$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa File: 924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json) Hash identifier: wucfi6fOac1XTtBmVL6yq5vif9mjqUFSvQG9A2r7Ecc= Subject key identifier: BD:81:E9:15:91:99:76:4D:CD:19:53:FA:E1:D7:05:B5:17:FD:4C:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7E94FF5E522E4D31008FB220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 7342 IP address blocks: 2620:74:6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ff:5e:52:2e:4d:31:00:8f:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=c2d38316-9aac-49d3-a546-7fcc31f1acdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:8c:c4:cf:95:77:c6:d8:ae:07:56:34:91: 1d:54:3d:ef:95:74:f8:11:1e:03:65:25:fe:57:06: b0:fc:1d:5f:32:11:e0:2e:6d:47:7b:7c:75:cd:e7: 5b:c2:83:4a:92:77:b1:7e:eb:2d:25:77:d2:79:b1: ca:bd:6e:44:62:dd:dd:f6:9e:e8:e4:cf:f6:6c:51: d8:ce:cd:20:26:a5:e7:dc:70:4d:bd:4b:73:cf:b7: 42:82:7f:2e:cd:dd:23:d3:3f:d2:6d:4e:71:32:5c: 94:e3:8a:b5:cf:f5:65:bf:68:62:0d:c8:f6:05:b3: fe:6e:fe:c5:9c:67:98:92:5b:1c:74:ab:54:4e:e7: c9:2c:09:cf:cc:83:ea:fc:07:a3:6d:97:74:12:30: da:41:a9:92:2d:38:70:e6:a8:8c:1e:af:79:fe:a8: 1c:22:49:35:88:f9:f7:82:f5:59:18:e8:9e:16:7d: 87:49:37:6e:5b:a0:17:53:b9:12:1a:88:b0:48:f5: c6:26:f5:82:79:3a:7d:ea:d9:fc:37:b0:8e:e3:58: 79:37:e6:3f:01:37:75:f2:ca:e6:0c:ba:70:cd:1e: 70:66:49:87:57:e0:3a:3a:88:d3:28:cb:12:a3:8e: 79:13:c5:a8:b5:f6:bd:af:cf:64:07:c1:3c:ad:9d: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:E9:15:91:99:76:4D:CD:19:53:FA:E1:D7:05:B5:17:FD:4C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:25:94:18:0c:81:64:ae:e5:f1:c5:f7:d0:3e:a5:cd:3a:51: b9:a8:e2:cc:b7:44:3d:3a:ac:3e:b3:b4:16:8e:bc:fe:ed:af: f5:55:46:85:f7:33:59:fa:1f:ee:1d:b3:14:ff:34:f3:7a:da: 81:75:99:48:1d:24:db:68:f8:79:99:07:b0:81:f2:c8:4b:eb: 7b:56:22:2d:8c:07:da:20:5a:9b:bd:c9:f0:34:96:76:ad:bd: c0:b5:81:2d:72:2a:b4:aa:31:ff:58:f2:ac:2b:c8:5c:95:f5: 2c:55:e4:3a:ba:c1:a9:e9:0f:54:5f:fe:fd:e6:90:54:30:68: d2:ad:57:3e:57:34:63:1a:5a:d6:f1:a5:08:b0:b9:a0:b5:3b: 4b:3b:64:7f:d8:a5:e1:70:e4:c4:a0:91:b9:a5:04:d4:1c:d4: fb:58:cc:0e:70:f9:27:65:2c:01:f5:08:f2:51:b0:8d:d0:cb: fa:27:8b:5c:b8:6d:40:de:b3:3f:52:27:db:f6:49:12:11:9b: af:3d:51:2e:81:1e:21:01:ed:40:72:81:a3:b4:79:92:37:1f: 87:12:90:6a:ff:51:a1:b1:41:77:c6:0d:7d:22:07:e3:6b:18: b8:db:21:9e:4a:79:21:b4:d7:e2:f6:73:54:6f:d4:d7:a6:22: 9b:41:03:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lP9eUi5NMQCPsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YzJkMzgzMTYtOWFhYy00OWQzLWE1NDYtN2ZjYzMxZjFhY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfyMxM+Vd8bYrgdWNJEdVD3vlXT4ER4DZSX+ Vwaw/B1fMhHgLm1He3x1zedbwoNKknexfustJXfSebHKvW5EYt3d9p7o5M/2bFHY zs0gJqXn3HBNvUtzz7dCgn8uzd0j0z/SbU5xMlyU44q1z/Vlv2hiDcj2BbP+bv7F nGeYklscdKtUTufJLAnPzIPq/AejbZd0EjDaQamSLThw5qiMHq95/qgcIkk1iPn3 gvVZGOieFn2HSTduW6AXU7kSGoiwSPXGJvWCeTp96tn8N7CO41h5N+Y/ATd18srm DLpwzR5wZkmHV+A6OojTKMsSo455E8Wotfa9r89kB8E8rZ2QLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL2B6RWRmXZNzRlT+uHXBbUX/Uw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTI0YTNlYzEtODc0Yy0z MTFlLTkyMDMtMzVkMWYxYjViOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcllBgMgWSu5fHF99A+pc06Ubmo4sy3RD06rD6ztBaOvP7tr/VV RoX3M1n6H+4dsxT/NPN62oF1mUgdJNto+HmZB7CB8shL63tWIi2MB9ogWpu9yfA0 lnatvcC1gS1yKrSqMf9Y8qwryFyV9SxV5Dq6wanpD1Rf/v3mkFQwaNKtVz5XNGMa WtbxpQiwuaC1O0s7ZH/YpeFw5MSgkbmlBNQc1PtYzA5w+SdlLAH1CPJRsI3Qy/on i1y4bUDesz9SJ9v2SRIRm689US6BHiEB7UBygaO0eZI3H4cSkGr/UaGxQXfGDX0i B+NrGLjbIZ5KeSG01+L2c1Rv1NemIptBA5Q= -----END CERTIFICATE-----Generated at Fri Jul 24 03:24:37 2026 by rpki-client