$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7746d000-1e75-3e1f-91a5-5476f127c1a7.roa File: 7746d000-1e75-3e1f-91a5-5476f127c1a7.roa (raw, json) Hash identifier: xoNufssLM2gWL8HVPyfc+wsCWeixOeocy4SJlXY6xno= Subject key identifier: 28:DA:F3:F0:B6:5A:56:74:3D:B6:AA:16:A1:AC:05:B5:F2:AD:7A:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78855C4C87C4F680C926D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7746d000-1e75-3e1f-91a5-5476f127c1a7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396546 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:55:c4:c8:7c:4f:68:0c:92:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8d23648-fc55-4cba-b1aa-522d403224ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:ce:33:31:ee:02:7c:35:03:7e:53:07:30: 26:29:22:69:89:c9:0d:08:1f:07:d1:78:31:4a:fa: d4:1f:ad:c5:f5:00:83:38:1d:10:2d:76:00:93:d9: 53:b5:05:76:55:6e:24:93:82:f2:49:f0:c7:b3:94: 4b:0b:b9:4e:26:4a:ea:c8:f4:65:a1:c5:00:9b:f0: b6:e6:67:27:07:f8:6c:da:d0:61:96:db:b8:a7:42: f3:49:97:31:37:3d:8e:19:5b:64:ef:38:e1:0f:f1: d6:bd:22:cd:8b:6f:fe:8a:89:13:1c:e2:68:7d:3b: 5a:df:47:91:98:23:15:fa:51:d2:fb:5a:36:7b:4f: 3c:08:9b:39:ab:8f:73:be:ff:c1:6c:2c:dd:ae:1c: 59:b0:67:41:26:52:95:11:1a:bf:b9:9a:86:53:38: d7:4e:8d:5a:5b:ff:07:74:e4:16:de:13:45:66:f4: 11:f1:d9:3f:1e:f3:cc:1f:26:d5:e6:a3:bf:ee:de: fb:89:0b:e6:4c:f1:80:59:05:dd:71:2c:a5:11:e0: 83:7b:bd:c9:58:31:78:d4:26:16:d0:bd:eb:fb:4c: 57:b0:32:d0:c8:18:0c:37:7c:e9:83:f9:08:de:4e: 90:0b:09:b9:10:6f:07:c5:3c:c5:f0:86:0a:84:bf: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DA:F3:F0:B6:5A:56:74:3D:B6:AA:16:A1:AC:05:B5:F2:AD:7A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7746d000-1e75-3e1f-91a5-5476f127c1a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e2:d4:e6:48:3a:c0:a1:49:86:11:eb:ce:43:f4:09:f6:4f: dd:ac:c1:56:cb:21:0e:bc:44:81:ba:dc:12:95:9d:0a:79:d4: eb:56:b4:5c:1d:75:1f:da:d7:9a:81:78:61:c0:75:5b:b7:24: f4:42:b6:e7:15:00:a3:b4:d4:7e:d2:ca:01:55:c2:a4:66:c7: d6:9a:df:9f:bd:36:3b:a5:f5:fb:bb:de:05:86:07:3c:7a:cc: 6d:41:f9:99:20:f8:60:15:87:b0:f5:11:03:c8:a8:7d:96:0f: 5b:19:a8:78:58:d9:b6:67:eb:bd:ca:a6:fb:c9:8d:16:fa:6d: 0c:87:bf:a5:39:48:8b:9b:c4:71:3a:38:dd:11:e3:da:03:79: bc:18:64:9a:59:ca:d9:b7:36:6b:fb:73:6e:21:f5:fd:8b:c0: 00:ab:a5:ac:e4:5e:64:f8:28:d4:c8:3d:7a:27:e6:e2:f7:ca: 92:a5:34:df:aa:01:54:d7:2a:e2:90:e2:d0:87:ae:4d:cb:80: 99:5c:a7:c1:4a:00:30:d7:ad:65:41:5d:0c:bd:6b:83:59:dd: 11:5c:a0:c8:a5:9e:6f:bc:cd:8b:09:90:ad:0a:28:de:92:20: 0a:88:9f:c8:1f:d3:94:08:be:fe:05:1f:94:87:4d:3b:76:f1: 8b:97:31:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFXEyHxPaAySbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhkMjM2NDgtZmM1NS00Y2JhLWIxYWEtNTIyZDQwMzIyNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzvOMzHuAnw1A35TBzAmKSJpickNCB8H0Xgx SvrUH63F9QCDOB0QLXYAk9lTtQV2VW4kk4LySfDHs5RLC7lOJkrqyPRlocUAm/C2 5mcnB/hs2tBhltu4p0LzSZcxNz2OGVtk7zjhD/HWvSLNi2/+iokTHOJofTta30eR mCMV+lHS+1o2e088CJs5q49zvv/BbCzdrhxZsGdBJlKVERq/uZqGUzjXTo1aW/8H dOQW3hNFZvQR8dk/HvPMHybV5qO/7t77iQvmTPGAWQXdcSylEeCDe73JWDF41CYW 0L3r+0xXsDLQyBgMN3zpg/kI3k6QCwm5EG8HxTzF8IYKhL/A4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCja8/C2WlZ0PbaqFqGsBbXyrXrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzc0NmQwMDAtMWU3NS0z ZTFmLTkxYTUtNTQ3NmYxMjdjMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAI4tTmSDrAoUmGEevOQ/QJ9k/drMFWyyEOvESB utwSlZ0KedTrVrRcHXUf2teagXhhwHVbtyT0QrbnFQCjtNR+0soBVcKkZsfWmt+f vTY7pfX7u94Fhgc8esxtQfmZIPhgFYew9REDyKh9lg9bGah4WNm2Z+u9yqb7yY0W +m0Mh7+lOUiLm8RxOjjdEePaA3m8GGSaWcrZtzZr+3NuIfX9i8AAq6Ws5F5k+CjU yD16J+bi98qSpTTfqgFU1yrikOLQh65Ny4CZXKfBSgAw161lQV0MvWuDWd0RXKDI pZ5vvM2LCZCtCijekiAKiJ/IH9OUCL7+BR+Uh007dvGLlzF3 -----END CERTIFICATE-----Generated at Wed Jul 29 03:40:30 2026 by rpki-client