$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa File: 3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa (raw, json) Hash identifier: Wqi+odq/x5momKTpJnFebx7y+1Qe3hsjf5mPW2+UzkE= Subject key identifier: 3E:D2:91:06:DF:70:55:7A:8F:34:46:DC:1A:9B:A9:8A:CF:3B:1A:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7885A558D2096F3D0420000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36627 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5a:55:8d:20:96:f3:d0:42:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3c339987-9812-43c2-b754-f102b875a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:64:4f:aa:98:b1:e4:46:7f:8e:19:b3:43: f6:95:e2:dd:dd:3a:a3:84:3a:ab:60:6b:7e:3b:fd: 57:e4:12:b7:a7:65:82:12:9b:cf:85:34:3b:60:f1: c3:1e:ac:a2:ba:7c:a7:56:aa:e6:f5:77:4c:91:4b: 5b:ad:87:aa:d6:4e:b6:4f:4e:fe:b4:32:12:62:d8: b2:9a:ca:dc:8e:c9:7c:10:1a:24:d6:51:1f:af:4b: 4a:a5:d8:d5:0d:66:98:4f:07:96:69:71:9d:dd:d5: 45:3a:37:2c:9b:25:8b:39:1b:2c:55:4c:9b:3b:53: f2:49:2a:04:6d:2a:26:24:95:00:df:00:f1:2d:01: 85:24:72:22:4f:23:4e:fa:e5:03:df:c7:f6:ad:c3: d8:5d:fc:5c:d9:ab:6f:5e:bd:03:c4:44:16:9a:1c: 1f:ea:43:ae:4b:ba:5d:43:7f:c0:18:8b:a4:78:03: c3:c4:4c:ee:c0:88:66:8b:2c:76:ca:30:d7:a1:9c: 5f:5f:fe:4a:5d:ed:12:bf:06:c7:4f:5b:64:16:b5: 7b:85:65:8f:5d:12:72:16:81:a2:69:66:fa:94:10: d6:fa:53:38:fe:de:70:8b:8b:bd:3b:14:1a:37:fd: dd:1c:ba:d2:11:fe:e1:ff:2a:a1:a9:05:a3:f8:94: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D2:91:06:DF:70:55:7A:8F:34:46:DC:1A:9B:A9:8A:CF:3B:1A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:99:26:ce:65:d2:ee:d5:ca:72:60:21:5a:00:02:bf:b2:07: 96:73:f2:37:5e:76:8a:f9:8d:2c:4e:8a:50:ff:6f:9b:f1:ff: a2:0b:76:81:4d:5c:df:43:ad:90:fd:af:d3:2b:81:05:4c:08: af:30:74:f6:48:65:82:6c:82:c5:bf:11:42:e3:50:4b:8f:c9: 99:95:b4:4b:ae:57:bd:e2:1f:6c:15:e1:8a:ab:91:cd:2b:0d: f4:65:1e:d2:b8:98:3c:b9:9c:70:9e:6c:9f:2b:88:a8:2a:41: be:71:cd:fb:eb:a4:4c:84:c8:99:62:86:07:de:0b:35:ef:c6: 0d:6c:2b:32:14:16:04:33:6b:91:85:2c:f1:1d:d6:78:cf:52: d2:70:a0:8c:2b:46:74:2a:66:d0:55:e5:07:f5:2a:fe:38:7d: 20:77:e2:ae:82:58:5f:99:f2:c4:ca:ab:86:a4:d9:1c:f5:5d: 87:74:61:ca:b2:42:89:a5:d8:ca:7b:58:f5:c7:91:d0:cd:f9: 27:73:ee:cf:de:da:71:ac:c8:0d:d4:b7:83:6d:07:0b:0f:47: f8:1f:e7:1a:82:dc:c3:07:09:1c:42:33:1b:fd:d6:23:d7:f4: 90:54:03:7e:a5:1e:55:8f:28:d1:7e:01:81:4c:26:4b:29:28: 94:1b:f8:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFpVjSCW89BCAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2MzMzk5ODctOTgxMi00M2MyLWI3NTQtZjEwMmI4NzVhMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFNkT6qYseRGf44Zs0P2leLd3TqjhDqrYGt+ O/1X5BK3p2WCEpvPhTQ7YPHDHqyiunynVqrm9XdMkUtbrYeq1k62T07+tDISYtiy msrcjsl8EBok1lEfr0tKpdjVDWaYTweWaXGd3dVFOjcsmyWLORssVUybO1PySSoE bSomJJUA3wDxLQGFJHIiTyNO+uUD38f2rcPYXfxc2atvXr0DxEQWmhwf6kOuS7pd Q3/AGIukeAPDxEzuwIhmiyx2yjDXoZxfX/5KXe0SvwbHT1tkFrV7hWWPXRJyFoGi aWb6lBDW+lM4/t5wi4u9OxQaN/3dHLrSEf7h/yqhqQWj+JRe2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD7SkQbfcFV6jzRG3BqbqYrPOxqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E0N2M1YWEtZjJkZi0z YTRjLTkyMzEtNzU5NmZmYmQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+mSbOZdLu1cpyYCFaAAK/sgeWc/I3XnaK+Y0s TopQ/2+b8f+iC3aBTVzfQ62Q/a/TK4EFTAivMHT2SGWCbILFvxFC41BLj8mZlbRL rle94h9sFeGKq5HNKw30ZR7SuJg8uZxwnmyfK4ioKkG+cc3766RMhMiZYoYH3gs1 78YNbCsyFBYEM2uRhSzxHdZ4z1LScKCMK0Z0KmbQVeUH9Sr+OH0gd+KuglhfmfLE yquGpNkc9V2HdGHKskKJpdjKe1j1x5HQzfknc+7P3tpxrMgN1LeDbQcLD0f4H+ca gtzDBwkcQjMb/dYj1/SQVAN+pR5VjyjRfgGBTCZLKSiUG/hz -----END CERTIFICATE-----Generated at Wed Jul 29 05:44:50 2026 by rpki-client