$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa File: d5ac50c2-a63c-3075-a528-1119e3ffee83.roa (raw, json) Hash identifier: S5Z/cdTXsxwE1ls3Q0pfjytUzCEVCjYS3BN+bsD84A0= Subject key identifier: F3:4B:A4:01:E6:FC:84:CB:71:B2:23:DF:E1:FB:C0:3B:96:30:2C:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DE8254D01F5F7AEE4AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396595 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:de:82:54:d0:1f:5f:7a:ee:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=773b6dbb-d59f-469f-a870-60d1c2704e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:47:08:c3:5c:e8:a4:3f:0d:14:9c:ca:97: 22:5e:55:08:64:b0:d5:86:7a:f9:a5:da:5a:90:eb: c6:1c:96:61:37:06:05:32:e1:8f:8a:a1:68:86:0c: 7f:e2:58:f9:bf:56:5e:69:97:a9:f7:75:cf:28:9d: d4:9f:5d:d0:3c:cd:ad:a2:aa:36:39:ce:33:82:c1: 12:73:4c:18:82:e8:c7:d7:77:14:22:e3:f1:79:7f: cc:cb:d1:4e:7e:73:78:97:5a:1f:a3:70:21:1c:26: 66:bd:0f:ea:70:57:27:e9:bf:9d:ff:7a:eb:61:1a: 01:bf:f1:2d:a2:d4:ca:47:39:8f:02:72:cd:a3:1c: 69:cf:26:a5:d8:41:b2:a7:00:4d:52:3a:17:0a:80: d0:88:b1:2c:97:d5:82:0b:c9:db:e5:1b:bf:ea:15: 96:3d:d8:c1:2e:ee:62:18:37:98:1c:43:be:e1:2d: 64:e0:82:d1:c4:4d:fc:e2:ad:23:f1:34:c4:b0:f9: 1a:38:01:0c:e5:cd:fe:a6:ef:48:1d:72:0e:d9:ab: 6d:32:e9:26:80:81:1f:0a:ba:4f:a5:bd:2b:9e:9f: eb:12:5d:13:2f:f2:3f:95:5e:a1:84:c7:9e:02:bd: 57:51:fa:ff:9e:34:e2:f8:0a:0b:14:66:eb:f1:57: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:A4:01:E6:FC:84:CB:71:B2:23:DF:E1:FB:C0:3B:96:30:2C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ac50c2-a63c-3075-a528-1119e3ffee83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8d:cc:6a:4c:c1:e9:17:23:01:2f:e5:0d:2f:cd:61:21:35: b2:20:f4:6a:1c:10:37:d0:cb:3f:96:6d:b1:b1:78:30:d3:15: 96:eb:65:0f:23:68:2b:fc:50:aa:96:26:7e:87:c5:61:b1:c2: 04:ac:7f:65:ce:5e:75:09:56:77:8d:71:b8:5e:7e:bb:9c:e9: 70:94:7e:28:c5:10:15:2b:04:b4:ee:25:c0:78:dc:d4:d8:2a: c3:89:87:3b:ff:93:26:20:0b:1d:ca:ad:36:85:89:de:c0:23: c5:f6:a6:f7:02:25:cc:ad:eb:be:ef:e8:cd:e2:b4:58:6a:d7: be:33:7b:e9:0c:31:3c:c6:a3:aa:85:fe:ab:fc:e5:09:23:39: 2a:16:53:bb:63:9d:b1:c8:d9:0b:15:c2:3d:9c:79:ac:7c:de: 61:a4:d6:06:be:69:65:aa:05:fc:be:01:dc:a5:41:44:79:76: a3:f2:7f:ad:81:ee:57:de:57:15:5d:a5:97:62:07:04:ed:d6: cd:9b:35:0c:a1:87:c6:36:06:ab:67:ba:71:8f:99:23:d3:ee: 4a:4f:36:8c:03:61:38:97:34:4f:d5:ca:a6:bd:06:31:7c:03: 44:0b:cb:26:2b:66:87:7e:e1:a2:4a:6e:61:ab:4a:e3:c6:65: c9:06:55:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN6CVNAfX3ruSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NzczYjZkYmItZDU5Zi00NjlmLWE4NzAtNjBkMWMyNzA0ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw85HCMNc6KQ/DRScypciXlUIZLDVhnr5pdpa kOvGHJZhNwYFMuGPiqFohgx/4lj5v1ZeaZep93XPKJ3Un13QPM2toqo2Oc4zgsES c0wYgujH13cUIuPxeX/My9FOfnN4l1ofo3AhHCZmvQ/qcFcn6b+d/3rrYRoBv/Et otTKRzmPAnLNoxxpzyal2EGypwBNUjoXCoDQiLEsl9WCC8nb5Ru/6hWWPdjBLu5i GDeYHEO+4S1k4ILRxE384q0j8TTEsPkaOAEM5c3+pu9IHXIO2attMukmgIEfCrpP pb0rnp/rEl0TL/I/lV6hhMeeAr1XUfr/njTi+AoLFGbr8VemiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNLpAHm/ITLcbIj3+H7wDuWMCzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVhYzUwYzItYTYzYy0z MDc1LWE1MjgtMTExOWUzZmZlZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaNzGpMwekXIwEv5Q0vzWEhNbIg9GocEDfQyz+WbbGxeDDTFZbr ZQ8jaCv8UKqWJn6HxWGxwgSsf2XOXnUJVneNcbhefruc6XCUfijFEBUrBLTuJcB4 3NTYKsOJhzv/kyYgCx3KrTaFid7AI8X2pvcCJcyt677v6M3itFhq174ze+kMMTzG o6qF/qv85QkjOSoWU7tjnbHI2QsVwj2ceax83mGk1ga+aWWqBfy+AdylQUR5dqPy f62B7lfeVxVdpZdiBwTt1s2bNQyhh8Y2BqtnunGPmSPT7kpPNowDYTiXNE/Vyqa9 BjF8A0QLyyYrZod+4aJKbmGrSuPGZckGVT0= -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:57 2026 by rpki-client