$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa File: 9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa (raw, json) Hash identifier: PcAd+GJ+PkPpq0sm52XG8KJvn9LmDvefIm2lXSNDJ3E= Subject key identifier: 23:F6:AF:E0:F2:46:E5:3E:38:67:A4:FC:2B:36:12:CB:A5:5D:5B:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5BBC5F402483CB1E1480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 397201 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5b:bc:5f:40:24:83:cb:1e:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=9d8b4654-4390-43f6-8a38-c2e056d23cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:69:48:06:5b:3e:16:87:ae:c0:74:ac:79: 5d:5c:27:f1:77:7b:72:5a:69:79:64:eb:b2:cd:e8: ec:5c:81:c9:37:db:09:46:9a:bd:b0:78:1d:7f:80: 60:a1:cf:31:88:cf:d2:c3:6d:7f:35:1d:15:ea:fa: f0:04:6c:7c:a6:e3:42:83:c5:f1:fc:76:ca:c4:9a: 01:8f:4d:66:c0:52:39:3b:1c:b0:7e:b1:98:91:c7: 30:d6:f5:6b:92:f5:74:09:c4:30:e2:81:30:4f:d7: 96:4f:00:7e:27:bb:8e:a8:da:5b:a3:cd:18:00:3e: de:59:01:a8:5c:ed:a7:30:00:92:54:2a:af:62:dd: 19:62:76:f9:41:c7:c5:ac:c6:50:14:1e:b3:6d:8f: a7:5e:24:0e:ca:ea:c3:1c:af:74:57:28:cf:ac:2f: 0c:8a:a9:85:ec:31:51:60:b5:4d:4e:56:9a:ee:ba: ba:b3:4b:17:a4:14:e7:a8:8e:7c:4f:90:33:80:ea: 19:5a:63:58:6f:cd:d7:59:d6:00:44:f3:9b:71:6b: 5f:cc:cf:4c:b1:be:81:3a:66:f7:b8:78:b5:dd:5e: 1d:80:34:21:04:18:fd:4a:e3:f3:61:ef:a8:9e:b3: 9f:2f:c7:5c:47:76:13:3a:58:50:08:af:74:19:8c: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F6:AF:E0:F2:46:E5:3E:38:67:A4:FC:2B:36:12:CB:A5:5D:5B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ea497da-cb04-340f-aa7e-13ed7e7deb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:67:3f:83:04:99:fa:b9:f4:a0:d9:74:5c:1f:10:2f:dd:0e: da:88:bb:51:6f:ba:f2:54:d4:6b:33:54:a4:e0:2e:bb:72:01: 1f:81:c1:86:2c:83:0f:f5:2c:13:4b:c8:56:86:10:bf:b8:ba: 97:97:f4:69:40:93:41:9c:01:8f:5b:ac:44:d1:81:cb:89:32: 5a:d0:8c:00:b1:04:22:75:ce:0d:45:db:53:f4:da:1b:5d:70: cc:94:94:b1:c2:94:d6:d4:30:39:47:1b:80:4d:21:05:33:d3: 75:ec:fd:7d:09:0f:18:8d:02:2f:2d:83:5b:94:88:bc:c0:91: f6:dc:eb:e3:9d:0a:64:3c:8d:e4:8e:5b:79:4c:54:30:39:93: 3c:39:f4:8d:85:70:be:87:c3:53:ca:e6:e9:61:ec:57:73:89: 85:45:c9:a5:eb:6b:49:4b:65:d4:7d:b3:ab:f7:d5:6a:2b:bc: 58:66:5e:f1:a2:85:b3:eb:de:38:bb:58:b6:2a:14:0e:77:ea: c7:97:8f:66:33:14:4b:97:48:0d:71:57:3e:b3:61:44:25:1a: 59:9d:6d:c2:bf:2c:53:2d:2d:40:a7:f5:cc:de:30:7d:dc:54: 68:f1:8d:e0:0c:b0:df:2d:be:45:47:43:9c:72:4e:c9:de:24: 6f:1b:84:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1u8X0Akg8seFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk OWQ4YjQ2NTQtNDM5MC00M2Y2LThhMzgtYzJlMDU2ZDIzY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHtpSAZbPhaHrsB0rHldXCfxd3tyWml5ZOuy zejsXIHJN9sJRpq9sHgdf4Bgoc8xiM/Sw21/NR0V6vrwBGx8puNCg8Xx/HbKxJoB j01mwFI5OxywfrGYkccw1vVrkvV0CcQw4oEwT9eWTwB+J7uOqNpbo80YAD7eWQGo XO2nMACSVCqvYt0ZYnb5QcfFrMZQFB6zbY+nXiQOyurDHK90VyjPrC8MiqmF7DFR YLVNTlaa7rq6s0sXpBTnqI58T5AzgOoZWmNYb83XWdYARPObcWtfzM9Msb6BOmb3 uHi13V4dgDQhBBj9SuPzYe+onrOfL8dcR3YTOlhQCK90GYwbuwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCP2r+DyRuU+OGek/Cs2EsulXVvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVhNDk3ZGEtY2IwNC0z NDBmLWFhN2UtMTNlZDdlN2RlYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRZz+DBJn6ufSg2XRcHxAv3Q7aiLtRb7ryVNRr M1Sk4C67cgEfgcGGLIMP9SwTS8hWhhC/uLqXl/RpQJNBnAGPW6xE0YHLiTJa0IwA sQQidc4NRdtT9NobXXDMlJSxwpTW1DA5RxuATSEFM9N17P19CQ8YjQIvLYNblIi8 wJH23OvjnQpkPI3kjlt5TFQwOZM8OfSNhXC+h8NTyubpYexXc4mFRcml62tJS2XU fbOr99VqK7xYZl7xooWz6944u1i2KhQOd+rHl49mMxRLl0gNcVc+s2FEJRpZnW3C vyxTLS1Ap/XM3jB93FRo8Y3gDLDfLb5FR0Occk7J3iRvG4R5 -----END CERTIFICATE-----Generated at Fri Jul 24 02:46:06 2026 by rpki-client