDMmvAd6AeQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCG/v56v3RlmQpouUvbBLIY3ibj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2M2MDYxMjctM2JlMi0z NWRiLWEyMTctYTQ4OGJhMTc0NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQvEDCiILIHJtkJjLSEmEx3Ty7RFiNAXFWPAdi 0XRQqdGaNHK7ZIh3SmMkBfWnSi+7/uGZtk6CtCI6x699Ejlbk11Bgrly9n7rviXk XGSh1rhTaRbq7uOTCKFeRH1+/8kan2gKdgpBP7ZnH90NG2iC803B4RQUXVvMmVLX Z+7YWXnZufIlp2ACX79flgSazAngBQXnHAuhfH8JTLcfYD7VL8oIrpEfcofLTJrF 5G8PlBXludESFVQTWihgZJHLVK5dJrBlqEJwdSjz2Yjv+9fkPC7dMwShV5oRCRjI keB07dlDhA6run6Ek3NS12jXRDoh5qJvLxK5mDbcWAbVdm82 -----END CERTIFICATE-----Generated at Fri Jul 24 09:32:15 2026 by rpki-client