$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa File: b2cb79f3-dd70-301a-a43d-455d391751c2.roa (raw, json) Hash identifier: S5dVil/HoW7hDdT/dGKsk2ehWc6/XnR5FZkGpZrk5l4= Subject key identifier: 09:96:23:2E:97:27:F4:C5:E1:85:D4:02:3C:B9:BC:0C:B0:6C:67:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BC2515CF7D80CCFB0ED60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396561 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:c2:51:5c:f7:d8:0c:cf:b0:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d0813152-cb67-470c-bdcc-f41bbbb151e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:e0:3f:30:5f:42:7f:03:e8:81:09:cf:8c: 58:59:9a:e0:ad:56:10:20:a3:e2:18:d8:23:c9:09: 4d:25:13:f2:c4:be:16:ca:f1:ce:18:42:0d:69:b4: e9:04:4e:1f:e4:c6:af:b2:d7:aa:97:64:bd:de:af: d6:15:ee:1d:7d:e3:03:0b:5a:0f:5d:09:88:c5:02: de:63:e4:bd:5a:c8:90:24:84:f7:8f:69:52:95:02: a7:c9:34:45:ec:ef:6f:2a:cb:43:c3:e9:81:ad:fb: 58:3f:d9:fa:73:75:9f:c9:0c:1e:02:4f:8e:91:39: ff:52:45:e8:0c:90:8f:c7:2a:6e:7e:8a:e2:e8:19: cb:b9:9b:49:54:35:a9:e5:b2:b4:21:8d:0e:c4:26: 28:b7:64:a6:7c:6f:75:20:33:65:13:f9:36:4a:8d: 83:08:2e:21:4e:11:22:37:f5:46:44:62:4b:93:a5: e6:64:e8:ab:d4:34:16:a1:08:85:2b:70:67:c8:f8: 87:8c:1a:f3:c5:41:f3:9f:68:e7:5a:7a:6f:9b:be: 6d:28:c8:98:32:fa:fa:c0:c0:26:63:56:c8:03:ec: 3b:01:b8:a0:dd:d5:d0:9b:07:2f:dc:9b:d3:08:36: ad:89:5c:ab:43:f6:3c:9f:72:f2:25:a4:df:78:85: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:23:2E:97:27:F4:C5:E1:85:D4:02:3C:B9:BC:0C:B0:6C:67:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0d:10:60:5f:e9:ea:57:9d:e8:8a:fe:6c:bd:3a:cb:ef:2b: 72:af:9f:d5:b0:f5:21:b5:59:b0:41:e6:72:10:4f:67:c3:aa: 2a:dc:f4:7f:46:b8:5d:cb:a9:44:4d:c6:a0:13:f8:0a:79:a2: 70:a2:5c:d9:5b:b8:5d:ab:46:53:d6:f8:b7:7a:64:62:8d:8e: d3:68:a2:b6:24:61:fd:40:02:7d:47:0f:ce:bd:11:04:89:83: 59:5b:6a:04:2d:59:b0:9a:82:49:f0:bb:86:7f:e5:8d:ed:4b: d4:04:25:ff:8c:28:6b:dc:8a:70:91:99:0f:35:f3:dc:ef:3e: 7e:79:b9:87:5c:fc:17:de:26:f8:00:0a:2b:76:7c:21:1f:24: 0d:ef:40:74:23:14:49:7c:98:e1:0d:5b:80:2d:ae:0f:64:88: b2:cd:3c:fb:bb:0e:85:d6:7c:0e:18:74:10:13:2f:ea:38:f8: 5f:e4:f8:00:b1:f7:1b:ab:5a:a8:7d:8d:3f:da:b9:62:2e:5f: 16:eb:a9:e1:d5:d7:86:c8:3b:6d:70:3d:f3:fa:00:c3:40:0b: 51:a7:bf:4e:84:48:08:e5:d2:f6:65:24:32:26:a5:20:7d:02: 7a:a1:0d:49:ff:fa:f0:27:38:77:e2:f3:ea:05:4d:85:2b:6a: fd:61:31:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm8JRXPfYDM+w7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDA4MTMxNTItY2I2Ny00NzBjLWJkY2MtZjQxYmJiYjE1MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlDgPzBfQn8D6IEJz4xYWZrgrVYQIKPiGNgj yQlNJRPyxL4WyvHOGEINabTpBE4f5Mavsteql2S93q/WFe4dfeMDC1oPXQmIxQLe Y+S9WsiQJIT3j2lSlQKnyTRF7O9vKstDw+mBrftYP9n6c3WfyQweAk+OkTn/UkXo DJCPxypufori6BnLuZtJVDWp5bK0IY0OxCYot2SmfG91IDNlE/k2So2DCC4hThEi N/VGRGJLk6XmZOir1DQWoQiFK3BnyPiHjBrzxUHzn2jnWnpvm75tKMiYMvr6wMAm Y1bIA+w7Abig3dXQmwcv3JvTCDatiVyrQ/Y8n3LyJaTfeIUcMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmWIy6XJ/TF4YXUAjy5vAywbGdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjJjYjc5ZjMtZGQ3MC0z MDFhLWE0M2QtNDU1ZDM5MTc1MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFANEGBf6epXneiK/my9OsvvK3Kvn9Ww9SG1WbBB5nIQT2fDqirc 9H9GuF3LqURNxqAT+Ap5onCiXNlbuF2rRlPW+Ld6ZGKNjtNoorYkYf1AAn1HD869 EQSJg1lbagQtWbCagknwu4Z/5Y3tS9QEJf+MKGvcinCRmQ8189zvPn55uYdc/Bfe JvgACit2fCEfJA3vQHQjFEl8mOENW4Atrg9kiLLNPPu7DoXWfA4YdBATL+o4+F/k +ACx9xurWqh9jT/auWIuXxbrqeHV14bIO21wPfP6AMNAC1Gnv06ESAjl0vZlJDIm pSB9AnqhDUn/+vAnOHfi8+oFTYUrav1hMY4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:41:44 2026 by rpki-client