$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa File: 2b788f28-19e4-32c4-a293-8ce6047a481e.roa (raw, json) Hash identifier: 1BfI4X5VZ1TYrTmW/XAYPHd12pwZn7YxvRbZeJZaKYw= Subject key identifier: 01:C6:E2:F9:D0:E1:9A:2C:EC:22:37:4D:9D:85:09:A8:08:18:4B:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA788564D5D84A1E0F3772E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396590 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:56:4d:5d:84:a1:e0:f3:77:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4dc340f7-d783-4cee-9d0d-e1b0e672178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:aa:26:9c:b4:ca:07:d3:c1:f3:a7:95:67:a0: 43:90:85:0f:9d:b2:cb:da:db:fb:2c:6d:86:08:ab: 55:90:21:86:11:6c:93:9b:41:e9:9a:29:ab:6a:e8: d7:4a:6b:0a:b3:b4:e2:12:51:9d:ec:33:1e:69:1e: f4:b6:d5:cc:5f:ea:9b:6c:44:94:3a:26:51:7f:3b: 14:72:39:36:70:02:9e:97:3c:47:f3:01:85:19:f3: fc:c4:fd:d5:cb:e7:7d:be:99:76:40:cb:eb:84:d6: 1e:11:fd:da:67:52:9a:e5:38:03:c6:bf:cc:57:e9: d2:a6:90:f0:26:22:6a:96:8a:95:5d:fc:ac:54:04: 18:8a:ec:bb:7b:1f:a3:cd:02:f7:1c:88:9b:27:e7: 84:e6:24:42:a7:d0:a8:a4:bc:d0:5d:3e:55:02:5c: a7:ca:c4:97:6f:95:b1:9c:7b:dc:42:30:db:0a:e9: f2:69:bb:c6:90:7b:0d:7a:14:69:ac:54:5a:a1:b8: 4a:6e:66:c0:b2:8d:00:82:40:ee:d0:9c:cc:08:d0: cf:e7:c6:6b:37:22:74:85:51:22:e1:9b:8f:79:37: 07:5a:69:6f:76:9b:08:11:25:8d:bf:ae:2a:1a:25: e6:fe:9e:1a:ed:df:93:d5:5d:c0:c2:59:f1:38:57: a9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C6:E2:F9:D0:E1:9A:2C:EC:22:37:4D:9D:85:09:A8:08:18:4B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b788f28-19e4-32c4-a293-8ce6047a481e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:11:d4:d6:87:3f:5e:b4:20:e1:ed:0a:de:26:30:da:11:aa: b0:1b:61:3f:05:8b:90:3e:e2:73:40:1e:f7:20:f0:5e:18:c5: 19:b8:35:9a:6b:73:0f:23:46:de:87:a7:07:34:a4:ab:de:b0: 92:67:60:35:97:e1:a4:b8:d2:1a:cf:4c:82:11:e7:42:46:91: e5:fb:e4:13:ee:62:0c:bc:88:76:01:f2:5a:cd:6a:24:3d:9c: 7a:f7:4b:ab:c2:e6:1e:a6:4b:fb:2f:70:e3:72:69:03:61:f4: 45:0d:69:46:d7:2e:8b:05:61:8c:97:9a:6a:db:7e:30:34:f1: 82:c0:d8:b0:7a:b2:86:9e:d5:43:78:5b:81:e4:d0:bd:81:f9: 40:29:80:b2:bf:30:26:25:82:4d:b6:db:6c:8e:eb:a9:dc:f4: fa:09:82:2d:cb:fe:19:7e:db:df:2e:8b:56:9c:a9:fc:7e:e2: a6:63:09:45:9d:0e:4d:f2:61:be:b7:60:69:78:a8:39:55:2f: 3c:27:1a:e6:2c:a1:9c:aa:32:55:31:38:1f:b7:26:01:7d:ef: 2e:ac:71:56:a7:92:d6:02:1d:42:5e:45:22:42:f2:8f:96:7f: 49:4f:d2:0d:28:a3:56:43:31:16:63:fa:ff:32:63:24:ce:de: 19:0c:68:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFZNXYSh4PN3LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGRjMzQwZjctZDc4My00Y2VlLTlkMGQtZTFiMGU2NzIxNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6omnLTKB9PB86eVZ6BDkIUPnbLL2tv7LG2G CKtVkCGGEWyTm0HpmimraujXSmsKs7TiElGd7DMeaR70ttXMX+qbbESUOiZRfzsU cjk2cAKelzxH8wGFGfP8xP3Vy+d9vpl2QMvrhNYeEf3aZ1Ka5TgDxr/MV+nSppDw JiJqloqVXfysVAQYiuy7ex+jzQL3HIibJ+eE5iRCp9CopLzQXT5VAlynysSXb5Wx nHvcQjDbCunyabvGkHsNehRprFRaobhKbmbAso0AgkDu0JzMCNDP58ZrNyJ0hVEi 4ZuPeTcHWmlvdpsIESWNv64qGiXm/p4a7d+T1V3AwlnxOFepMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAHG4vnQ4Zos7CI3TZ2FCagIGEttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI3ODhmMjgtMTllNC0z MmM0LWEyOTMtOGNlNjA0N2E0ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHEdTWhz9etCDh7QreJjDaEaqwG2E/BYuQPuJz QB73IPBeGMUZuDWaa3MPI0beh6cHNKSr3rCSZ2A1l+GkuNIaz0yCEedCRpHl++QT 7mIMvIh2AfJazWokPZx690urwuYepkv7L3DjcmkDYfRFDWlG1y6LBWGMl5pq234w NPGCwNiwerKGntVDeFuB5NC9gflAKYCyvzAmJYJNtttsjuup3PT6CYIty/4Zftvf LotWnKn8fuKmYwlFnQ5N8mG+t2BpeKg5VS88JxrmLKGcqjJVMTgftyYBfe8urHFW p5LWAh1CXkUiQvKPln9JT9INKKNWQzEWY/r/MmMkzt4ZDGjL -----END CERTIFICATE-----Generated at Wed Jul 29 06:52:10 2026 by rpki-client