$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa File: 48dbe947-a47b-3bd7-b077-398aa8b0af85.roa (raw, json) Hash identifier: AYFhT42BjRAW8gYSUcgKPD9uFdC0qwIPy82t3CLxj0Q= Subject key identifier: DF:28:23:21:8F:47:BE:6B:60:41:5A:7B:2B:CB:30:02:3F:71:60:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C6DD341ADFADCD5D15580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20431 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:6d:d3:41:ad:fa:dc:d5:d1:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=790fbd36-a730-4dff-8883-0c195e6c3c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:13:23:d4:92:c8:3a:7b:93:48:bf:9b:96: 77:b9:cd:a2:f2:0a:8d:f8:c4:b4:fa:ad:15:82:e6: 2e:4b:fe:51:8d:8d:3b:d9:01:74:ac:85:95:5b:09: 31:0f:a4:f0:67:d0:bc:5e:5c:e7:2a:e2:7f:7b:57: e7:35:15:c9:db:16:d3:d2:72:ff:bf:e8:5f:a0:fd: d2:ba:36:b2:4a:2b:c9:05:7d:8a:37:d9:d2:9c:84: 92:f2:69:35:1e:a8:db:e3:79:c4:38:60:e8:74:b3: 0e:a5:46:1e:6b:08:61:12:f0:1f:65:47:82:00:07: 7e:4a:0c:83:31:5c:93:2d:25:77:6e:8f:69:a4:e7: 53:07:74:11:7c:7d:9a:42:53:27:b5:d0:95:7f:5d: a7:f5:99:3a:f8:89:ba:7c:5f:77:aa:a7:68:24:f5: 73:42:c2:ac:31:9d:a7:aa:95:6b:a2:6a:d6:1c:cb: 13:91:6a:03:09:6a:dd:d7:7c:a5:ea:60:31:91:25: be:81:c0:44:b0:3c:5c:81:eb:0e:1a:04:41:68:37: 70:7e:b8:d5:5c:ae:8a:0b:a1:0d:1d:67:67:b7:15: e8:5b:2b:93:31:8d:2f:33:27:82:68:ce:85:98:d9: a5:39:e3:94:4b:93:d1:af:77:76:72:e7:3e:9f:b7: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:23:21:8F:47:BE:6B:60:41:5A:7B:2B:CB:30:02:3F:71:60:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:21:06:9f:e2:8b:e5:b8:a9:0f:fc:51:bc:02:ba:1c:8f:42: 6a:ae:05:fd:ee:76:02:01:3c:c4:75:2e:3e:e8:c6:37:93:b1: 6d:fe:5d:23:d6:81:ab:e8:fa:a8:ce:6d:b2:47:eb:5a:b5:ea: 8d:bb:6e:dc:cf:7e:84:09:82:2a:c6:4f:59:e4:51:7b:55:f6: 3e:4c:9c:e1:6e:35:b3:88:eb:7c:be:a1:e6:ea:ba:d4:ec:05: f2:60:ae:29:93:7c:06:4b:38:69:19:80:c7:73:ad:b7:bb:4a: 6b:b1:15:6e:32:f8:ee:b0:56:e7:5d:cc:20:62:f9:c5:2a:2a: 5f:78:8b:e6:81:b2:85:8d:bc:40:2b:b7:a4:78:34:76:08:72: 92:ee:9d:2a:a5:a7:b4:9b:c8:de:26:6e:3f:81:08:7b:0a:0b: d0:0e:bf:e9:75:31:8c:2f:64:c4:c2:c5:00:b6:dc:e5:74:20: c8:47:95:ad:b9:51:5c:1b:01:a6:9b:3f:12:6a:dc:90:66:8c: 42:c1:21:ea:cc:cc:4e:7c:71:a0:7c:84:46:ba:82:3e:6a:d6: 56:f3:02:5a:af:09:95:1c:ef:74:07:bc:15:9f:0e:62:71:40: 79:a7:55:ba:9b:74:23:e5:d7:64:92:08:39:48:7f:50:26:18: a3:5e:f1:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnG3TQa363NXRVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzkwZmJkMzYtYTczMC00ZGZmLTg4ODMtMGMxOTVlNmMzYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQQTI9SSyDp7k0i/m5Z3uc2i8gqN+MS0+q0V guYuS/5RjY072QF0rIWVWwkxD6TwZ9C8XlznKuJ/e1fnNRXJ2xbT0nL/v+hfoP3S ujaySivJBX2KN9nSnISS8mk1Hqjb43nEOGDodLMOpUYeawhhEvAfZUeCAAd+SgyD MVyTLSV3bo9ppOdTB3QRfH2aQlMntdCVf12n9Zk6+Im6fF93qqdoJPVzQsKsMZ2n qpVromrWHMsTkWoDCWrd13yl6mAxkSW+gcBEsDxcgesOGgRBaDdwfrjVXK6KC6EN HWdntxXoWyuTMY0vMyeCaM6FmNmlOeOUS5PRr3d2cuc+n7ep/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN8oIyGPR75rYEFaeyvLMAI/cWB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDhkYmU5NDctYTQ3Yi0z YmQ3LWIwNzctMzk4YWE4YjBhZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAEhBp/ii+W4qQ/8UbwCuhyPQmquBf3udgIBPMR1Lj7oxjeTsW3+ XSPWgavo+qjObbJH61q16o27btzPfoQJgirGT1nkUXtV9j5MnOFuNbOI63y+oebq utTsBfJgrimTfAZLOGkZgMdzrbe7SmuxFW4y+O6wVuddzCBi+cUqKl94i+aBsoWN vEArt6R4NHYIcpLunSqlp7SbyN4mbj+BCHsKC9AOv+l1MYwvZMTCxQC23OV0IMhH la25UVwbAaabPxJq3JBmjELBIerMzE58caB8hEa6gj5q1lbzAlqvCZUc73QHvBWf DmJxQHmnVbqbdCPl12SSCDlIf1AmGKNe8WQ= -----END CERTIFICATE-----Generated at Wed Jul 29 05:43:08 2026 by rpki-client