$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa File: beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa (raw, json) Hash identifier: jc0lvtxbYdY/WfAAPSLywG52U1VwubfTPCWbjDcCK3o= Subject key identifier: 94:A1:E9:0F:67:B5:0E:B5:5E:D6:1F:42:B0:96:68:20:3B:77:56:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DADB3211D56CFDD30980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396567 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:da:db:32:11:d5:6c:fd:d3:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=af9bcaf0-29f3-492c-b298-d87488c9657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:60:76:bd:a7:89:03:98:77:30:45:73:db: a1:e6:55:6a:60:bd:58:61:c2:d5:f6:5c:b6:25:cd: b9:ec:ff:04:bd:7c:4d:a1:bc:3f:2b:23:41:01:2c: f9:10:a8:0c:08:fa:37:77:af:40:29:dd:75:c7:ee: 4a:a0:a6:26:6c:0b:1e:a6:3e:8e:6f:82:13:a1:c6: 03:2c:cb:99:71:97:14:c1:6a:f2:e2:ba:84:5c:72: 8d:88:81:c3:4a:f9:3d:94:b4:38:42:c5:f4:7f:c5: 60:d1:aa:2f:16:2c:d8:81:ab:b8:40:3d:d7:20:98: 6d:4b:4f:22:d8:de:fe:d1:ee:0f:3a:cf:9d:c9:c9: 6a:42:d4:bd:89:0a:be:7e:44:90:a4:c5:0e:3c:18: 22:d8:36:3e:75:99:54:a2:f2:30:0b:4d:ea:db:06: 59:3b:52:47:54:ac:4e:3d:e5:ab:f5:bc:1d:58:39: d3:5c:32:9c:fd:3c:0a:ca:09:4e:29:ef:95:41:b3: 26:f9:d3:3e:af:cb:30:fb:10:c2:93:b0:78:4d:3f: 85:1a:37:38:71:fa:22:a6:e9:70:3a:f6:36:6f:bf: 1e:29:92:f1:a8:f4:12:03:64:50:1d:1e:54:18:6b: d8:fb:13:eb:70:10:65:c2:ff:1f:e6:b0:a7:72:52: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A1:E9:0F:67:B5:0E:B5:5E:D6:1F:42:B0:96:68:20:3B:77:56:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beb7944d-325c-3b7f-b25b-0b9ffcae3e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:aa:de:f3:04:e7:4f:24:b6:07:b8:03:26:5e:19:4f:2e:69: 90:90:df:8a:3b:df:91:06:2c:4f:e2:78:1c:a9:b7:f4:04:2c: a0:f4:6a:db:01:bf:f0:c8:5a:62:04:f5:2e:38:7b:06:df:43: 97:a7:0a:42:48:4b:15:8a:5a:a6:a8:55:0d:6a:25:c3:6d:d5: 59:67:40:15:92:29:a4:03:28:14:05:2a:77:b9:51:e1:fb:25: 9e:58:8b:1f:02:d1:07:97:00:70:ba:fa:d7:02:3d:5c:07:f4: 45:2c:61:bc:e6:0e:44:1c:08:06:f8:72:9d:ad:63:40:38:1a: 4e:97:86:05:36:7f:8c:59:29:7c:29:ca:92:6b:77:e4:a6:94: 67:df:6e:cf:c7:2e:e8:ab:03:06:7d:28:fe:bd:00:3c:84:0f: eb:82:8a:91:21:90:ec:f1:02:4e:c0:17:74:39:d9:0d:39:c1: 8b:0c:d7:c7:2f:7b:17:df:38:28:be:56:30:2a:eb:47:27:f6: 08:32:c7:43:d3:7d:9d:eb:93:39:87:46:e7:b5:44:55:45:86: 59:ae:fc:82:03:d4:7b:49:cb:74:3a:a3:bf:d2:39:c4:11:52: 1a:ac:17:62:dd:f5:f8:8b:37:75:ca:4c:64:9d:10:9f:9d:94: b4:72:65:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBNrbMhHVbP3TCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YWY5YmNhZjAtMjlmMy00OTJjLWIyOTgtZDg3NDg4Yzk2NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU5gdr2niQOYdzBFc9uh5lVqYL1YYcLV9ly2 Jc257P8EvXxNobw/KyNBASz5EKgMCPo3d69AKd11x+5KoKYmbAsepj6Ob4ITocYD LMuZcZcUwWry4rqEXHKNiIHDSvk9lLQ4QsX0f8Vg0aovFizYgau4QD3XIJhtS08i 2N7+0e4POs+dyclqQtS9iQq+fkSQpMUOPBgi2DY+dZlUovIwC03q2wZZO1JHVKxO PeWr9bwdWDnTXDKc/TwKyglOKe+VQbMm+dM+r8sw+xDCk7B4TT+FGjc4cfoipulw OvY2b78eKZLxqPQSA2RQHR5UGGvY+xPrcBBlwv8f5rCnclIaWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJSh6Q9ntQ61XtYfQrCWaCA7d1bfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmViNzk0NGQtMzI1Yy0z YjdmLWIyNWItMGI5ZmZjYWUzZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuq3vME508ktge4AyZeGU8uaZCQ34o735EGLE/ieBypt/QELKD0 atsBv/DIWmIE9S44ewbfQ5enCkJISxWKWqaoVQ1qJcNt1VlnQBWSKaQDKBQFKne5 UeH7JZ5Yix8C0QeXAHC6+tcCPVwH9EUsYbzmDkQcCAb4cp2tY0A4Gk6XhgU2f4xZ KXwpypJrd+SmlGffbs/HLuirAwZ9KP69ADyED+uCipEhkOzxAk7AF3Q52Q05wYsM 18cvexffOCi+VjAq60cn9ggyx0PTfZ3rkzmHRue1RFVFhlmu/IID1HtJy3Q6o7/S OcQRUhqsF2Ld9fiLN3XKTGSdEJ+dlLRyZQI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:49 2026 by rpki-client