$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa File: ff101ae5-f103-3f63-b004-90d2c700d744.roa (raw, json) Hash identifier: 3YQ+ncV+EAFvf1ffO+og3g9IflSJgUw0Saj+nA4YYgU= Subject key identifier: 72:CD:F0:CA:27:74:56:1B:81:BD:03:5D:B4:31:0B:50:92:68:DD:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79275123867461027591780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40717 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:75:12:38:67:46:10:27:59:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ff6b5246-3d6d-49d5-a626-910e01ba6c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:a9:dd:99:7c:67:b4:34:af:d2:19:fc:e7: e6:87:36:f8:62:59:ed:ae:ee:91:54:1d:93:e1:5c: 68:f2:ea:fe:ed:ed:b4:09:fa:cd:25:01:8b:9e:82: 68:fb:bc:f3:0a:7a:4f:12:8f:ad:42:9b:ae:02:06: 13:2f:eb:eb:e5:cf:1c:c8:40:b2:f9:64:ae:3d:dc: 09:25:b4:ea:e8:e7:a7:1e:d9:c6:1f:0c:60:0f:3c: 15:ba:37:83:e5:3f:da:23:75:45:77:1c:02:34:09: 73:89:26:14:e4:d3:4e:c3:2e:b1:17:b3:66:71:9f: 62:65:76:a1:f1:c1:1a:9e:eb:9e:36:f7:d7:ec:eb: 67:0b:25:09:e6:fd:bf:7c:27:83:f0:27:93:e1:5a: c7:7a:60:7c:e3:17:0a:64:a1:97:49:48:3e:75:f0: 90:4e:c3:37:c8:36:70:80:68:d0:c4:5d:bf:b4:9f: 87:02:93:c7:9f:03:b3:1a:6c:72:9c:d5:ae:57:f7: fa:87:cb:d6:39:15:ef:6e:6b:20:19:3a:06:b4:25: 35:2d:1c:ff:92:da:29:84:0a:7f:19:ca:7d:71:74: 43:f0:fd:8a:2c:b2:c7:1f:9e:49:89:84:04:0e:a3: bb:3b:69:cf:b3:29:12:03:6d:12:07:e3:ea:11:65: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CD:F0:CA:27:74:56:1B:81:BD:03:5D:B4:31:0B:50:92:68:DD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ef:cd:fe:6a:5a:bd:a3:68:86:35:8d:98:83:07:b5:10:31: 86:73:1a:53:44:92:6a:0a:75:2a:da:fd:ad:de:dc:a4:eb:93: 7a:76:9a:9f:9b:64:ab:b0:7c:8a:f1:0a:ab:6c:71:ba:86:44: aa:80:67:9d:0a:2d:eb:86:b0:b1:1c:4d:25:31:6d:91:fb:6d: 3f:72:86:86:93:6e:cb:16:90:c6:44:ea:d7:28:7a:c7:6b:22: 50:03:f3:99:11:f7:5f:3f:84:b3:5e:f9:dc:4f:03:4a:be:5b: 74:c3:9f:bb:c5:d6:89:b6:29:97:fb:3e:1e:fe:c2:7b:6d:56: 8d:7c:b8:d9:8c:e8:98:dc:38:f9:a6:91:2d:04:00:41:ef:13: 45:65:fe:ad:43:97:be:86:15:0c:eb:84:41:32:43:29:a3:98: 15:e8:34:24:e5:71:0e:f0:0b:32:a2:a9:a0:93:e2:9b:00:ee: b4:84:2f:93:77:69:75:7e:7d:be:05:4b:e4:e2:c6:71:ab:d2: 4e:37:e7:eb:76:87:f5:1e:2c:6e:cc:57:c4:ec:64:f1:8c:d7: 29:4a:b8:9d:56:ea:88:0a:ed:cc:17:31:37:a1:66:ee:62:76: 91:47:59:09:e4:e6:c5:5b:37:e5:74:97:90:65:42:6e:f5:24: be:8f:a5:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nknUSOGdGECdZF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmY2YjUyNDYtM2Q2ZC00OWQ1LWE2MjYtOTEwZTAxYmE2Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiyp3Zl8Z7Q0r9IZ/Ofmhzb4Ylntru6RVB2T 4Vxo8ur+7e20CfrNJQGLnoJo+7zzCnpPEo+tQpuuAgYTL+vr5c8cyECy+WSuPdwJ JbTq6OenHtnGHwxgDzwVujeD5T/aI3VFdxwCNAlziSYU5NNOwy6xF7NmcZ9iZXah 8cEanuueNvfX7OtnCyUJ5v2/fCeD8CeT4VrHemB84xcKZKGXSUg+dfCQTsM3yDZw gGjQxF2/tJ+HApPHnwOzGmxynNWuV/f6h8vWORXvbmsgGToGtCU1LRz/ktophAp/ Gcp9cXRD8P2KLLLHH55JiYQEDqO7O2nPsykSA20SB+PqEWVmqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLN8MondFYbgb0DXbQxC1CSaN2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmYxMDFhZTUtZjEwMy0z ZjYzLWIwMDQtOTBkMmM3MDBkNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnvzf5qWr2jaIY1jZiDB7UQMYZzGlNEkmoKdSra/a3e3KTrk3p2 mp+bZKuwfIrxCqtscbqGRKqAZ50KLeuGsLEcTSUxbZH7bT9yhoaTbssWkMZE6tco esdrIlAD85kR918/hLNe+dxPA0q+W3TDn7vF1om2KZf7Ph7+wnttVo18uNmM6Jjc OPmmkS0EAEHvE0Vl/q1Dl76GFQzrhEEyQymjmBXoNCTlcQ7wCzKiqaCT4psA7rSE L5N3aXV+fb4FS+TixnGr0k435+t2h/UeLG7MV8TsZPGM1ylKuJ1W6ogK7cwXMTeh Zu5idpFHWQnk5sVbN+V0l5BlQm71JL6PpZY= -----END CERTIFICATE-----Generated at Wed Jul 29 04:48:26 2026 by rpki-client