$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa File: af204db8-7a83-31ab-ab57-ce984a580492.roa (raw, json) Hash identifier: DpG/oPEt2W7e6u49s2ovT4WfB7637ncNKzi3eOlztpg= Subject key identifier: 89:B2:DE:F5:7F:C0:09:9A:BF:36:64:21:B9:4D:1D:06:A1:97:8D:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79255C2B010E693570D62C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36622 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:55:c2:b0:10:e6:93:57:0d:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f0c70530-1433-43c0-8630-56e0613d3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:14:7d:68:b0:08:a5:fd:7a:6e:57:33:ed:2f: 6c:3f:80:ab:51:00:b2:e6:32:a2:a9:69:8f:88:52: 1a:ef:af:e2:65:21:72:c7:9c:ac:98:3d:ee:7b:92: 2e:2c:41:9a:cf:a9:f6:40:55:55:e8:66:b2:3a:bb: 47:7d:3f:3a:25:40:71:64:29:51:67:e2:f6:56:ae: d6:79:fd:66:ac:e0:49:93:91:cf:01:b3:17:89:fd: bf:a1:ad:f7:10:9c:b0:ae:e8:fc:1d:2b:ae:aa:d8: b9:e7:a3:97:98:13:98:e8:a1:ab:7e:33:4d:fa:03: aa:4f:89:1b:87:da:00:c0:f1:49:7c:09:dd:5c:37: 11:13:77:b2:80:c7:1e:13:b4:5f:9a:1b:a2:fd:26: 8d:5b:15:b4:a3:c4:87:94:2a:f9:fb:ca:56:1d:ae: 6b:b9:6b:69:42:aa:44:12:6f:59:a5:b1:d8:45:21: 5d:05:59:63:49:1e:0f:70:28:15:7a:e1:3a:b2:74: f7:f0:27:9d:3b:bd:0a:a2:77:7e:ab:37:11:4a:8c: 62:46:b3:a0:7d:39:ea:40:53:96:3a:8e:95:93:5e: 76:ae:2d:15:66:d3:99:a5:73:e3:ad:ef:1f:18:24: 61:83:87:b7:92:ac:30:32:35:7b:0b:29:61:c1:04: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B2:DE:F5:7F:C0:09:9A:BF:36:64:21:B9:4D:1D:06:A1:97:8D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:08:85:bb:4b:34:4d:3f:a1:6c:ea:9c:18:12:4d:6b:8b:58: 93:09:0b:fa:ae:f7:cb:80:5b:ff:62:86:3a:71:9e:77:99:e8: b2:bf:fd:84:b8:56:22:69:c3:ee:b8:8a:f1:06:6a:10:e7:29: 8d:8e:48:50:bb:98:9c:21:c1:37:d5:fc:a0:7d:ad:29:44:7b: bc:c5:17:aa:0e:7b:b5:33:46:27:b1:11:0d:d7:0d:6f:c7:27: af:dd:7a:1f:aa:e8:59:ce:70:a0:b2:8a:70:b7:e0:42:c6:37: 11:a2:ee:2d:55:78:fe:ea:68:72:72:0d:59:48:7b:7c:0a:10: 32:3d:1a:ec:0a:93:98:c5:9a:40:0f:40:e3:71:83:a1:35:94: dd:9a:df:b0:df:9a:9d:45:51:55:33:aa:e2:cd:7e:cc:ef:1f: c8:6d:e0:06:b7:0e:85:f7:53:82:a0:2d:13:22:de:48:b3:c0: 6e:41:0a:fa:80:07:fa:a5:42:f5:54:0b:09:6f:bc:17:22:88: 5d:1f:52:3e:1f:2b:85:5c:bc:15:a4:3b:9b:f9:31:26:1d:ea: c3:b6:4f:c6:f2:a7:42:fb:bc:dd:6f:b1:0a:00:4e:10:59:56: f2:9d:e7:9b:4a:73:52:8f:83:71:72:97:da:01:09:40:28:77: 34:af:71:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nklXCsBDmk1cNYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjBjNzA1MzAtMTQzMy00M2MwLTg2MzAtNTZlMDYxM2QzMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BR9aLAIpf16blcz7S9sP4CrUQCy5jKiqWmP iFIa76/iZSFyx5ysmD3ue5IuLEGaz6n2QFVV6GayOrtHfT86JUBxZClRZ+L2Vq7W ef1mrOBJk5HPAbMXif2/oa33EJywruj8HSuuqti556OXmBOY6KGrfjNN+gOqT4kb h9oAwPFJfAndXDcRE3eygMceE7Rfmhui/SaNWxW0o8SHlCr5+8pWHa5ruWtpQqpE Em9ZpbHYRSFdBVljSR4PcCgVeuE6snT38CedO70Kond+qzcRSoxiRrOgfTnqQFOW Oo6Vk152ri0VZtOZpXPjre8fGCRhg4e3kqwwMjV7CylhwQQ+AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImy3vV/wAmavzZkIblNHQahl43JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWYyMDRkYjgtN2E4My0z MWFiLWFiNTctY2U5ODRhNTgwNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkIhbtLNE0/oWzqnBgSTWuLWJMJC/qu98uAW/9ihjpxnneZ6LK/ /YS4ViJpw+64ivEGahDnKY2OSFC7mJwhwTfV/KB9rSlEe7zFF6oOe7UzRiexEQ3X DW/HJ6/deh+q6FnOcKCyinC34ELGNxGi7i1VeP7qaHJyDVlIe3wKEDI9GuwKk5jF mkAPQONxg6E1lN2a37Dfmp1FUVUzquLNfszvH8ht4Aa3DoX3U4KgLRMi3kizwG5B CvqAB/qlQvVUCwlvvBciiF0fUj4fK4VcvBWkO5v5MSYd6sO2T8byp0L7vN1vsQoA ThBZVvKd55tKc1KPg3Fyl9oBCUAodzSvcWg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:13:31 2026 by rpki-client