$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa File: c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa (raw, json) Hash identifier: CcTkbEXWEGNtPZNA1S7uSxcJx4t9Lw+DXWLf5iQDjrA= Subject key identifier: 2F:F7:6E:57:E7:A1:59:8F:DB:C2:17:E6:5B:72:33:28:74:A1:40:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5B9A3B4736987C650F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 397194 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5b:9a:3b:47:36:98:7c:65:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=a561bcb2-e51a-4e83-bfd9-9b5be5fede85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:d7:ea:0a:29:23:77:61:b9:14:d1:b8:73: c9:d0:d5:40:45:93:e3:37:93:8d:92:8c:97:8b:55: 3c:dc:60:33:d5:bf:bd:80:0a:b0:ff:d3:66:9d:62: a6:63:47:76:30:81:56:11:8d:85:8c:14:f3:35:08: cb:4b:85:aa:70:e5:b5:0b:c4:65:d3:da:35:5e:97: 3b:13:01:1d:45:10:c3:6c:a5:d0:ff:b6:f8:12:94: 43:15:4e:16:65:3c:58:10:2f:18:27:b6:ab:09:f2: 04:d9:10:ad:7e:d5:39:86:ab:68:e8:20:aa:ea:ee: 3d:2b:25:f2:60:48:25:6d:95:9d:19:e1:16:d7:78: b1:84:13:ad:92:2b:ac:78:79:90:5a:12:de:42:68: cd:a6:42:f3:4f:e2:eb:de:7a:01:de:a2:94:8c:aa: 47:17:65:1e:ab:e2:bc:e7:25:29:1a:6d:ac:da:36: f2:6a:49:17:b1:d0:5c:1c:f6:a7:ad:f7:61:ea:df: fc:97:ef:7c:2c:dd:a8:12:be:47:12:95:60:bb:f8: d9:fa:8a:39:2b:25:21:f8:69:db:0c:3b:dd:7e:54: 91:4f:de:1b:16:a9:da:cd:5c:af:e4:64:42:2a:1a: 35:da:00:ba:3b:48:33:89:e7:fa:d9:2d:13:b9:11: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F7:6E:57:E7:A1:59:8F:DB:C2:17:E6:5B:72:33:28:74:A1:40:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c586c4f1-b70d-3ca6-a5b8-2a93c1e5372c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8f:0d:4b:c9:e6:2c:f9:9a:a6:b9:ec:09:2d:18:c4:4f:54: 01:b5:c8:7a:c8:ab:6d:21:c2:08:77:b6:50:11:bd:48:d5:15: 62:b4:51:db:1b:63:2f:67:2b:2f:7c:c3:06:56:d2:23:e3:a9: bb:ce:14:0f:48:3e:59:88:48:b3:87:99:ff:61:37:91:23:34: 37:03:9f:75:42:6c:87:cf:b0:3d:f9:b0:e2:62:f9:d0:c8:29: 12:44:a7:b5:c5:ef:da:51:ab:16:ef:63:41:33:08:19:83:76: b7:d7:b9:30:be:1c:af:69:84:f0:d2:da:b5:e6:52:83:9e:0f: 44:7e:42:0e:1c:a3:48:f8:66:71:1f:1f:be:39:7c:f3:a0:28: b1:46:b5:c3:40:6f:00:4b:35:96:bd:f9:fd:ed:17:8f:45:34: 2c:58:61:a8:31:64:09:b3:1a:1e:ed:46:d8:f9:03:19:c0:16: 30:2e:27:e1:59:f5:7c:04:95:b9:42:ba:73:6b:a8:77:18:b7: c9:47:0d:80:5c:c6:f9:a2:96:62:7a:d6:65:8d:a0:11:e8:f5: f6:94:a3:0f:1e:3c:06:0a:cb:93:70:79:90:40:b1:12:29:78: 39:bf:77:2c:98:2a:62:0c:81:1e:98:61:a9:a6:b6:a5:58:96: dc:53:70:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1uaO0c2mHxlDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YTU2MWJjYjItZTUxYS00ZTgzLWJmZDktOWI1YmU1ZmVkZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyrX6gopI3dhuRTRuHPJ0NVARZPjN5ONkoyX i1U83GAz1b+9gAqw/9NmnWKmY0d2MIFWEY2FjBTzNQjLS4WqcOW1C8Rl09o1Xpc7 EwEdRRDDbKXQ/7b4EpRDFU4WZTxYEC8YJ7arCfIE2RCtftU5hqto6CCq6u49KyXy YEglbZWdGeEW13ixhBOtkiuseHmQWhLeQmjNpkLzT+Lr3noB3qKUjKpHF2Ueq+K8 5yUpGm2s2jbyakkXsdBcHPanrfdh6t/8l+98LN2oEr5HEpVgu/jZ+oo5KyUh+Gnb DDvdflSRT94bFqnazVyv5GRCKho12gC6O0gzief62S0TuRGTmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC/3blfnoVmP28IX5ltyMyh0oUCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU4NmM0ZjEtYjcwZC0z Y2E2LWE1YjgtMmE5M2MxZTUzNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPjw1LyeYs+ZqmuewJLRjET1QBtch6yKttIcII d7ZQEb1I1RVitFHbG2MvZysvfMMGVtIj46m7zhQPSD5ZiEizh5n/YTeRIzQ3A591 QmyHz7A9+bDiYvnQyCkSRKe1xe/aUasW72NBMwgZg3a317kwvhyvaYTw0tq15lKD ng9EfkIOHKNI+GZxHx++OXzzoCixRrXDQG8ASzWWvfn97RePRTQsWGGoMWQJsxoe 7UbY+QMZwBYwLifhWfV8BJW5Qrpza6h3GLfJRw2AXMb5opZietZljaAR6PX2lKMP HjwGCsuTcHmQQLESKXg5v3csmCpiDIEemGGppralWJbcU3As -----END CERTIFICATE-----Generated at Fri Jul 24 03:07:43 2026 by rpki-client