$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa File: 9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa (raw, json) Hash identifier: DB6bHBA861AqeHP2HglTY098+CcYPLRYFu/qsiz15ys= Subject key identifier: 48:50:01:B9:34:DE:B4:57:38:E8:C5:9F:05:67:42:73:CD:50:64:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5AF229346F3741A35140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 20431 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5a:f2:29:34:6f:37:41:a3:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=42856752-f5a0-4e65-986a-e3f663159259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:41:b8:45:6d:cf:d1:89:25:fa:6f:47:63: 47:b4:6e:f0:cc:73:5c:09:9e:2b:ba:88:d4:f7:29: 94:c8:fa:db:f7:70:d9:71:98:a6:e4:af:d5:7d:c1: 79:8c:bf:3f:7e:b1:ab:93:20:cc:02:36:93:5f:b3: 92:e8:2a:f3:43:05:9f:50:2e:70:9a:63:60:b6:4c: a0:46:71:e0:a5:f3:8f:5c:16:19:5e:ef:db:7a:54: 40:3e:33:e4:ac:55:a0:b3:e5:e9:cf:e6:43:a0:0d: 6e:31:30:bb:93:59:2c:73:90:5b:8b:3e:71:23:76: fb:08:85:a1:87:89:f0:95:bd:cd:2b:21:60:15:c5: ef:9a:a3:f2:58:81:71:20:05:17:ed:d3:94:ba:60: c0:e9:cc:bc:03:5c:b0:10:9c:28:2c:41:db:b0:93: 9e:fe:37:2a:a3:9e:3a:1f:bf:39:80:90:21:b2:27: af:6d:5e:99:e0:9e:d3:27:99:6f:2e:a6:38:37:08: 69:e2:80:6d:b3:99:8f:11:b3:55:d5:bb:37:41:d9: a3:4a:ee:43:f0:ee:ae:15:92:39:17:e9:17:44:31: 6b:e0:3f:50:5a:6d:61:11:87:b6:87:5b:01:d8:73: 57:66:69:4e:56:f8:ab:7d:c0:76:ab:ef:54:b0:c3: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:50:01:B9:34:DE:B4:57:38:E8:C5:9F:05:67:42:73:CD:50:64:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c0ab9e4-1bc6-3e91-8518-6ced68a2131a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:76:ef:19:6c:c5:23:db:09:88:c5:04:2c:a3:97:ee:6e:96: 76:54:7c:dc:a1:d1:f9:12:ba:15:c1:b8:3c:8a:69:9e:64:5b: 31:fe:8c:4a:b4:35:50:86:64:46:94:ae:f7:20:91:83:6f:e5: 8d:0f:24:0e:a0:f8:1e:00:4d:d1:b8:52:75:57:30:cb:3f:4a: 56:cc:28:e5:3f:75:50:52:ad:a8:e7:72:98:9c:81:9e:49:c7: 81:77:e6:65:4a:2b:7e:3f:20:fc:13:28:85:b2:37:8f:dc:7e: bd:75:58:8a:73:c6:c8:10:83:4e:30:0d:06:10:0a:81:00:40: ac:0e:bb:78:85:7d:f9:e7:30:38:32:a1:9c:f8:d2:54:cd:69: b3:ba:0b:7a:ef:b0:b5:4e:14:3a:ce:86:a5:ed:61:b6:df:f3: 86:e6:5a:fe:a5:b6:45:7f:9d:9b:e4:bb:51:4a:a2:60:7a:40: fd:13:04:58:b1:cd:65:48:ee:0b:0e:63:4f:31:ea:f1:f9:ad: b6:e9:43:de:c1:8d:a1:aa:23:5f:f0:ff:d0:13:17:7b:c5:74: 96:76:98:9c:02:0b:62:ee:5c:c0:25:72:d5:c4:09:11:3c:6b: d1:57:94:8a:25:2c:0f:dc:cf:4a:9d:1a:ec:60:06:7d:10:28: e3:4f:31:90 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1ryKTRvN0GjUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk NDI4NTY3NTItZjVhMC00ZTY1LTk4NmEtZTNmNjYzMTU5MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI5BuEVtz9GJJfpvR2NHtG7wzHNcCZ4ruojU 9ymUyPrb93DZcZim5K/VfcF5jL8/frGrkyDMAjaTX7OS6CrzQwWfUC5wmmNgtkyg RnHgpfOPXBYZXu/belRAPjPkrFWgs+Xpz+ZDoA1uMTC7k1ksc5Bbiz5xI3b7CIWh h4nwlb3NKyFgFcXvmqPyWIFxIAUX7dOUumDA6cy8A1ywEJwoLEHbsJOe/jcqo546 H785gJAhsievbV6Z4J7TJ5lvLqY4Nwhp4oBts5mPEbNV1bs3QdmjSu5D8O6uFZI5 F+kXRDFr4D9QWm1hEYe2h1sB2HNXZmlOVvirfcB2q+9UsMOEKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEhQAbk03rRXOOjFnwVnQnPNUGReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWMwYWI5ZTQtMWJjNi0z ZTkxLTg1MTgtNmNlZDY4YTIxMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARdu8ZbMUj2wmIxQQso5fubpZ2VHzcodH5EroV wbg8immeZFsx/oxKtDVQhmRGlK73IJGDb+WNDyQOoPgeAE3RuFJ1VzDLP0pWzCjl P3VQUq2o53KYnIGeSceBd+ZlSit+PyD8EyiFsjeP3H69dViKc8bIEINOMA0GEAqB AECsDrt4hX355zA4MqGc+NJUzWmzugt677C1ThQ6zoal7WG23/OG5lr+pbZFf52b 5LtRSqJgekD9EwRYsc1lSO4LDmNPMerx+a226UPewY2hqiNf8P/QExd7xXSWdpic Agti7lzAJXLVxAkRPGvRV5SKJSwP3M9KnRrsYAZ9ECjjTzGQ -----END CERTIFICATE-----Generated at Fri Jul 24 04:33:15 2026 by rpki-client