$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa File: b1ee3038-ef24-3677-9eef-55387c02c99e.roa (raw, json) Hash identifier: AvRO2FMrxTVycndMpsr2PHxNxUBX7Bw2Qi4AAusfL3Y= Subject key identifier: C3:B2:EF:60:F3:AA:53:E8:AB:D2:00:2A:EB:93:82:56:E6:42:AE:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5AA38D7C594DE6AEA1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 396552 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5a:a3:8d:7c:59:4d:e6:ae:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=171a37b6-518e-4de3-9aeb-552cea31f093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:9f:fe:c3:48:4d:d1:de:cf:8a:16:56:45: ae:6a:c4:df:01:dd:b1:97:bc:f9:87:3d:67:90:38: d2:90:ca:a8:5e:11:54:56:2e:2b:4d:1c:5f:a0:4e: d6:f1:22:cb:18:3f:97:2f:ed:26:73:75:ea:d8:06: aa:9a:29:e3:67:f3:cb:a5:2e:11:a6:02:4d:d1:a6: 7d:8c:51:dc:83:0f:e1:e1:04:62:90:cc:c4:90:04: 0f:ae:86:d5:85:fe:ea:fa:fa:ac:5f:1d:8a:bb:2a: b9:c1:0f:6b:92:cd:cd:0b:88:4c:f9:e7:21:16:87: 0e:ae:64:bd:df:04:9c:87:3b:b8:e9:ea:78:8d:68: e7:7a:d4:9e:f9:8f:c4:fc:ff:5e:7f:1c:89:a4:1f: 5e:8e:3d:30:f3:3f:aa:fd:e4:e0:68:75:5c:f1:cb: 93:06:0c:81:a6:d8:54:ba:84:14:08:d2:87:51:1d: ef:25:aa:09:92:dd:30:55:4f:e2:17:2a:3f:f6:67: ee:34:f6:82:28:7c:b3:52:4e:4f:a0:be:3e:e6:0e: b7:b0:24:c7:b1:1e:a2:3f:c2:79:5f:c2:d0:5d:27: 17:e4:59:40:9b:65:1e:f4:e1:17:bc:58:10:f5:88: 85:11:72:c7:c9:52:58:5d:e6:f6:e0:45:87:36:28: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:EF:60:F3:AA:53:E8:AB:D2:00:2A:EB:93:82:56:E6:42:AE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1ee3038-ef24-3677-9eef-55387c02c99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f1:ed:31:63:29:53:7d:f9:5d:9c:83:eb:a3:22:94:8b:d0: 76:c7:61:f0:c3:bd:1c:7d:d7:a6:25:b8:70:44:15:ec:2c:b5: 23:09:ad:d9:29:e9:95:84:51:71:8f:e0:42:a5:14:f2:88:08: 58:10:fe:fb:24:ee:96:e6:2e:2e:1f:76:8c:5f:f7:3f:81:37: dd:d2:1b:5b:22:a8:f1:3a:61:f8:da:7d:92:91:43:2e:f0:25: 18:1d:01:5c:b5:93:f2:87:01:6e:9b:cb:b1:34:d5:e8:0b:74: 92:c9:4f:97:e9:b5:0e:e9:3e:1d:29:49:64:63:35:65:96:6a: b2:b2:27:85:60:be:4d:71:19:05:31:d9:57:f2:16:dd:76:14: 66:04:cc:7e:95:3a:b3:4e:77:6b:89:5e:a4:08:e9:50:8a:5a: b7:27:67:e3:89:6e:50:8f:ef:0e:4f:ba:5a:fa:3f:f7:60:c7: 92:06:5b:b7:36:cb:e5:54:59:77:42:2b:e3:61:1f:b1:02:fb: 1d:de:77:59:3b:11:9a:d8:ef:8e:7c:ac:47:a9:73:72:c8:ac: 42:bc:23:6b:89:fb:10:11:c9:87:6b:e2:91:49:0d:49:ca:b3: 17:a2:16:fa:00:c9:20:74:93:0d:12:ad:c2:fd:70:32:d1:fa: 9a:ef:98:f7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1qjjXxZTeauocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk MTcxYTM3YjYtNTE4ZS00ZGUzLTlhZWItNTUyY2VhMzFmMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWf/sNITdHez4oWVkWuasTfAd2xl7z5hz1n kDjSkMqoXhFUVi4rTRxfoE7W8SLLGD+XL+0mc3Xq2AaqminjZ/PLpS4RpgJN0aZ9 jFHcgw/h4QRikMzEkAQProbVhf7q+vqsXx2Kuyq5wQ9rks3NC4hM+echFocOrmS9 3wSchzu46ep4jWjnetSe+Y/E/P9efxyJpB9ejj0w8z+q/eTgaHVc8cuTBgyBpthU uoQUCNKHUR3vJaoJkt0wVU/iFyo/9mfuNPaCKHyzUk5PoL4+5g63sCTHsR6iP8J5 X8LQXScX5FlAm2Ue9OEXvFgQ9YiFEXLHyVJYXeb24EWHNih0tQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMOy72DzqlPoq9IAKuuTglbmQq6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFlZTMwMzgtZWYyNC0z Njc3LTllZWYtNTUzODdjMDJjOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBB8e0xYylTffldnIProyKUi9B2x2Hww70cfdem JbhwRBXsLLUjCa3ZKemVhFFxj+BCpRTyiAhYEP77JO6W5i4uH3aMX/c/gTfd0htb IqjxOmH42n2SkUMu8CUYHQFctZPyhwFum8uxNNXoC3SSyU+X6bUO6T4dKUlkYzVl lmqysieFYL5NcRkFMdlX8hbddhRmBMx+lTqzTndriV6kCOlQilq3J2fjiW5Qj+8O T7pa+j/3YMeSBlu3NsvlVFl3QivjYR+xAvsd3ndZOxGa2O+OfKxHqXNyyKxCvCNr ifsQEcmHa+KRSQ1JyrMXohb6AMkgdJMNEq3C/XAy0fqa75j3 -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:49 2026 by rpki-client