$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa File: ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa (raw, json) Hash identifier: elO8tS3PGYzAwdZnOyysnJzDSRdwOjgM/qkXEkbeeKI= Subject key identifier: 61:29:F5:0F:69:10:24:37:49:C9:94:C2:E5:08:B8:84:41:09:49:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204CFF6A52188770547BE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396572 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:cf:f6:a5:21:88:77:05:47:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=ccf2770c-a46d-4565-ac59-914f73dc709f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:00:55:06:e7:f3:dd:54:a5:96:fe:44:1d: ca:43:ff:42:98:8a:b9:61:0b:22:f6:3a:d6:5c:8d: 00:f1:fe:96:a2:03:83:9c:c0:56:52:21:64:17:8e: cd:4b:55:bd:b5:ea:26:12:1e:38:12:4a:f0:45:cc: 0b:b6:4f:c1:19:d8:19:9b:13:ae:4f:5e:4f:8e:6d: f3:e2:a9:1a:b7:75:59:60:82:19:2e:df:08:04:8e: cc:96:cb:f8:47:81:e7:3d:1f:05:89:b1:d0:c6:b3: 6c:5e:b5:61:8d:bb:65:9d:77:11:ae:e4:cc:9e:65: 99:fd:93:b7:69:4f:d4:25:87:c2:43:b6:cc:d3:bc: f0:c1:d6:60:af:a3:8b:da:60:53:41:04:39:96:19: 7e:8b:81:4f:09:67:2c:90:11:70:ec:1f:7a:9f:f7: 93:13:9b:c3:c9:68:ee:02:fd:b5:63:d5:3e:dd:93: c8:d4:f0:b3:54:dd:52:81:7a:0c:f0:30:d9:7d:ef: 88:32:b7:e5:c0:02:cb:c5:5e:4a:df:3a:0e:af:dd: e6:27:ff:ba:c2:ff:96:bf:43:e2:f0:b3:ff:06:3c: 11:77:e6:f4:54:72:35:4d:ae:6a:22:2e:6f:71:a9: c1:07:85:6c:78:33:f6:7e:8c:cc:6f:88:6d:89:7d: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:29:F5:0F:69:10:24:37:49:C9:94:C2:E5:08:B8:84:41:09:49:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1b:fc:4d:31:c6:61:6b:fd:f2:fe:69:f4:6f:c7:f5:47:98: 0b:5d:5a:e8:7f:47:e8:7b:b8:71:4e:a4:48:24:c0:99:96:21: 0b:55:c3:e7:bf:47:f7:ce:d1:08:b1:cb:66:41:09:f5:1b:02: ed:2d:17:af:03:6c:51:6f:b3:a8:6e:23:81:83:f8:80:96:5b: b9:b5:b5:1d:5f:32:cc:1f:f0:b6:e5:52:fc:a1:a5:90:7a:e0: 05:51:c4:25:8b:67:bc:6f:1c:bb:d3:3b:ed:b8:cd:8f:90:72: c5:d6:b2:af:93:d9:bb:2e:a3:f7:4c:e7:93:34:e5:4c:42:1d: 39:2f:21:fd:25:44:95:31:62:40:4b:0c:d4:bb:bb:8b:8b:12: 09:c6:b4:1b:79:8a:7c:62:88:e9:9c:ce:d2:d4:b3:c4:51:7c: d1:f3:6c:d4:7f:74:c0:b7:b5:cb:b2:01:5e:54:91:38:ac:d6: 25:f3:76:9e:f1:35:e4:61:da:59:93:fb:58:2a:55:0a:a5:6b: d2:9e:bc:aa:30:60:08:61:c4:e7:ff:54:91:ec:57:55:f5:dd: b7:f2:5c:b2:14:07:ae:2c:27:95:b6:1f:06:31:1a:ef:cd:9f: 15:a0:73:33:fc:be:f4:0e:94:a4:7b:d2:e0:52:1f:9d:cd:f5: 33:69:8d:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBM/2pSGIdwVHvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Y2NmMjc3MGMtYTQ2ZC00NTY1LWFjNTktOTE0ZjczZGM3MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrkAVQbn891UpZb+RB3KQ/9CmIq5YQsi9jrW XI0A8f6WogODnMBWUiFkF47NS1W9teomEh44EkrwRcwLtk/BGdgZmxOuT15Pjm3z 4qkat3VZYIIZLt8IBI7Mlsv4R4HnPR8FibHQxrNsXrVhjbtlnXcRruTMnmWZ/ZO3 aU/UJYfCQ7bM07zwwdZgr6OL2mBTQQQ5lhl+i4FPCWcskBFw7B96n/eTE5vDyWju Av21Y9U+3ZPI1PCzVN1SgXoM8DDZfe+IMrflwALLxV5K3zoOr93mJ/+6wv+Wv0Pi 8LP/BjwRd+b0VHI1Ta5qIi5vcanBB4VseDP2fozMb4htiX04LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGEp9Q9pECQ3ScmUwuUIuIRBCUm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2UxZWExYjktNDg1ZS0z NjUyLTllOGQtMGU1ODdlYTRlNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIb/E0xxmFr/fL+afRvx/VHmAtdWuh/R+h7uHFOpEgkwJmWIQtV w+e/R/fO0Qixy2ZBCfUbAu0tF68DbFFvs6huI4GD+ICWW7m1tR1fMswf8LblUvyh pZB64AVRxCWLZ7xvHLvTO+24zY+QcsXWsq+T2bsuo/dM55M05UxCHTkvIf0lRJUx YkBLDNS7u4uLEgnGtBt5inxiiOmcztLUs8RRfNHzbNR/dMC3tcuyAV5UkTis1iXz dp7xNeRh2lmT+1gqVQqla9KevKowYAhhxOf/VJHsV1X13bfyXLIUB64sJ5W2HwYx Gu/NnxWgczP8vvQOlKR70uBSH53N9TNpjbI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:46:03 2026 by rpki-client