$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa File: 60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa (raw, json) Hash identifier: zmDQ/uUPzwB70s0TZO5CGkn6ezhtNBcTluv2d2QrwV4= Subject key identifier: 0E:80:7B:67:AF:AA:E8:05:27:DD:43:2D:2B:03:72:F5:63:3F:24:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79CB1370F6512FE87E48D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396578 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:b1:37:0f:65:12:fe:87:e4:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bde41fd5-4b8f-463b-b823-8b6b4cf7893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:c9:37:f5:ce:d5:ef:c6:97:d7:63:c2:af: cb:96:f0:c9:1a:36:0a:8e:88:46:7a:df:b6:6d:e7: ed:7b:31:41:91:26:e5:68:dc:4d:7f:c1:af:cf:cb: 05:c7:c2:c6:39:92:7a:a5:30:a5:c0:8f:14:84:e3: 83:24:ed:f4:3c:c0:7a:77:88:63:17:bb:84:02:cb: 4f:90:b4:12:4c:74:4f:60:63:31:38:2d:ff:ef:2e: d4:99:3a:90:52:af:cf:33:8a:34:b1:09:2b:9b:22: 2e:db:0c:d3:b2:aa:62:4b:b2:f6:9c:75:9c:22:e5: e5:1f:6c:69:fa:62:88:ce:a3:7d:25:bd:29:86:fc: 91:cc:21:f3:38:77:57:19:11:e5:1e:37:da:ca:ae: af:5a:f8:7b:d6:20:4d:0e:a1:26:ca:cb:3d:87:49: b5:3f:52:3e:86:b4:30:bd:ee:b8:30:2f:02:2a:35: 0d:f7:99:8a:c8:27:a9:34:03:ca:30:85:38:67:6a: 79:ac:51:42:37:b1:87:9c:cd:e7:6d:f0:59:48:e2: 3d:62:75:c6:62:12:2d:52:23:53:5e:dc:fa:27:70: 50:3a:6a:71:4a:4a:4a:09:11:ae:8e:69:9c:2e:14: 61:10:e4:34:12:00:28:22:87:d3:0d:b3:c0:58:60: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:80:7B:67:AF:AA:E8:05:27:DD:43:2D:2B:03:72:F5:63:3F:24:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60baee0e-fb4d-307b-abb9-6fdbfcea7484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:64:66:46:f5:13:5c:dc:1e:3a:c2:56:88:1d:cb:41:3b:14: 83:24:1a:07:ae:7d:86:2f:9b:c3:75:ae:5e:43:84:55:c9:a3: 95:07:a2:77:37:f4:51:36:b0:f6:86:2b:9e:38:ec:26:ed:09: 97:dd:7b:42:44:82:39:77:df:c8:c5:14:d6:ea:99:cf:70:38: c3:dc:e2:fb:46:4a:4d:ae:b3:93:d2:ad:39:f4:a9:80:89:45: 65:48:7d:b9:e9:d6:06:60:c7:cd:f2:bd:ff:5d:28:ed:6c:12: 0d:b1:bd:e7:f0:9f:6b:32:34:12:39:84:93:d6:45:70:79:7d: 26:38:a1:b4:1e:1a:6b:96:cb:73:71:46:74:ee:9b:c9:15:71: dd:ef:9c:8f:c8:e8:3c:c9:dd:1e:0a:b2:17:35:09:ef:6d:48: b6:6a:fe:16:f9:5c:21:04:90:8c:39:49:1e:1a:91:51:b3:59: 3d:38:c9:e1:78:57:44:f9:e7:a3:32:f7:59:e4:a9:23:90:bf: 23:fc:33:c5:89:4e:54:f4:a8:3d:95:b5:68:ba:62:be:5f:5a: ce:1b:f5:6c:9f:1a:4a:d6:c5:dd:71:b8:a6:40:5e:c2:48:57: 4b:77:c3:51:4d:69:56:73:67:00:f0:96:c8:9c:5e:43:ad:6c: bf:df:9c:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnLE3D2US/ofkjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmRlNDFmZDUtNGI4Zi00NjNiLWI4MjMtOGI2YjRjZjc4OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/7JN/XO1e/Gl9djwq/LlvDJGjYKjohGet+2 beftezFBkSblaNxNf8Gvz8sFx8LGOZJ6pTClwI8UhOODJO30PMB6d4hjF7uEAstP kLQSTHRPYGMxOC3/7y7UmTqQUq/PM4o0sQkrmyIu2wzTsqpiS7L2nHWcIuXlH2xp +mKIzqN9Jb0phvyRzCHzOHdXGRHlHjfayq6vWvh71iBNDqEmyss9h0m1P1I+hrQw ve64MC8CKjUN95mKyCepNAPKMIU4Z2p5rFFCN7GHnM3nbfBZSOI9YnXGYhItUiNT Xtz6J3BQOmpxSkpKCRGujmmcLhRhEOQ0EgAoIofTDbPAWGBGEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6Ae2evqugFJ91DLSsDcvVjPyTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBiYWVlMGUtZmI0ZC0z MDdiLWFiYjktNmZkYmZjZWE3NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANkZkb1E1zcHjrCVogdy0E7FIMkGgeufYYvm8N1rl5DhFXJo5UH onc39FE2sPaGK5447CbtCZfde0JEgjl338jFFNbqmc9wOMPc4vtGSk2us5PSrTn0 qYCJRWVIfbnp1gZgx83yvf9dKO1sEg2xvefwn2syNBI5hJPWRXB5fSY4obQeGmuW y3NxRnTum8kVcd3vnI/I6DzJ3R4Kshc1Ce9tSLZq/hb5XCEEkIw5SR4akVGzWT04 yeF4V0T556My91nkqSOQvyP8M8WJTlT0qD2VtWi6Yr5fWs4b9WyfGkrWxd1xuKZA XsJIV0t3w1FNaVZzZwDwlsicXkOtbL/fnFc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:26:49 2026 by rpki-client