$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa File: bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa (raw, json) Hash identifier: 6irb79p1ESOHTVhMGWrOiyOCsiciUi+sYqC6AaGRo1o= Subject key identifier: E3:3D:DE:B1:92:48:0C:C3:8E:30:9D:CB:1D:75:9E:6E:DD:D7:2B:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E9BE53A7A8D9119BDD5BA3D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16838 IP address blocks: 2620:74:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:3a:7a:8d:91:19:bd:d5:ba:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=96862dd7-4d6c-41d7-87e3-bb5b01f605c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:34:32:04:c0:8e:96:0c:08:6a:c8:ad:1a: de:ee:6d:41:45:2d:54:bf:30:b2:34:6c:b4:3b:e3: 8f:36:c1:ab:90:dc:8d:f0:86:25:53:65:9f:fc:86: d4:92:cf:43:88:d7:ae:32:a0:8b:58:d3:18:86:2b: e4:c5:ff:38:2a:82:ce:6f:a9:fc:53:45:22:ac:e0: 5c:4c:e8:86:5f:d4:46:0f:01:f1:f8:8d:20:50:87: cf:29:51:4d:bf:2a:c5:f6:84:37:62:69:be:90:f6: 4d:8b:c9:91:48:64:9e:e7:1d:45:74:2c:e6:6c:37: 02:b4:44:f0:2c:53:07:b7:0a:ac:dc:b7:ba:22:95: 76:04:52:03:f5:df:d7:d6:1a:72:37:e6:29:fd:8a: 77:50:b1:c6:38:2c:2a:23:df:2a:6b:5e:6c:90:59: c3:52:72:37:88:9e:1a:97:04:df:19:2a:82:98:42: 43:d8:d5:05:17:29:44:af:be:5e:1c:ae:3f:ae:10: 27:ad:14:11:bf:5c:8d:84:b4:73:49:d9:4d:a8:16: c4:24:49:09:0e:e0:e0:fc:35:27:25:95:07:ba:f2: e4:0a:48:54:84:ed:22:de:b8:33:5f:d9:a7:b6:80: c2:d9:82:b0:05:97:c3:26:52:0f:bc:d7:57:54:ca: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:DE:B1:92:48:0C:C3:8E:30:9D:CB:1D:75:9E:6E:DD:D7:2B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb2cd4eb-6f17-39ec-9542-3a195e4b7136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bd:d5:71:07:26:79:79:13:dc:aa:90:ad:6b:2c:c7:31:ce: d5:4d:f1:df:db:8c:e6:e4:c9:c6:e5:de:c2:d7:3b:1a:a4:af: 4e:aa:fa:07:69:f7:b9:9f:dd:5a:20:ce:b4:ef:6f:57:41:75: 4c:ea:b6:26:a4:0e:5e:ff:c5:70:6b:8a:0d:d8:53:c9:d2:8b: 41:2f:30:e6:f1:f0:97:60:f0:ed:a0:45:07:29:14:98:7b:2b: a2:a8:96:03:1a:3e:00:b5:7b:22:d6:91:2b:22:d6:12:2b:f4: c9:7a:26:01:30:51:a8:1c:df:27:8c:cf:35:a3:f5:44:b9:82: cd:fc:8e:34:04:5d:98:15:55:8e:74:83:89:21:a1:71:fe:27: 3f:94:da:4c:8c:6d:4a:51:a0:d6:63:3c:11:17:fc:b3:e9:91: 82:26:9c:c5:37:b5:23:3b:d1:5f:a0:87:fc:6b:4f:cf:26:dc: 0a:42:aa:ba:d9:54:cc:53:a6:a7:24:48:41:11:48:0d:44:6b: 84:73:12:56:4c:ca:43:4c:af:83:7c:2f:d0:6c:54:b6:71:cb: 95:c7:33:f3:df:ba:9f:21:86:70:33:b4:eb:c3:88:7b:7d:51: 27:e6:ef:2d:fc:40:f3:b9:c3:4b:e5:61:fc:d5:3f:23:df:91: 64:35:83:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6b5Tp6jZEZvdW6PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OTY4NjJkZDctNGQ2Yy00MWQ3LTg3ZTMtYmI1YjAxZjYwNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIM0MgTAjpYMCGrIrRre7m1BRS1UvzCyNGy0 O+OPNsGrkNyN8IYlU2Wf/IbUks9DiNeuMqCLWNMYhivkxf84KoLOb6n8U0UirOBc TOiGX9RGDwHx+I0gUIfPKVFNvyrF9oQ3Ymm+kPZNi8mRSGSe5x1FdCzmbDcCtETw LFMHtwqs3Le6IpV2BFID9d/X1hpyN+Yp/Yp3ULHGOCwqI98qa15skFnDUnI3iJ4a lwTfGSqCmEJD2NUFFylEr75eHK4/rhAnrRQRv1yNhLRzSdlNqBbEJEkJDuDg/DUn JZUHuvLkCkhUhO0i3rgzX9mntoDC2YKwBZfDJlIPvNdXVMpKewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOM93rGSSAzDjjCdyx11nm7d1ytLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmIyY2Q0ZWItNmYxNy0z OWVjLTk1NDItM2ExOTVlNGI3MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADa91XEHJnl5E9yqkK1rLMcxztVN8d/bjObkycbl3sLXOxqkr06q +gdp97mf3VogzrTvb1dBdUzqtiakDl7/xXBrig3YU8nSi0EvMObx8Jdg8O2gRQcp FJh7K6KolgMaPgC1eyLWkSsi1hIr9Ml6JgEwUagc3yeMzzWj9US5gs38jjQEXZgV VY50g4khoXH+Jz+U2kyMbUpRoNZjPBEX/LPpkYImnMU3tSM70V+gh/xrT88m3ApC qrrZVMxTpqckSEERSA1Ea4RzElZMykNMr4N8L9BsVLZxy5XHM/Pfup8hhnAztOvD iHt9USfm7y38QPO5w0vlYfzVPyPfkWQ1g+4= -----END CERTIFICATE-----Generated at Tue Jul 28 22:06:43 2026 by rpki-client