$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa File: a7eea992-e3da-31ef-98f7-dafc57d26c93.roa (raw, json) Hash identifier: e95MIdqhoPodDtF6f52igZFdbYR5JuEkgWiAscRZ0UY= Subject key identifier: DC:F9:73:50:0F:79:02:5A:6C:9F:60:AB:BF:C9:2C:6E:97:57:C4:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204C2AE8F9FCF4AD7683300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396571 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c2:ae:8f:9f:cf:4a:d7:68:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=f4aad684-0bb4-4343-bb68-e063eec92612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:b2:5b:c6:59:9d:3f:fb:e8:c7:32:00:5d: 96:6a:42:2e:24:38:e2:2c:78:91:7d:e5:ed:2a:a7: 81:f6:74:64:41:fe:f1:93:2e:5d:92:15:12:d8:7b: de:2d:20:7c:93:ae:40:76:0b:bb:47:e5:7b:f8:3b: 3c:e6:67:2d:c2:3c:fe:c5:02:bb:25:52:6b:45:09: 75:33:8e:e0:73:7b:b8:13:15:87:f6:10:6f:86:36: 3e:88:cf:34:8f:1c:8e:a2:87:34:43:c7:25:15:52: 51:6d:de:cd:93:d4:3e:c0:fb:2a:9b:53:fc:af:50: fc:bd:1c:64:e2:8d:b5:3b:fe:48:03:69:74:9d:19: 48:1a:88:f4:48:c5:b0:d0:8c:d2:e1:c0:a5:aa:a0: a2:0a:16:bd:53:04:0d:cd:a4:21:ad:16:55:cb:0e: 17:eb:8f:d1:dc:45:04:33:dd:a1:e3:4e:d5:7c:ad: b4:a7:7d:5d:01:c6:98:a9:92:26:3d:7f:53:9d:31: 0e:b6:5e:8d:bd:ea:c0:87:2a:eb:1f:a0:23:b7:a4: f6:33:05:1a:92:58:f3:9d:54:22:95:96:74:94:60: ed:e5:db:08:7a:a2:44:a4:10:f6:d6:15:eb:ba:d2: 7e:63:35:fc:5a:0e:bc:80:c0:09:8d:92:80:10:0f: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F9:73:50:0F:79:02:5A:6C:9F:60:AB:BF:C9:2C:6E:97:57:C4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2e:27:87:fd:07:7a:3a:02:0c:6d:4e:9c:08:85:e3:cd:d8: 99:8b:8e:2b:e3:ac:0b:2d:c0:a6:e9:e0:f2:ee:d7:23:cb:cc: 3b:ea:4c:47:e6:27:91:b4:cc:02:06:74:13:ec:5b:e0:1f:b7: 22:02:15:1c:07:ae:e8:b5:5a:fa:53:3b:92:d8:54:76:66:f5: 7e:44:0e:09:fd:78:e7:8a:0f:e7:6c:ec:e8:81:0d:27:46:d2: 3b:d0:9c:e5:41:5f:e9:0b:9d:fd:fd:60:1f:76:40:03:f4:1b: 2c:6d:c4:38:86:4e:8b:6e:31:10:5d:30:fe:af:7c:24:5b:a5: c9:c4:af:4e:0e:bc:c2:61:46:8d:d5:69:c2:05:ac:09:f7:74: d6:27:ae:7f:f9:14:7d:12:c7:5a:e3:46:ba:11:60:80:d6:ab: a7:e6:cb:e1:b5:dc:65:07:16:a3:e9:08:04:22:a7:01:f5:31: 67:14:23:64:9f:6f:6f:5f:13:5e:7e:0f:b0:86:09:bf:8c:79: ce:20:70:79:36:35:f4:21:9d:c0:2c:d8:4c:d6:b5:d3:1c:fd: 80:b2:d9:c8:b6:ce:61:43:58:11:a8:8f:be:4f:65:23:87:9c: 9c:6f:34:26:0b:5f:f4:49:db:36:d7:15:bd:4c:28:39:b2:bd: e9:7f:4b:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMKuj5/PStdoMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZjRhYWQ2ODQtMGJiNC00MzQzLWJiNjgtZTA2M2VlYzkyNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK2yW8ZZnT/76McyAF2WakIuJDjiLHiRfeXt KqeB9nRkQf7xky5dkhUS2HveLSB8k65Adgu7R+V7+Ds85mctwjz+xQK7JVJrRQl1 M47gc3u4ExWH9hBvhjY+iM80jxyOooc0Q8clFVJRbd7Nk9Q+wPsqm1P8r1D8vRxk 4o21O/5IA2l0nRlIGoj0SMWw0IzS4cClqqCiCha9UwQNzaQhrRZVyw4X64/R3EUE M92h407VfK20p31dAcaYqZImPX9TnTEOtl6NverAhyrrH6Ajt6T2MwUakljznVQi lZZ0lGDt5dsIeqJEpBD21hXrutJ+YzX8Wg68gMAJjZKAEA+LGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNz5c1APeQJabJ9gq7/JLG6XV8QSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlZWE5OTItZTNkYS0z MWVmLTk4ZjctZGFmYzU3ZDI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYuJ4f9B3o6AgxtTpwIhePN2JmLjivjrAstwKbp4PLu1yPLzDvq TEfmJ5G0zAIGdBPsW+AftyICFRwHrui1WvpTO5LYVHZm9X5EDgn9eOeKD+ds7OiB DSdG0jvQnOVBX+kLnf39YB92QAP0GyxtxDiGTotuMRBdMP6vfCRbpcnEr04OvMJh Ro3VacIFrAn3dNYnrn/5FH0Sx1rjRroRYIDWq6fmy+G13GUHFqPpCAQipwH1MWcU I2Sfb29fE15+D7CGCb+Mec4gcHk2NfQhncAs2EzWtdMc/YCy2ci2zmFDWBGoj75P ZSOHnJxvNCYLX/RJ2zbXFb1MKDmyvel/S7U= -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:19 2026 by rpki-client