$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa File: e0864f05-2149-30c7-8282-1ec5717adf8b.roa (raw, json) Hash identifier: 4ChX1LeDtcpCeCfVU0m37PM+Ztswfm5+LhStCtzeth0= Subject key identifier: 3A:31:EF:FB:04:51:24:3F:46:F0:C8:57:66:FA:9A:DA:11:5F:EA:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA2DFCD547821E2C4DD10F9A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 396550 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:cd:54:78:21:e2:c4:dd:10:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=1a988f66-9829-4c88-9d84-5e1414bfbd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:f2:4a:59:a9:f1:bd:ae:03:90:09:61:a4: d8:d3:49:5d:55:b2:97:89:11:8c:00:a7:a3:df:3c: 58:b7:7c:c5:9c:95:27:73:be:3b:47:01:2a:d2:12: 07:12:c4:b5:b6:23:03:40:a2:93:a5:6e:20:65:99: 73:41:ae:53:8c:0b:5a:45:96:fd:19:e5:fd:a4:e8: 5a:4f:b7:4d:44:50:8e:23:49:ac:22:43:dc:38:38: 48:0e:19:2d:46:9a:56:a3:69:1c:30:8b:21:10:47: 43:72:8a:f8:14:7b:57:63:76:3e:44:cb:f2:cf:70: ae:6d:3f:f3:a1:d3:81:54:cf:9f:03:ad:a0:ed:d8: 15:7d:9c:61:41:2a:6a:f2:63:59:96:51:80:b7:3d: f9:d7:5a:78:c5:98:50:a5:37:1b:7c:2d:bb:20:93: b0:70:89:ae:ca:24:50:ca:85:24:d8:f4:8e:0e:77: 09:49:7d:0d:85:d3:03:3b:a7:c5:68:6c:c3:de:3d: 8a:8f:4a:2a:a5:2e:fc:b2:74:64:68:3d:eb:e6:57: 56:90:ed:92:a8:65:b3:d9:71:46:48:3b:b0:76:46: a1:33:df:4a:64:a2:cf:5c:85:4a:67:fa:45:67:9f: 9e:f2:6d:ac:29:18:3b:63:28:de:8c:6d:e5:33:3b: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:EF:FB:04:51:24:3F:46:F0:C8:57:66:FA:9A:DA:11:5F:EA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0864f05-2149-30c7-8282-1ec5717adf8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0f:f1:7e:c2:ae:f7:ef:2b:12:fc:ac:6b:86:74:ad:42:7f: 78:1c:0e:1c:db:bb:bc:e5:a3:a1:59:d5:5d:1e:7d:c4:ef:33: 42:83:cd:cc:eb:84:90:67:35:7d:a2:40:52:31:01:fd:3c:a3: 6a:d5:2b:9e:0f:68:b3:eb:0c:01:64:85:93:7f:32:bc:fb:24: 70:19:5f:33:fa:8c:31:97:3f:c0:13:9a:06:2a:55:94:73:0a: a3:b4:f1:1e:5f:e1:f3:25:f9:5c:ea:58:81:7f:78:7e:00:27: 85:d4:94:ac:f2:e0:82:b9:7a:e5:22:50:ef:22:61:cd:ab:ea: 56:d2:9c:2f:fc:08:ff:00:27:48:69:e5:eb:82:af:b9:0a:18: a7:01:e0:5b:7e:fd:43:dd:bc:14:3c:06:0b:47:a1:ea:94:f2: 9b:2e:76:54:64:48:ac:fc:5f:2f:61:d8:d1:ee:02:6c:00:99: 8e:7d:1b:ed:ff:ec:fd:c4:34:98:1e:c5:93:31:db:86:ce:d2: 2f:45:d9:0a:57:a7:de:72:a6:f4:ee:d1:f2:72:fe:5f:72:e6: fa:fe:78:23:20:93:50:2d:67:09:e8:8d:63:2f:66:55:e4:22: fb:58:45:5c:42:09:8b:ff:f4:e7:f4:f6:29:62:68:13:08:82: 31:15:fe:9e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6i381UeCHixN0Q+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk MWE5ODhmNjYtOTgyOS00Yzg4LTlkODQtNWUxNDE0YmZiZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxrySlmp8b2uA5AJYaTY00ldVbKXiRGMAKej 3zxYt3zFnJUnc747RwEq0hIHEsS1tiMDQKKTpW4gZZlzQa5TjAtaRZb9GeX9pOha T7dNRFCOI0msIkPcODhIDhktRppWo2kcMIshEEdDcor4FHtXY3Y+RMvyz3CubT/z odOBVM+fA62g7dgVfZxhQSpq8mNZllGAtz3511p4xZhQpTcbfC27IJOwcImuyiRQ yoUk2PSODncJSX0NhdMDO6fFaGzD3j2Kj0oqpS78snRkaD3r5ldWkO2SqGWz2XFG SDuwdkahM99KZKLPXIVKZ/pFZ5+e8m2sKRg7YyjejG3lMzuBqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDox7/sEUSQ/RvDIV2b6mtoRX+oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA4NjRmMDUtMjE0OS0z MGM3LTgyODItMWVjNTcxN2FkZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCND/F+wq737ysS/KxrhnStQn94HA4c27u85aOh WdVdHn3E7zNCg83M64SQZzV9okBSMQH9PKNq1SueD2iz6wwBZIWTfzK8+yRwGV8z +owxlz/AE5oGKlWUcwqjtPEeX+HzJflc6liBf3h+ACeF1JSs8uCCuXrlIlDvImHN q+pW0pwv/Aj/ACdIaeXrgq+5ChinAeBbfv1D3bwUPAYLR6HqlPKbLnZUZEis/F8v YdjR7gJsAJmOfRvt/+z9xDSYHsWTMduGztIvRdkKV6fecqb07tHycv5fcub6/ngj IJNQLWcJ6I1jL2ZV5CL7WEVcQgmL//Tn9PYpYmgTCIIxFf6e -----END CERTIFICATE-----Generated at Wed Jul 29 02:27:45 2026 by rpki-client