$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa File: 1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa (raw, json) Hash identifier: 2l9wvkDOz3W7a83JNdH/WBAbqh9QoiX3b3I7i8fm4vo= Subject key identifier: 43:82:44:89:7F:CA:11:2E:5D:55:D1:00:85:DE:99:EB:BB:F2:98:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA788562CDC7402EC12136200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36631 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:56:2c:dc:74:02:ec:12:13:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea23f0d9-16a1-429a-ac20-b59914c7ec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:44:d4:54:ad:4c:48:b8:03:66:80:4c:15: 4c:01:fd:a7:63:8a:18:3a:2a:9a:eb:15:db:ce:ad: 2f:61:83:cc:19:3b:69:8f:ca:72:89:a3:ec:37:47: f2:39:5b:41:89:9b:93:5f:45:a2:40:ad:ae:f8:80: 74:f9:f8:ba:33:2d:7f:ee:bf:4e:4a:c3:44:62:cc: e6:ca:42:e0:fe:91:b2:b7:c2:98:4d:2b:6f:97:11: 90:80:8d:1f:f5:9f:48:b7:b8:f6:47:7f:bc:25:d6: f1:b7:df:90:3e:1a:6b:1b:af:2e:55:f6:38:d0:f9: 8c:10:d9:b4:ac:b5:f5:7d:be:6f:b4:46:ea:08:f7: 43:25:fb:32:ef:5c:0f:9c:89:c1:df:3c:e8:3d:50: f1:42:86:0b:a2:ab:78:3c:60:09:30:49:c7:b3:1c: 67:fe:43:7c:dd:cf:2d:10:e0:1e:81:f8:b8:a3:e7: 0f:d9:ce:62:cc:10:88:cc:93:a9:8d:04:14:a8:36: 0d:9d:6a:02:c1:5d:e3:b9:10:3e:1c:3d:d4:4f:34: 0f:02:04:fe:d8:20:af:d5:d4:69:e8:b5:ed:d7:3a: 24:6a:a2:19:be:49:0e:ce:77:91:59:02:2c:c5:f6: c5:e5:5f:de:7b:bf:29:c3:f3:85:7b:f6:ec:4c:83: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:82:44:89:7F:CA:11:2E:5D:55:D1:00:85:DE:99:EB:BB:F2:98:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:29:e8:17:ec:1a:a1:b5:4e:02:d6:2f:ee:0e:98:d7:79:61: 7c:02:3b:31:b4:ec:ae:23:51:b5:77:a7:e2:71:a0:4e:3a:f5: f0:f8:fb:e1:8f:77:04:ae:f1:2d:21:fe:29:f7:87:b7:c9:68: e0:e8:6f:cc:b3:1c:c6:6c:38:96:aa:c3:93:6b:cb:52:53:50: f8:61:4d:4c:74:41:1d:63:9e:7d:29:1e:01:20:23:ba:18:0c: df:50:67:d6:e1:73:f9:d2:bd:72:61:63:0b:b5:4f:73:53:92: b0:da:34:94:2a:63:aa:2f:ab:16:f4:67:d0:0f:13:65:5f:b3: 12:89:fa:5e:54:f0:c3:8b:ac:73:39:cd:e3:ae:a9:ad:be:8a: ff:e2:f6:c1:1a:ff:04:0c:59:4a:6e:15:c3:31:48:82:cc:45: fa:7f:a4:33:9b:e3:5b:a4:9e:7d:22:63:a3:ea:13:4e:b3:ff: 86:e7:c1:5b:ff:ee:8f:b8:b8:a3:d6:a5:bf:98:cb:f8:0d:0f: 56:93:30:65:f5:c1:46:93:85:9c:c2:77:fd:1e:91:d5:ae:81: 6e:4c:cc:a2:8c:b6:b4:f6:e1:dd:09:f8:66:7b:48:82:19:b5: c7:cc:d8:28:44:c9:49:7c:63:d8:55:35:3f:5d:c5:8b:ab:fc: af:b6:41:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFYs3HQC7BITYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWEyM2YwZDktMTZhMS00MjlhLWFjMjAtYjU5OTE0YzdlYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8JE1FStTEi4A2aATBVMAf2nY4oYOiqa6xXb zq0vYYPMGTtpj8pyiaPsN0fyOVtBiZuTX0WiQK2u+IB0+fi6My1/7r9OSsNEYszm ykLg/pGyt8KYTStvlxGQgI0f9Z9It7j2R3+8Jdbxt9+QPhprG68uVfY40PmMENm0 rLX1fb5vtEbqCPdDJfsy71wPnInB3zzoPVDxQoYLoqt4PGAJMEnHsxxn/kN83c8t EOAegfi4o+cP2c5izBCIzJOpjQQUqDYNnWoCwV3juRA+HD3UTzQPAgT+2CCv1dRp 6LXt1zokaqIZvkkOzneRWQIsxfbF5V/ee78pw/OFe/bsTIMNsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEOCRIl/yhEuXVXRAIXemeu78pjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZmMWRlMDEtYWVhOC0z YTM5LTkxNzYtNGQyMjRlZjhiZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5KegX7BqhtU4C1i/uDpjXeWF8AjsxtOyuI1G1 d6ficaBOOvXw+Pvhj3cErvEtIf4p94e3yWjg6G/MsxzGbDiWqsOTa8tSU1D4YU1M dEEdY559KR4BICO6GAzfUGfW4XP50r1yYWMLtU9zU5Kw2jSUKmOqL6sW9GfQDxNl X7MSifpeVPDDi6xzOc3jrqmtvor/4vbBGv8EDFlKbhXDMUiCzEX6f6Qzm+NbpJ59 ImOj6hNOs/+G58Fb/+6PuLij1qW/mMv4DQ9WkzBl9cFGk4Wcwnf9HpHVroFuTMyi jLa09uHdCfhme0iCGbXHzNgoRMlJfGPYVTU/XcWLq/yvtkGP -----END CERTIFICATE-----Generated at Wed Jul 29 06:41:56 2026 by rpki-client