$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2841545c-1cb0-368c-80cd-0ba17cd1e947.roa File: 2841545c-1cb0-368c-80cd-0ba17cd1e947.roa (raw, json) Hash identifier: bKc0feIK9KuGCFfzVYEiwVkJHx9p6FvRyM3sgh1eKFI= Subject key identifier: C4:E5:B0:B8:13:3D:81:3D:4D:55:64:BE:A2:65:10:1F:07:88:C5:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79053F8B3045648F5F0F600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2841545c-1cb0-368c-80cd-0ba17cd1e947.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396616 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:53:f8:b3:04:56:48:f5:f0:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=83878788-bf8d-41db-a8fa-bbce15c7cd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:64:10:90:cb:7f:ba:67:9f:25:dc:68:da: d8:81:06:a5:91:7d:4c:ae:a7:bd:6c:19:00:84:91: 66:c4:b2:14:fa:89:3d:bc:5c:ac:b9:9d:9a:2a:18: 37:fe:23:78:4d:e4:a0:96:5e:e9:cc:da:2e:06:35: 2c:8f:c1:66:8d:29:28:06:db:b1:a9:82:b3:34:e6: 22:0e:ef:fb:d7:5e:f6:93:34:b8:6e:ad:d4:93:c4: de:f0:83:73:82:f0:d7:41:19:8d:bf:b3:81:57:f7: 29:32:78:ce:66:d8:59:7e:45:84:6d:4e:fe:09:a4: 72:91:b3:d8:8f:1c:ad:32:c0:d5:3f:0d:56:39:75: 70:f3:78:25:b3:94:dc:30:ac:fa:9f:24:0a:06:8a: bc:84:3a:00:94:40:49:5a:1f:62:ff:ed:71:90:2d: fd:bd:31:5d:ca:27:e0:ee:42:dc:1a:b2:89:ba:20: 0c:d1:5b:59:61:17:7e:b8:9a:d5:f9:05:db:fa:13: ac:bc:ee:ad:ea:c7:ab:a0:6f:12:ad:59:cc:e1:e7: 0d:a5:c0:33:dc:71:12:f1:71:9c:03:7a:ea:84:50: 73:af:7f:fa:a7:ab:21:3d:f6:c7:65:07:c9:74:db: e1:a9:30:90:18:58:e8:fe:0e:4f:3d:40:ab:c5:bd: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E5:B0:B8:13:3D:81:3D:4D:55:64:BE:A2:65:10:1F:07:88:C5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2841545c-1cb0-368c-80cd-0ba17cd1e947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4c:59:59:dd:30:27:bd:0b:9e:29:39:8a:50:14:96:94:13: 51:51:a9:86:d0:a9:86:b7:8a:bb:fb:e7:96:03:69:4a:29:6a: 5a:c6:9b:80:82:bb:07:de:3a:d7:54:fb:80:bc:51:51:87:c9: 28:9f:d2:ca:bd:d0:72:e7:90:a3:f0:74:7c:f6:47:85:a1:ac: d3:f8:1e:64:5c:c6:2f:2b:01:0e:bc:07:81:67:c2:00:43:84: 68:79:c3:59:77:86:ed:b3:f9:71:df:34:87:94:54:0c:9a:eb: e7:10:fd:42:c2:56:95:d8:a0:a9:1a:ff:6b:bc:4c:51:6f:a0: 24:72:c7:75:93:db:71:08:41:45:a3:34:e4:9e:7d:f2:aa:de: 7d:88:ac:6b:88:b4:1d:d4:7a:71:31:61:44:b0:c6:4d:f9:88: 9a:46:11:54:f7:92:52:05:2b:23:35:36:f3:71:7a:fd:07:75: 10:18:56:4c:e4:a7:72:de:9d:da:2f:b4:8f:14:09:e8:37:12: 44:9c:db:28:ca:84:cb:c9:e2:ea:68:ca:f9:8f:92:37:db:63: 0f:e3:6c:6c:55:40:2c:36:94:c0:ba:c9:78:11:a2:13:50:db: d6:31:fd:bc:8c:8d:07:9f:a1:14:85:e1:82:84:55:9c:c4:93: 26:db:eb:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFP4swRWSPXw9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODM4Nzg3ODgtYmY4ZC00MWRiLWE4ZmEtYmJjZTE1YzdjZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/pkEJDLf7pnnyXcaNrYgQalkX1Mrqe9bBkA hJFmxLIU+ok9vFysuZ2aKhg3/iN4TeSgll7pzNouBjUsj8FmjSkoBtuxqYKzNOYi Du/71172kzS4bq3Uk8Te8INzgvDXQRmNv7OBV/cpMnjOZthZfkWEbU7+CaRykbPY jxytMsDVPw1WOXVw83gls5TcMKz6nyQKBoq8hDoAlEBJWh9i/+1xkC39vTFdyifg 7kLcGrKJuiAM0VtZYRd+uJrV+QXb+hOsvO6t6seroG8SrVnM4ecNpcAz3HES8XGc A3rqhFBzr3/6p6shPfbHZQfJdNvhqTCQGFjo/g5PPUCrxb0GwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTlsLgTPYE9TVVkvqJlEB8HiMXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0MTU0NWMtMWNiMC0z NjhjLTgwY2QtMGJhMTdjZDFlOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlMWVndMCe9C54pOYpQFJaUE1FRqYbQqYa3irv755YDaUopalrG m4CCuwfeOtdU+4C8UVGHySif0sq90HLnkKPwdHz2R4WhrNP4HmRcxi8rAQ68B4Fn wgBDhGh5w1l3hu2z+XHfNIeUVAya6+cQ/ULCVpXYoKka/2u8TFFvoCRyx3WT23EI QUWjNOSeffKq3n2IrGuItB3UenExYUSwxk35iJpGEVT3klIFKyM1NvNxev0HdRAY Vkzkp3LendovtI8UCeg3EkSc2yjKhMvJ4upoyvmPkjfbYw/jbGxVQCw2lMC6yXgR ohNQ29Yx/byMjQefoRSF4YKEVZzEkybb66k= -----END CERTIFICATE-----Generated at Wed Jul 29 04:46:47 2026 by rpki-client