$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc93d421-4f0e-3269-b2e9-d45799ecf813.roa File: dc93d421-4f0e-3269-b2e9-d45799ecf813.roa (raw, json) Hash identifier: acnuXlQp3hVYaxL5iGN6r7xOzVg/wOmrrRBMoOjeBzU= Subject key identifier: 40:FC:81:29:58:90:29:C9:0D:B4:7A:A8:A0:AD:71:1B:ED:C3:01:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DF5CCFA3F2765E323600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc93d421-4f0e-3269-b2e9-d45799ecf813.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396605 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:df:5c:cf:a3:f2:76:5e:32:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=ff9dd163-c0f0-4ff3-93f3-2743a96ae7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:9b:a3:b5:dc:f4:02:c7:86:45:3b:1f:48: 3b:8a:e2:a3:57:cc:2c:3e:0b:ba:a4:b0:10:25:2a: 36:9e:28:33:4a:45:dc:de:f5:fc:96:1a:7e:66:1a: 44:c1:fe:65:3c:db:93:c8:aa:da:b7:13:17:b5:aa: eb:9a:b0:26:5b:f6:8e:13:7b:34:8a:65:cd:d0:18: 06:49:89:f1:95:ab:0c:80:12:04:f0:e7:67:e6:1f: 3b:1d:bb:23:5a:e6:04:b1:03:67:ab:57:67:1c:25: 15:7f:94:d8:3f:96:65:4a:05:f7:1b:8e:bd:97:4f: cd:0e:09:15:8b:b5:25:16:b0:8e:ab:bc:7f:13:0b: fb:12:6f:2a:90:bb:f9:ae:10:66:f7:22:34:64:cc: d8:f3:be:1e:3f:21:2d:c1:e1:f3:17:95:23:59:99: 87:91:c1:c6:d2:c2:c5:e9:25:57:35:70:5b:5f:25: 1a:0d:b0:65:f1:61:96:a6:fd:9d:41:98:fb:b9:3a: 2a:55:c1:4f:d8:a4:f0:06:63:66:7a:2e:7a:34:38: 08:06:76:ed:2f:3b:c5:b1:6c:bf:47:cb:32:1b:c8: 6f:75:8a:cb:56:78:fb:28:a5:ae:1b:e6:21:e9:58: bb:a4:05:bb:ed:ae:48:a6:5d:1a:0d:c1:f3:e3:24: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:81:29:58:90:29:C9:0D:B4:7A:A8:A0:AD:71:1B:ED:C3:01:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc93d421-4f0e-3269-b2e9-d45799ecf813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5b:92:7d:71:8d:b6:ea:ff:53:3e:9e:c5:8c:02:96:4c:f2: ed:8f:f8:04:22:d2:ee:a4:1c:96:b4:7e:b9:4b:c3:17:f9:cf: 87:4a:fc:3a:4d:01:25:34:e2:e7:d4:e1:40:04:45:e2:cc:97: e5:68:a8:da:04:dd:33:75:aa:e6:82:c6:69:5b:b5:49:5e:0f: 56:ad:39:32:6c:59:15:e5:5f:7d:ec:7c:77:cb:64:51:22:b7: f6:b5:be:bb:d9:7e:50:55:7a:4c:8d:0a:94:4f:74:7b:1d:28: 93:33:4b:42:ea:a0:a3:54:28:0d:ca:de:a3:44:d0:ab:23:34: 08:0e:ed:03:0c:56:56:61:91:f7:65:a9:85:af:5f:e2:5d:a1: f1:9a:22:10:29:8d:d2:69:c5:7f:fe:de:a5:66:c4:d0:ea:4e: 99:c8:10:b7:a3:78:4e:88:05:e4:31:9f:ee:26:a1:e9:52:1e: 59:0c:71:43:29:bc:37:1c:6c:9d:1b:44:56:f8:52:d8:08:4a: 8e:b9:4d:2e:c6:70:46:4c:f4:bd:51:21:31:41:c1:88:2b:f7: 87:8f:5f:0a:42:a7:09:22:7f:f3:49:71:60:36:68:0f:10:72: ce:1f:fe:21:7f:cb:a2:6c:da:73:9d:a6:41:bc:63:4c:4e:6b: 92:58:29:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN9cz6Pydl4yNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZmY5ZGQxNjMtYzBmMC00ZmYzLTkzZjMtMjc0M2E5NmFlN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ybo7Xc9ALHhkU7H0g7iuKjV8wsPgu6pLAQ JSo2nigzSkXc3vX8lhp+ZhpEwf5lPNuTyKratxMXtarrmrAmW/aOE3s0imXN0BgG SYnxlasMgBIE8Odn5h87HbsjWuYEsQNnq1dnHCUVf5TYP5ZlSgX3G469l0/NDgkV i7UlFrCOq7x/Ewv7Em8qkLv5rhBm9yI0ZMzY874ePyEtweHzF5UjWZmHkcHG0sLF 6SVXNXBbXyUaDbBl8WGWpv2dQZj7uToqVcFP2KTwBmNmei56NDgIBnbtLzvFsWy/ R8syG8hvdYrLVnj7KKWuG+Yh6Vi7pAW77a5Ipl0aDcHz4yRxBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFED8gSlYkCnJDbR6qKCtcRvtwwHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGM5M2Q0MjEtNGYwZS0z MjY5LWIyZTktZDQ1Nzk5ZWNmODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVbkn1xjbbq/1M+nsWMApZM8u2P+AQi0u6kHJa0frlLwxf5z4dK /DpNASU04ufU4UAEReLMl+VoqNoE3TN1quaCxmlbtUleD1atOTJsWRXlX33sfHfL ZFEit/a1vrvZflBVekyNCpRPdHsdKJMzS0LqoKNUKA3K3qNE0KsjNAgO7QMMVlZh kfdlqYWvX+JdofGaIhApjdJpxX/+3qVmxNDqTpnIELejeE6IBeQxn+4moelSHlkM cUMpvDccbJ0bRFb4UtgISo65TS7GcEZM9L1RITFBwYgr94ePXwpCpwkif/NJcWA2 aA8Qcs4f/iF/y6Js2nOdpkG8Y0xOa5JYKcg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:17 2026 by rpki-client