$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd52d981-c6dc-35c7-bff4-2f3edc7ad025.roa File: bd52d981-c6dc-35c7-bff4-2f3edc7ad025.roa (raw, json) Hash identifier: HrHtIYmaYSuyfZkQLZkPiuZbiVtxWP1+hltZlCRclBo= Subject key identifier: 04:7C:88:5E:0A:BD:34:C6:05:09:05:E8:B7:44:1D:3B:D4:E1:74:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79057477785F8F8FEFBE640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd52d981-c6dc-35c7-bff4-2f3edc7ad025.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396589 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:57:47:77:85:f8:f8:fe:fb:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=303ca087-e2b0-4bd2-bf22-117b496975cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:38:fe:3b:3f:ee:a6:69:f2:48:7c:2a:3a: 7b:0f:9f:fc:7e:fa:8a:29:f5:b8:bc:c1:9e:dd:ce: c0:52:d1:fb:17:39:d7:70:66:30:bd:a5:5a:36:3f: f8:a7:47:c7:e8:7a:bc:a3:6c:b6:0f:2e:ce:c5:1a: 0b:48:8e:82:dd:01:8b:f9:85:d9:a3:35:68:82:58: 28:68:57:3c:7d:63:57:84:12:73:e6:ba:5c:55:73: c6:f6:bf:94:d5:0d:0c:64:f9:21:1c:5c:ed:74:10: d4:c5:77:53:e0:89:10:b8:9b:b1:b5:14:79:bc:0f: 26:bd:51:3a:94:bb:34:f6:f2:fe:2e:70:cc:28:b5: 59:83:cf:c4:e2:f2:2d:fa:bc:07:e7:a3:07:3c:51: c4:dd:6e:d7:57:12:77:0e:1e:53:96:49:a3:2d:a6: 78:10:55:bc:fa:96:16:7f:3a:f8:6b:41:7b:96:35: 80:68:68:e8:46:19:95:7c:ba:79:ab:98:7f:93:88: 33:df:65:66:2c:66:b0:3f:cf:7a:1a:24:98:62:b4: 5a:67:fd:90:30:22:bd:58:b9:8d:8e:55:eb:33:4b: 88:d8:ef:11:ad:63:4b:d7:88:d1:0e:0e:65:a3:04: 2d:f2:66:69:fb:65:2b:b0:43:b5:ef:a8:7c:25:74: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:88:5E:0A:BD:34:C6:05:09:05:E8:B7:44:1D:3B:D4:E1:74:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd52d981-c6dc-35c7-bff4-2f3edc7ad025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d9:85:99:72:34:71:74:fe:7d:38:31:17:84:b4:f6:8e:04: 5a:9e:df:ca:aa:7e:48:69:3f:ee:1f:98:d2:45:8b:26:90:60: 5d:16:44:9d:98:17:4c:00:42:4a:38:56:80:f7:53:7b:7d:0a: 33:45:cb:e6:a5:82:27:8c:8b:1a:53:e8:ca:15:70:79:99:6b: d5:0f:7b:80:10:f4:1b:ce:15:32:a7:81:bf:ed:58:24:52:1b: 4e:d2:6b:0a:d9:d2:1c:2d:e2:c0:0b:72:89:34:8a:3b:76:fb: 15:11:aa:2c:b1:93:d5:60:7e:42:ca:8e:2a:6f:0b:78:25:8c: 9b:a1:10:30:b7:6d:f8:31:de:04:75:cf:d8:70:0b:f7:79:9e: 1b:7a:e8:6a:42:1b:56:6a:03:31:39:30:5d:9e:13:97:a6:cc: 5d:20:47:6b:2d:7e:f1:e3:ed:a1:8f:1a:ef:eb:7f:f3:fb:2b: 07:32:27:6b:3a:db:b8:cf:72:60:66:a0:6a:df:4e:b7:3e:20: 03:44:f5:34:d0:b4:9e:63:66:cc:f4:98:92:59:4f:be:f7:c4: 50:cf:67:5c:44:b5:81:60:0a:82:ed:97:16:42:cc:14:65:7d: 86:fd:c6:4e:96:10:7a:a6:ef:1a:56:28:af:d7:77:dc:a0:36: 85:ea:0c:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFdHd4X4+P775kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzAzY2EwODctZTJiMC00YmQyLWJmMjItMTE3YjQ5Njk3NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hM4/js/7qZp8kh8Kjp7D5/8fvqKKfW4vMGe 3c7AUtH7FznXcGYwvaVaNj/4p0fH6Hq8o2y2Dy7OxRoLSI6C3QGL+YXZozVoglgo aFc8fWNXhBJz5rpcVXPG9r+U1Q0MZPkhHFztdBDUxXdT4IkQuJuxtRR5vA8mvVE6 lLs09vL+LnDMKLVZg8/E4vIt+rwH56MHPFHE3W7XVxJ3Dh5TlkmjLaZ4EFW8+pYW fzr4a0F7ljWAaGjoRhmVfLp5q5h/k4gz32VmLGawP896GiSYYrRaZ/2QMCK9WLmN jlXrM0uI2O8RrWNL14jRDg5lowQt8mZp+2UrsEO176h8JXSgZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAR8iF4KvTTGBQkF6LdEHTvU4XQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ1MmQ5ODEtYzZkYy0z NWM3LWJmZjQtMmYzZWRjN2FkMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrZhZlyNHF0/n04MReEtPaOBFqe38qqfkhpP+4fmNJFiyaQYF0W RJ2YF0wAQko4VoD3U3t9CjNFy+algieMixpT6MoVcHmZa9UPe4AQ9BvOFTKngb/t WCRSG07SawrZ0hwt4sALcok0ijt2+xURqiyxk9VgfkLKjipvC3gljJuhEDC3bfgx 3gR1z9hwC/d5nht66GpCG1ZqAzE5MF2eE5emzF0gR2stfvHj7aGPGu/rf/P7Kwcy J2s627jPcmBmoGrfTrc+IANE9TTQtJ5jZsz0mJJZT773xFDPZ1xEtYFgCoLtlxZC zBRlfYb9xk6WEHqm7xpWKK/Xd9ygNoXqDEs= -----END CERTIFICATE-----Generated at Wed Jul 29 04:27:41 2026 by rpki-client