$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa File: 003870e3-7777-3ef0-90b5-2100312198d6.roa (raw, json) Hash identifier: OzKrvvjCTG2DAbAJ7Jv4hL2VDct9kg7JjAiPpVE7pkg= Subject key identifier: 8C:4E:AF:7C:F4:1A:F7:4A:00:69:D5:61:E3:A6:FE:FB:62:7E:7F:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F1541BE248FEB40A484C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 396599 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:15:41:be:24:8f:eb:40:a4:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=3298a841-f769-47f5-b8b9-7c08949a83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:05:4a:5f:bd:56:2b:7d:69:f1:a3:ca:80: 86:6c:f3:ee:0e:38:a7:03:8f:03:e1:2e:76:78:17: 08:e2:fb:8c:71:53:76:5a:c7:15:72:3f:72:19:a0: 20:59:08:19:a3:fe:f7:0a:40:1c:99:2f:93:9b:cb: c1:8f:8b:f4:c6:c2:76:ee:4d:91:1c:d5:52:66:1a: 74:d0:90:57:e2:a1:9f:c3:fa:e8:db:7a:e4:8e:8a: 47:bd:f7:f2:17:09:c0:fa:71:47:ba:d2:ef:71:4d: d9:be:ac:0e:5a:d8:cc:cc:64:1e:ed:09:71:9b:f6: b7:cd:df:4f:8f:c1:bb:f6:cd:e7:37:33:29:78:29: 00:e9:61:01:fe:f4:0d:83:ee:0b:ed:42:cb:c7:0c: d8:ab:13:e0:d0:b7:c1:34:6e:e9:72:db:a2:f4:63: cf:76:e7:37:35:4e:a0:d6:0e:3f:4e:28:c1:72:62: 5f:34:3d:52:66:af:4e:0d:55:b8:75:cd:c1:6c:07: ef:bd:68:ad:cd:4c:97:37:b3:bc:f7:f6:e3:81:92: 16:f8:96:2a:b2:7c:42:7e:d1:8b:63:00:a1:df:6c: b8:a7:ab:5e:a6:24:6e:cf:31:38:dd:d4:68:1d:26: 6f:e6:11:1a:25:6f:a6:72:24:80:c3:e9:21:c0:00: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4E:AF:7C:F4:1A:F7:4A:00:69:D5:61:E3:A6:FE:FB:62:7E:7F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bb:b8:bf:d5:94:a2:aa:8f:76:48:b7:9f:a7:fc:d0:4a:e7: 17:c4:09:2a:1f:ee:49:aa:69:0a:68:e6:ce:97:89:db:52:1f: ab:3d:f4:ca:3b:a2:d4:3c:d6:f7:56:c1:ca:d2:45:17:0c:35: 0f:fe:ae:ef:16:d3:5e:da:31:a0:bb:17:4c:db:d7:34:c9:cf: 71:5f:81:1e:73:eb:45:7b:0d:e5:05:49:11:c8:96:52:85:42: c9:2a:4b:34:42:eb:d4:8a:34:b6:3a:30:a2:8a:5b:1f:ca:60: 14:42:c0:2a:dd:ea:e9:16:55:5c:c1:37:1b:10:e0:74:dd:41: 0d:c5:ae:5b:e0:ab:e5:32:1e:c5:f6:6e:28:48:f8:97:e4:84: 7d:ba:b0:b7:ce:5c:35:ab:ba:df:c6:f4:2e:2b:b7:54:ad:d1: a5:a0:d0:68:ac:48:8f:1d:f4:1e:bf:a1:ea:f6:23:f8:b9:8d: 83:ed:9e:25:8a:d5:3d:ec:88:f3:9f:b6:f1:b0:87:be:b2:00: b5:97:3d:ae:57:33:b6:78:c1:07:99:21:e5:9f:14:0b:fb:80: d0:39:47:eb:18:49:26:21:ca:91:30:29:c9:8f:6f:ef:7c:5f: be:00:07:a8:51:90:83:cb:fa:07:be:75:2a:64:59:2d:4a:ce: dc:9c:10:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxVBviSP60CkhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk MzI5OGE4NDEtZjc2OS00N2Y1LWI4YjktN2MwODk0OWE4M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloEFSl+9Vit9afGjyoCGbPPuDjinA48D4S52 eBcI4vuMcVN2WscVcj9yGaAgWQgZo/73CkAcmS+Tm8vBj4v0xsJ27k2RHNVSZhp0 0JBX4qGfw/ro23rkjopHvffyFwnA+nFHutLvcU3ZvqwOWtjMzGQe7Qlxm/a3zd9P j8G79s3nNzMpeCkA6WEB/vQNg+4L7ULLxwzYqxPg0LfBNG7pctui9GPPduc3NU6g 1g4/TijBcmJfND1SZq9ODVW4dc3BbAfvvWitzUyXN7O89/bjgZIW+JYqsnxCftGL YwCh32y4p6tepiRuzzE43dRoHSZv5hEaJW+mciSAw+khwADHlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIxOr3z0GvdKAGnVYeOm/vtifn/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDAzODcwZTMtNzc3Ny0z ZWYwLTkwYjUtMjEwMDMxMjE5OGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuu7i/1ZSiqo92SLefp/zQSucXxAkqH+5JqmkK aObOl4nbUh+rPfTKO6LUPNb3VsHK0kUXDDUP/q7vFtNe2jGguxdM29c0yc9xX4Ee c+tFew3lBUkRyJZShULJKks0QuvUijS2OjCiilsfymAUQsAq3erpFlVcwTcbEOB0 3UENxa5b4KvlMh7F9m4oSPiX5IR9urC3zlw1q7rfxvQuK7dUrdGloNBorEiPHfQe v6Hq9iP4uY2D7Z4litU97Ijzn7bxsIe+sgC1lz2uVzO2eMEHmSHlnxQL+4DQOUfr GEkmIcqRMCnJj2/vfF++AAeoUZCDy/oHvnUqZFktSs7cnBCl -----END CERTIFICATE-----Generated at Sat Jun 13 19:33:58 2026 by rpki-client