$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa File: 4044adc4-038e-35a2-8aca-cfea792550c3.roa (raw, json) Hash identifier: 2tRv2EoZJUnRyLjx4afOgqRYr4lR7tTSmwsPO5AL5o4= Subject key identifier: 48:44:70:4C:22:22:56:A7:2D:9F:FB:16:F6:B5:C5:40:6C:EE:87:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BC3A3A5F14FB514B28100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36618 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:c3:a3:a5:f1:4f:b5:14:b2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0f144bd8-4389-4f45-a23d-a73d14fd21d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:5a:38:c0:da:e2:a3:f9:ce:07:9b:02:2b: ac:24:e1:91:82:9e:c9:67:c4:9d:1d:e1:9c:76:94: 1c:e3:f1:8f:eb:9c:38:36:f6:a9:ff:66:e3:62:3a: e9:27:f4:d0:d2:c7:e4:0d:fe:7d:b8:11:3c:a5:a6: ef:9c:3e:6c:82:48:0a:29:4b:38:8e:e3:0e:02:26: 40:6a:2c:0a:5e:a8:10:77:d2:ea:ca:06:de:0b:71: 55:d9:f2:cf:51:84:20:9e:42:25:70:a1:9d:86:9e: d3:b3:fa:bc:3f:53:18:1b:c1:dc:72:a0:08:69:5a: ac:80:97:a5:c4:a3:0b:89:70:1c:d8:86:48:a3:9a: d6:ad:81:7b:56:ef:33:0e:6f:b8:2c:29:5f:e3:f1: 75:f5:42:de:4c:ed:b9:3b:35:68:72:ef:fa:3a:2b: de:58:d1:b5:7a:0f:14:11:62:ee:fb:78:2f:14:18: 07:ea:d9:d6:6c:cf:d3:fd:bd:80:2e:89:20:a9:94: 54:9b:34:c4:c0:75:d9:af:e8:7b:5a:aa:cc:59:5e: c2:3d:4a:70:ac:5d:7b:f2:f8:63:9d:68:93:8e:55: 2b:b2:7b:84:e7:15:17:b6:b4:14:91:01:b0:74:b8: e8:6a:36:74:ac:79:3d:90:f8:40:bf:be:14:fc:78: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:44:70:4C:22:22:56:A7:2D:9F:FB:16:F6:B5:C5:40:6C:EE:87:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:50:88:0f:52:e7:a4:03:8f:b6:1a:07:e3:ba:25:1d:c6:90: 44:2d:ba:37:26:2b:94:49:04:ef:b5:d6:92:77:cc:f5:a4:ac: 0a:39:76:d1:ab:9b:61:6f:05:4d:c2:db:26:3b:c0:9f:1c:60: 12:b1:87:c7:b8:ef:1b:e5:f4:a5:36:ff:c3:8b:55:67:b6:67: c4:0c:91:35:9c:0c:c3:2f:df:fd:a8:e9:ea:b6:ad:2c:75:7d: d0:c8:5a:53:dc:8a:ee:5b:d5:73:21:c2:1a:5b:25:7a:e8:6e: 2b:62:62:2e:6a:a3:aa:0c:6f:04:59:f4:a7:f9:9b:2b:f1:1c: e6:ee:a2:a9:f8:f9:57:6c:57:e9:65:ad:04:aa:14:47:b1:5d: 50:0c:82:42:25:3e:89:87:f4:30:8e:52:3d:19:02:fb:4d:3c: 4f:2e:4a:c7:b1:cb:3b:51:dd:f5:eb:29:46:2a:74:cc:c9:a0: 87:36:00:da:7f:2f:4c:44:e7:24:a8:1e:94:5f:10:e3:83:28: 1d:81:8c:67:9b:97:28:53:f4:c8:fb:d0:b6:0a:7f:fc:41:7a: db:8e:66:97:bb:8e:88:14:2a:77:81:4f:7e:e2:d8:c9:4d:e5: ea:bf:53:0d:46:60:4f:5a:6d:3a:5c:15:c2:12:c4:9f:69:bc: da:2e:0e:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm8OjpfFPtRSygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGYxNDRiZDgtNDM4OS00ZjQ1LWEyM2QtYTczZDE0ZmQyMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO1aOMDa4qP5zgebAiusJOGRgp7JZ8SdHeGc dpQc4/GP65w4Nvap/2bjYjrpJ/TQ0sfkDf59uBE8pabvnD5sgkgKKUs4juMOAiZA aiwKXqgQd9LqygbeC3FV2fLPUYQgnkIlcKGdhp7Ts/q8P1MYG8HccqAIaVqsgJel xKMLiXAc2IZIo5rWrYF7Vu8zDm+4LClf4/F19ULeTO25OzVocu/6OiveWNG1eg8U EWLu+3gvFBgH6tnWbM/T/b2ALokgqZRUmzTEwHXZr+h7WqrMWV7CPUpwrF178vhj nWiTjlUrsnuE5xUXtrQUkQGwdLjoajZ0rHk9kPhAv74U/HiDvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEhEcEwiIlanLZ/7Fva1xUBs7ofSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NGFkYzQtMDM4ZS0z NWEyLThhY2EtY2ZlYTc5MjU1MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFQiA9S56QDj7YaB+O6JR3GkEQtujcmK5RJBO+11pJ3zPWkrAo5 dtGrm2FvBU3C2yY7wJ8cYBKxh8e47xvl9KU2/8OLVWe2Z8QMkTWcDMMv3/2o6eq2 rSx1fdDIWlPciu5b1XMhwhpbJXrobitiYi5qo6oMbwRZ9Kf5myvxHObuoqn4+Vds V+llrQSqFEexXVAMgkIlPomH9DCOUj0ZAvtNPE8uSsexyztR3fXrKUYqdMzJoIc2 ANp/L0xE5ySoHpRfEOODKB2BjGeblyhT9Mj70LYKf/xBetuOZpe7jogUKneBT37i 2MlN5eq/Uw1GYE9abTpcFcISxJ9pvNouDss= -----END CERTIFICATE-----Generated at Wed Jul 29 06:42:14 2026 by rpki-client