$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa File: ca5ee824-d35b-357a-a812-50300fae06e0.roa (raw, json) Hash identifier: G8roOdDti4MRUW0ZQ7ai8qtwpiw0er4xcdj4rulNgEE= Subject key identifier: 6E:E2:10:AB:F1:BF:48:C1:C4:42:4F:17:64:68:01:8F:8E:CD:23:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E5BAF5B82EB41530A99911140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 396541 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:5b:82:eb:41:53:0a:99:91:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=d81a6291-0cc3-4ad7-8761-f05beaeee7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:6c:07:04:a1:6e:89:dc:da:11:4b:92:fe: 27:ea:c5:19:3c:a5:a0:f3:03:61:46:fd:74:f8:1f: 47:90:55:c5:71:da:6e:fc:52:71:e5:71:90:f0:a0: b8:33:39:63:6b:3f:e7:96:f7:41:ea:57:07:44:5c: 6a:a5:a1:0c:4c:ce:80:e1:b7:44:75:88:f3:b1:cc: ae:71:2f:c5:69:0f:d5:99:a1:33:a2:1c:05:d9:f1: 83:7f:d3:d6:7c:7d:2e:2d:26:6a:1f:71:c8:7f:f8: e1:bf:e4:31:c8:17:9d:af:a8:87:41:f3:e9:cd:18: 96:5c:f4:e2:fd:2f:49:85:04:fe:15:4f:b9:34:f9: 8b:06:b7:df:cc:ea:77:ca:fa:c2:2f:d0:a8:5b:bc: fc:23:98:fb:13:93:a1:64:5f:d2:26:ba:39:43:80: 8e:13:97:f6:aa:6a:8b:d5:5d:09:8c:6e:81:1a:b4: fd:88:29:df:32:b7:d5:ed:23:6a:b9:96:4b:10:48: 7c:ab:75:bb:c5:c3:6c:11:65:0a:e2:d8:a2:13:8d: b2:59:7e:e7:19:b8:c1:22:d3:8b:9a:c3:d8:98:99: 92:05:5f:f3:c3:70:1f:50:16:03:47:dd:31:2f:ab: a3:e4:9c:5e:41:3c:e7:5b:d4:ff:31:e5:61:2a:4a: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E2:10:AB:F1:BF:48:C1:C4:42:4F:17:64:68:01:8F:8E:CD:23:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a1:23:59:23:b3:e1:dc:97:d7:85:c5:07:ac:8f:d6:78:e3: a2:fc:00:ad:5e:ab:0e:03:37:e4:86:cb:34:9e:71:ab:b6:ea: 43:52:9b:f7:99:e8:18:7e:f8:91:eb:d1:48:a7:ee:a1:41:90: 14:3f:b5:70:46:5b:21:2c:3d:88:42:b8:cc:35:0e:86:c3:0d: 17:76:52:06:a6:ec:55:c9:78:34:12:e4:08:eb:25:aa:66:31: e8:9f:1f:41:ae:c5:85:1d:ca:0d:a9:64:9e:b1:9d:f7:ca:16: e7:3c:1d:49:ce:26:64:29:46:2a:5a:65:93:a8:c0:2e:9b:28: a4:4c:99:ce:8d:0f:6b:49:57:9a:33:d1:62:2c:b6:d5:eb:16: 52:1b:00:d1:d9:be:ea:70:aa:ba:a8:60:9a:ef:1e:59:8c:18: bb:d5:f0:39:16:c9:98:c8:c8:36:ea:3d:08:45:37:57:d4:8b: bd:48:92:45:7b:56:19:bf:82:6d:37:00:4c:97:ed:53:44:1f: ea:96:ae:1d:30:52:9c:ea:97:50:b5:cc:06:b3:ab:fd:e2:65: 14:24:ee:8a:9a:2d:47:f2:b2:80:92:79:f3:d0:77:fb:af:ca: 1c:53:85:04:0b:b2:ed:f8:02:8b:d8:0a:29:16:16:4c:9c:2d: d0:f9:e2:84 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5br1uC60FTCpmREUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk ZDgxYTYyOTEtMGNjMy00YWQ3LTg3NjEtZjA1YmVhZWVlN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtilsBwShbonc2hFLkv4n6sUZPKWg8wNhRv10 +B9HkFXFcdpu/FJx5XGQ8KC4Mzljaz/nlvdB6lcHRFxqpaEMTM6A4bdEdYjzscyu cS/FaQ/VmaEzohwF2fGDf9PWfH0uLSZqH3HIf/jhv+QxyBedr6iHQfPpzRiWXPTi /S9JhQT+FU+5NPmLBrffzOp3yvrCL9CoW7z8I5j7E5OhZF/SJro5Q4COE5f2qmqL 1V0JjG6BGrT9iCnfMrfV7SNquZZLEEh8q3W7xcNsEWUK4tiiE42yWX7nGbjBItOL msPYmJmSBV/zw3AfUBYDR90xL6uj5JxeQTznW9T/MeVhKkrbkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG7iEKvxv0jBxEJPF2RoAY+OzSPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2E1ZWU4MjQtZDM1Yi0z NTdhLWE4MTItNTAzMDBmYWUwNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOoSNZI7Ph3JfXhcUHrI/WeOOi/ACtXqsOAzfk hss0nnGrtupDUpv3megYfviR69FIp+6hQZAUP7VwRlshLD2IQrjMNQ6Gww0XdlIG puxVyXg0EuQI6yWqZjHonx9BrsWFHcoNqWSesZ33yhbnPB1JziZkKUYqWmWTqMAu myikTJnOjQ9rSVeaM9FiLLbV6xZSGwDR2b7qcKq6qGCa7x5ZjBi71fA5FsmYyMg2 6j0IRTdX1Iu9SJJFe1YZv4JtNwBMl+1TRB/qlq4dMFKc6pdQtcwGs6v94mUUJO6K mi1H8rKAknnz0Hf7r8ocU4UEC7Lt+AKL2AopFhZMnC3Q+eKE -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:55 2026 by rpki-client