$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa File: ef8df252-f36d-3655-8163-5a2e52bb2462.roa (raw, json) Hash identifier: jvOM339jc8U751Cznd0IkbVlOE1nc+hOYmZ3WlNn2RU= Subject key identifier: A1:E9:84:F7:AD:AC:8F:BE:FA:B5:9F:BC:FE:0C:58:41:1D:C6:C2:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204D018C777DFEB7A4278C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396549 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d0:18:c7:77:df:eb:7a:42:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=40f0bc57-3a64-4a75-96a7-76a9707a5ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:82:7b:e8:91:0c:68:83:84:5e:6e:e9:5e: 1e:66:fd:ce:a3:3c:96:36:ab:66:6d:f1:b2:b3:4a: b3:77:18:a2:39:15:6a:84:aa:cb:01:a2:5c:e2:4b: c1:6b:16:b0:cc:f8:73:a2:47:68:0c:3d:cc:ce:4b: 1e:66:ff:99:2d:63:ae:2f:5c:e7:52:e9:58:eb:ed: b3:93:00:b6:be:07:cd:c3:bb:fb:85:02:24:79:bb: dc:8f:f4:1a:28:47:0b:ac:7e:81:fb:a4:bc:59:43: 29:d1:56:67:54:f1:9c:c5:3d:bc:49:64:b6:86:6c: 0a:cb:ff:74:24:25:8b:eb:16:a4:86:a1:1b:9b:50: a8:86:b5:69:4f:fb:d2:51:7f:85:90:75:16:87:2e: 92:63:b9:fb:30:bd:76:98:02:e9:6a:22:66:ec:18: be:6a:83:47:78:4a:73:c6:ae:16:67:13:e9:29:71: b1:34:a1:82:3e:39:43:97:1e:6b:6c:5a:cc:63:92: a0:60:73:a4:15:6d:e6:4d:28:39:cd:c4:72:2f:f1: 42:ed:30:6b:be:55:94:fe:a9:4f:6b:74:db:87:b9: 0b:3e:89:77:7a:ef:f8:79:8e:67:a3:ed:28:60:8c: d2:24:0e:5e:18:77:4d:d5:a4:b9:d1:77:82:4c:04: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E9:84:F7:AD:AC:8F:BE:FA:B5:9F:BC:FE:0C:58:41:1D:C6:C2:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef8df252-f36d-3655-8163-5a2e52bb2462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ad:d9:85:d9:8b:ec:6d:93:28:a4:16:3f:00:01:b6:98:08: 87:91:e8:29:79:db:93:c9:2f:49:a4:93:95:d4:b3:2a:96:b5: 1a:ce:fc:7a:df:b9:79:17:c8:c8:da:b0:f6:d6:7b:40:26:9a: 97:a2:40:70:56:66:70:fb:5a:fe:d8:a9:65:17:7a:40:b2:d2: 12:db:fd:98:55:bd:d4:e4:dd:0a:c9:ac:d7:3e:ea:b0:f3:bc: 44:c3:10:08:6e:26:fa:f3:a6:72:35:27:19:1c:ab:a5:54:d7: 67:c6:92:79:b0:28:99:25:94:53:c7:94:75:48:f4:f3:35:a8: 42:ca:a6:12:2e:23:2e:76:b7:fd:52:52:c8:f3:d4:d8:2f:1d: 87:d5:af:f2:5b:16:74:22:58:78:99:17:fe:71:58:d7:31:8c: 85:d9:01:1c:55:97:c9:55:3c:71:b1:31:0c:72:4b:e2:75:f5: 97:e2:f6:91:74:27:fa:fb:a3:12:91:a7:db:0e:cd:86:19:d8: f2:59:49:0f:90:e2:16:7d:53:83:02:18:36:c9:1f:55:4b:2c: e0:c1:1f:b5:83:86:08:a8:fc:dc:b0:2b:d8:a4:6d:e3:f3:e5: 6d:78:65:ce:86:b2:8c:fe:2b:cb:3b:b9:65:6a:1f:21:4a:99: 00:f4:14:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBNAYx3ff63pCeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NDBmMGJjNTctM2E2NC00YTc1LTk2YTctNzZhOTcwN2E1YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtviCe+iRDGiDhF5u6V4eZv3OozyWNqtmbfGy s0qzdxiiORVqhKrLAaJc4kvBaxawzPhzokdoDD3MzkseZv+ZLWOuL1znUulY6+2z kwC2vgfNw7v7hQIkebvcj/QaKEcLrH6B+6S8WUMp0VZnVPGcxT28SWS2hmwKy/90 JCWL6xakhqEbm1CohrVpT/vSUX+FkHUWhy6SY7n7ML12mALpaiJm7Bi+aoNHeEpz xq4WZxPpKXGxNKGCPjlDlx5rbFrMY5KgYHOkFW3mTSg5zcRyL/FC7TBrvlWU/qlP a3Tbh7kLPol3eu/4eY5no+0oYIzSJA5eGHdN1aS50XeCTAQ8DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHphPetrI+++rWfvP4MWEEdxsK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4ZGYyNTItZjM2ZC0z NjU1LTgxNjMtNWEyZTUyYmIyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAWt2YXZi+xtkyikFj8AAbaYCIeR6Cl525PJL0mkk5XUsyqWtRrO /HrfuXkXyMjasPbWe0AmmpeiQHBWZnD7Wv7YqWUXekCy0hLb/ZhVvdTk3QrJrNc+ 6rDzvETDEAhuJvrzpnI1Jxkcq6VU12fGknmwKJkllFPHlHVI9PM1qELKphIuIy52 t/1SUsjz1NgvHYfVr/JbFnQiWHiZF/5xWNcxjIXZARxVl8lVPHGxMQxyS+J19Zfi 9pF0J/r7oxKRp9sOzYYZ2PJZSQ+Q4hZ9U4MCGDbJH1VLLODBH7WDhgio/NywK9ik bePz5W14Zc6Gsoz+K8s7uWVqHyFKmQD0FJM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:16:56 2026 by rpki-client