$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa File: 87d87011-80de-397f-85c5-50de5579a4ab.roa (raw, json) Hash identifier: IrsjtGv4EIjykhw8VqCffWAYVNBB/h43fHJAcjMQTfo= Subject key identifier: 20:DF:4B:15:4E:7C:24:A5:7D:8E:2C:3D:71:B0:B3:0C:8A:B6:BC:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA2DFCD2E85468C0D7BBDAED0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 27544 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:cd:2e:85:46:8c:0d:7b:bd:ae:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=dcf21a6a-1ba5-4f9a-8aa7-f0a1212f64d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:e1:11:5d:e0:c2:b1:71:d4:03:09:2d:4e: 75:b0:67:bb:1d:59:51:8a:f2:f4:38:df:45:85:7b: 16:05:b0:af:7a:ba:74:a0:2b:f3:50:c3:67:7a:18: 18:6f:8f:30:3a:76:71:f0:fc:44:35:7e:ac:c3:f7: bb:25:a3:8d:09:e2:19:5b:54:f2:37:3f:cf:5d:27: 90:a8:b6:43:8a:75:9d:62:30:b5:13:b0:09:22:02: 55:80:8f:80:fe:58:3a:96:83:86:7a:16:94:9c:d2: 89:60:e9:f3:57:33:ad:52:12:1b:08:80:2c:05:e1: 00:04:02:16:4b:7c:2f:cf:67:25:e3:4f:e7:08:d5: 2b:19:9e:a0:e2:e5:e7:9b:ab:f1:69:47:a3:2c:0c: ef:b0:dc:1b:c9:d1:4b:0c:80:c8:b9:1d:f5:c6:98: 5d:6b:0b:6e:43:d8:e7:19:9c:8c:60:ed:43:20:79: 4c:02:78:d3:a4:e4:da:ce:0f:92:b8:d4:1d:f3:89: 95:1d:b5:98:95:99:6e:bf:55:b9:1f:6a:cd:12:5c: 17:1e:cd:22:d3:6d:49:2f:55:63:82:54:73:38:70: e0:a1:2a:67:dc:29:7b:92:70:ce:46:0a:77:ee:49: ef:50:b5:57:e8:6b:97:82:07:c0:8d:b6:68:23:b1: 55:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DF:4B:15:4E:7C:24:A5:7D:8E:2C:3D:71:B0:B3:0C:8A:B6:BC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87d87011-80de-397f-85c5-50de5579a4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:af:9a:88:19:d2:a0:ea:4d:d5:b8:b0:19:54:d9:d0:db: aa:54:30:38:72:0c:73:ae:c3:26:d1:c5:e0:a4:b4:5c:41:a6: 97:01:6b:de:3c:1f:0d:be:ae:c1:51:32:31:8a:9c:e8:09:44: 85:5b:c1:f8:09:a0:49:e2:63:ec:fb:86:dc:db:7a:f2:11:41: ce:64:31:6c:85:ea:46:56:d3:3d:fa:40:31:ce:e6:4b:c3:c2: ee:f1:ee:ca:f3:8f:8c:8b:bd:42:09:56:47:ea:12:9b:4c:1a: 5f:bc:b9:cf:92:65:a3:45:f4:3b:de:c8:ac:06:be:f0:81:a8: a4:3a:64:a7:77:44:b8:ea:ff:b0:2c:f3:4b:8b:78:34:92:b0: 49:b4:00:0b:00:54:d6:43:33:1a:79:fe:ff:37:23:71:c9:04: 8c:a6:09:95:60:6b:e2:17:99:c6:58:22:cc:69:38:06:72:71: 73:db:b3:97:14:fa:62:83:8e:4f:45:b0:f4:fe:d6:47:6f:9f: 9a:25:4d:67:21:c9:d4:33:71:d2:1b:9e:a9:d3:69:98:88:a8: de:f9:96:ac:56:0b:4f:47:54:67:73:13:6a:bd:ec:be:47:20: d6:65:d7:64:34:78:cb:99:c0:ad:e8:6e:b9:2e:43:0c:bd:73: aa:01:c2:b9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i380uhUaMDXu9rtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZGNmMjFhNmEtMWJhNS00ZjlhLThhYTctZjBhMTIxMmY2NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEnhEV3gwrFx1AMJLU51sGe7HVlRivL0ON9F hXsWBbCverp0oCvzUMNnehgYb48wOnZx8PxENX6sw/e7JaONCeIZW1TyNz/PXSeQ qLZDinWdYjC1E7AJIgJVgI+A/lg6loOGehaUnNKJYOnzVzOtUhIbCIAsBeEABAIW S3wvz2cl40/nCNUrGZ6g4uXnm6vxaUejLAzvsNwbydFLDIDIuR31xphdawtuQ9jn GZyMYO1DIHlMAnjTpOTazg+SuNQd84mVHbWYlZluv1W5H2rNElwXHs0i021JL1Vj glRzOHDgoSpn3Cl7knDORgp37knvULVX6GuXggfAjbZoI7FV2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCDfSxVOfCSlfY4sPXGwswyKtrzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdkODcwMTEtODBkZS0z OTdmLTg1YzUtNTBkZTU1NzlhNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBk9K+aiBnSoOpN1biwGVTZ0NuqVDA4cgxzrsMm 0cXgpLRcQaaXAWvePB8Nvq7BUTIxipzoCUSFW8H4CaBJ4mPs+4bc23ryEUHOZDFs hepGVtM9+kAxzuZLw8Lu8e7K84+Mi71CCVZH6hKbTBpfvLnPkmWjRfQ73sisBr7w gaikOmSnd0S46v+wLPNLi3g0krBJtAALAFTWQzMaef7/NyNxyQSMpgmVYGviF5nG WCLMaTgGcnFz27OXFPpig45PRbD0/tZHb5+aJU1nIcnUM3HSG56p02mYiKje+Zas VgtPR1RncxNqvey+RyDWZddkNHjLmcCt6G65LkMMvXOqAcK5 -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:12 2026 by rpki-client