$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa File: 88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa (raw, json) Hash identifier: cgQ+ECYPVEse70hvuOkKsRLMqiylpZk50Nla9W9fGeg= Subject key identifier: 4B:3F:74:66:AF:5D:49:71:DA:56:6F:E3:12:01:F8:CA:58:03:39:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA2DFCCF1D7F8C2137D677480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 20431 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:cc:f1:d7:f8:c2:13:7d:67:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=1edb4d64-7ec9-45af-9325-311d7ff7155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:18:00:9e:a4:0f:25:bd:31:2e:bc:aa:64: 80:6e:fa:d0:63:ad:37:7f:1a:46:7d:b8:5a:77:d0: cc:69:de:38:43:d3:5f:65:5f:36:d3:3c:68:eb:8b: e4:76:f0:86:1e:63:07:f0:09:e8:5b:cd:36:af:9a: 9f:4c:84:08:f9:03:49:f3:c9:36:2e:da:57:b2:a8: 3f:53:48:e9:1d:24:f9:cc:c9:98:a1:7a:bd:d0:4f: a6:c1:9f:cb:d7:1a:f9:b7:d7:68:36:d1:4e:3b:22: 36:87:69:df:ff:3c:6e:cd:f1:96:eb:96:b6:bb:ca: 21:93:dc:1f:c0:9f:53:57:63:ac:f7:86:6b:5b:f3: c0:51:78:fd:a0:74:26:a3:1b:4a:69:aa:9e:0b:a6: 8d:1b:3c:c5:8f:dd:45:d2:db:09:41:6f:fc:3b:18: 7b:36:84:24:98:10:bb:02:a8:e7:78:20:aa:05:d7: 68:33:bf:d7:aa:3d:81:fa:26:1c:91:75:4a:e3:da: 01:b5:96:ef:37:90:92:7b:3e:1f:34:25:eb:f1:9f: 56:1d:90:c9:5f:d5:db:80:72:b3:57:52:2c:e4:dd: 78:f9:82:7c:bb:97:3a:bf:29:52:db:6d:53:de:2c: 89:da:b3:7d:6c:35:fc:cc:19:69:91:12:ba:3e:a1: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3F:74:66:AF:5D:49:71:DA:56:6F:E3:12:01:F8:CA:58:03:39:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88c44af4-f264-3f2d-9cdf-49b94251ba1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:9c:03:e5:bd:a1:82:46:2f:be:02:1c:70:d2:df:9f:63: 29:02:1b:b2:a1:41:67:cd:ce:04:8e:59:8a:5d:8f:8c:18:ac: 75:de:d5:14:71:a3:3a:f4:e2:db:00:ab:0a:4d:08:7b:b8:ba: be:d1:0c:e4:d3:92:c4:59:d0:54:78:21:3b:bb:09:5d:45:49: e5:71:8c:a0:dc:df:49:6a:e2:48:1b:25:c7:b0:0b:cd:b3:ee: bc:bf:4c:a3:9d:4e:bd:2e:a2:a7:89:f9:fe:10:1a:8b:f1:40: 33:fd:75:d1:6b:9d:a2:ed:62:45:b0:1e:8f:9c:ac:36:70:c2: 30:26:85:91:7c:59:31:b4:de:0b:5f:d0:4b:e3:90:4b:b9:fa: a4:8a:63:8a:9c:ae:b8:42:a6:ba:48:1d:cd:64:af:f2:6c:40: 14:01:04:a0:09:1f:71:b7:5e:21:76:8b:07:2f:78:df:85:94: 78:83:15:0c:35:87:6e:27:e6:e6:23:e6:56:2a:5c:00:b5:0b: f6:82:84:2a:7b:30:16:b5:07:b2:16:0d:63:9f:b7:c5:5d:65: e8:78:bd:6b:fd:af:29:db:c3:78:99:23:72:11:b5:f5:a5:34: 76:e3:29:78:76:22:ca:79:c3:0a:f9:ba:dc:c6:aa:08:46:55: 3d:8a:16:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i38zx1/jCE31ndIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk MWVkYjRkNjQtN2VjOS00NWFmLTkzMjUtMzExZDdmZjcxNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNoYAJ6kDyW9MS68qmSAbvrQY603fxpGfbha d9DMad44Q9NfZV820zxo64vkdvCGHmMH8AnoW802r5qfTIQI+QNJ88k2LtpXsqg/ U0jpHST5zMmYoXq90E+mwZ/L1xr5t9doNtFOOyI2h2nf/zxuzfGW65a2u8ohk9wf wJ9TV2Os94ZrW/PAUXj9oHQmoxtKaaqeC6aNGzzFj91F0tsJQW/8Oxh7NoQkmBC7 AqjneCCqBddoM7/Xqj2B+iYckXVK49oBtZbvN5CSez4fNCXr8Z9WHZDJX9XbgHKz V1Is5N14+YJ8u5c6vylS221T3iyJ2rN9bDX8zBlpkRK6PqHRhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEs/dGavXUlx2lZv4xIB+MpYAzlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODhjNDRhZjQtZjI2NC0z ZjJkLTljZGYtNDliOTQyNTFiYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFTJwD5b2hgkYvvgIccNLfn2MpAhuyoUFnzc4E jlmKXY+MGKx13tUUcaM69OLbAKsKTQh7uLq+0Qzk05LEWdBUeCE7uwldRUnlcYyg 3N9JauJIGyXHsAvNs+68v0yjnU69LqKnifn+EBqL8UAz/XXRa52i7WJFsB6PnKw2 cMIwJoWRfFkxtN4LX9BL45BLufqkimOKnK64Qqa6SB3NZK/ybEAUAQSgCR9xt14h dosHL3jfhZR4gxUMNYduJ+bmI+ZWKlwAtQv2goQqezAWtQeyFg1jn7fFXWXoeL1r /a8p28N4mSNyEbX1pTR24yl4diLKecMK+brcxqoIRlU9ihYz -----END CERTIFICATE-----Generated at Wed Jul 29 01:03:16 2026 by rpki-client