$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa File: b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa (raw, json) Hash identifier: GhuzFcqY1xPfhB4zHMLlVX8/M6AZPTV+Xx3BLzG9Hko= Subject key identifier: 0C:E9:17:3D:B9:0E:0B:14:3F:78:3C:07:3E:51:B5:2D:44:3D:C1:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E8DEFA7C19872CA6C5A6DC1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 2620:74:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:a7:c1:98:72:ca:6c:5a:6d:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=73fa59c0-dcfc-4312-8d0f-7f2aec8fe821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:93:35:75:50:84:b3:49:6e:9a:80:3d:36: 0d:d9:9e:a8:cf:5a:a1:52:d4:58:e8:7a:6f:cf:90: 8d:17:92:a7:64:68:73:7a:71:2a:c6:7b:40:65:90: b5:2d:6e:e2:48:58:ee:6b:d1:92:fb:1a:e3:ad:aa: 16:0f:1e:ad:ed:e1:fb:4a:35:c8:d4:60:bf:64:e5: cb:c5:56:8b:27:97:c2:0e:bb:c8:ee:e9:4a:c7:f8: fb:8d:11:fc:fd:55:b7:6d:60:b8:55:98:b6:6b:a6: ce:45:82:80:80:94:c1:de:db:ff:f4:25:e9:f5:4b: fe:4e:bd:03:46:8a:c1:50:63:93:39:6c:d7:95:69: c3:a7:eb:0a:78:e1:17:1c:26:62:00:05:07:bb:4c: 7b:c7:48:ed:e9:90:20:87:17:82:5d:14:b4:2c:b6: 43:21:78:fb:c1:0b:a3:d2:67:6a:c5:fc:a1:cb:b3: 35:d6:30:2f:18:26:ad:eb:a9:b4:30:6c:e7:27:44: 6d:9c:f2:9b:c0:cc:b6:4a:c6:ac:4b:f9:65:d8:d9: 41:da:18:58:01:0c:45:3a:8e:50:e1:07:c9:57:57: 0d:fe:82:9c:97:49:ef:a5:bd:3a:98:17:d6:69:2c: 2b:79:5b:9a:84:32:c9:10:56:f8:c7:71:9c:e3:d7: 15:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:17:3D:B9:0E:0B:14:3F:78:3C:07:3E:51:B5:2D:44:3D:C1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:12:b1:c5:6a:66:66:f9:22:24:89:29:94:5e:d1:09:ba:39: 51:12:85:eb:08:46:af:2f:ae:f9:23:c5:5b:2d:5b:3a:b9:39: fa:76:0a:22:8d:03:5f:27:8e:1c:c9:16:23:dc:56:24:1a:cd: f1:86:b7:7d:11:b5:35:21:49:8d:c1:ee:18:8d:c8:a6:ce:1d: 02:c2:77:39:4c:f8:7c:9b:46:76:9d:d8:e1:aa:33:c6:05:17: bf:5d:75:bb:a6:0f:33:cf:2a:d9:06:02:3e:90:66:8d:f6:ef: 6e:15:a0:ae:b9:79:ac:77:f6:af:af:80:01:da:d4:3f:68:68: 54:8b:de:7f:d7:ae:50:d7:1e:f8:5a:11:9a:5d:8c:c5:0d:1b: 8d:2f:a6:63:c3:ae:42:23:6b:07:48:c3:89:c7:b8:22:17:89: b9:47:c2:fc:61:fa:ae:3e:80:ad:96:b2:bb:1e:f5:d8:eb:b3: 66:22:85:13:82:1a:ef:ac:e6:86:03:18:ee:97:12:c2:f2:0b: b9:61:1c:fe:f6:e0:7a:18:54:8a:be:08:3b:e7:1f:99:72:59: c0:06:4f:8f:df:2e:4d:c6:49:d6:32:ca:8f:42:00:17:61:eb: fe:db:01:b6:40:24:1c:82:64:48:eb:aa:80:d0:c7:b5:d5:51: 74:c5:c9:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6N76fBmHLKbFptwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NzNmYTU5YzAtZGNmYy00MzEyLThkMGYtN2YyYWVjOGZlODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuWTNXVQhLNJbpqAPTYN2Z6oz1qhUtRY6Hpv z5CNF5KnZGhzenEqxntAZZC1LW7iSFjua9GS+xrjraoWDx6t7eH7SjXI1GC/ZOXL xVaLJ5fCDrvI7ulKx/j7jRH8/VW3bWC4VZi2a6bORYKAgJTB3tv/9CXp9Uv+Tr0D RorBUGOTOWzXlWnDp+sKeOEXHCZiAAUHu0x7x0jt6ZAghxeCXRS0LLZDIXj7wQuj 0mdqxfyhy7M11jAvGCat66m0MGznJ0RtnPKbwMy2SsasS/ll2NlB2hhYAQxFOo5Q 4QfJV1cN/oKcl0nvpb06mBfWaSwreVuahDLJEFb4x3Gc49cVaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzpFz25DgsUP3g8Bz5RtS1EPcGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjg5YWJiNzYtZTRlZi0z ZjgwLWFiNDYtZTJkYzFhN2RlZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGsSscVqZmb5IiSJKZRe0Qm6OVEShesIRq8vrvkjxVstWzq5Ofp2 CiKNA18njhzJFiPcViQazfGGt30RtTUhSY3B7hiNyKbOHQLCdzlM+HybRnad2OGq M8YFF79ddbumDzPPKtkGAj6QZo32724VoK65eax39q+vgAHa1D9oaFSL3n/XrlDX HvhaEZpdjMUNG40vpmPDrkIjawdIw4nHuCIXiblHwvxh+q4+gK2Wsrse9djrs2Yi hROCGu+s5oYDGO6XEsLyC7lhHP724HoYVIq+CDvnH5lyWcAGT4/fLk3GSdYyyo9C ABdh6/7bAbZAJByCZEjrqoDQx7XVUXTFyWI= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:39 2026 by rpki-client