$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa File: 032c657a-61e2-3272-b563-22e9365d6c02.roa (raw, json) Hash identifier: dKh9/ZaOji8zGJiTIRlgERHTbtmfEMM5kva5bYBMKMw= Subject key identifier: DB:44:07:A0:DE:84:61:4C:0A:13:6B:4B:7F:47:10:3B:AF:64:32:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D8888209199DB859389D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 396566 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:82:09:19:9d:b8:59:38:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=abfa925f-580d-449c-9841-3ca0379aa1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:42:9d:32:09:3e:3e:f4:74:30:11:af:33: 78:a5:51:84:17:36:7d:de:a0:dc:52:86:2d:2f:65: 08:1b:a4:4a:89:41:ca:a3:93:9c:15:97:d6:56:48: 28:a5:cb:9d:ae:87:74:2b:70:47:36:e5:3c:de:62: d1:bd:c5:5a:05:d8:09:dd:a4:1b:85:d4:1b:2f:eb: 63:64:85:10:32:28:f5:55:38:3d:f6:8b:e0:e3:64: b6:9c:2c:95:ec:86:f6:b0:df:c2:46:74:25:e9:de: 17:ed:67:99:1d:63:a6:90:45:d5:df:02:ab:b8:59: 1d:da:13:93:07:0c:f1:05:14:e4:1f:0e:97:f8:6d: 1f:7f:72:70:11:6f:7d:2d:72:10:7b:61:17:96:c5: ba:4c:84:4f:5c:bd:4a:da:7a:44:ed:50:cd:86:2b: f7:c6:4e:ca:63:9c:c4:cd:d8:0b:58:12:df:9f:c3: 9a:06:43:0e:8c:b9:f6:ad:57:c4:e2:aa:a5:fc:b7: 8f:a0:74:93:04:75:63:7a:d6:3c:78:0f:0a:0b:87: 6c:b6:82:04:9c:dd:fa:3c:af:79:e8:a7:24:23:6e: e9:69:fb:a3:ea:f9:c3:12:59:bf:d0:84:56:c0:47: 04:e6:e7:46:64:92:da:03:c6:d3:be:1e:dd:0b:0b: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:07:A0:DE:84:61:4C:0A:13:6B:4B:7F:47:10:3B:AF:64:32:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ad:99:d2:29:f8:5c:87:f4:a2:e7:20:05:f1:ee:a8:e0:81: d0:9e:05:7e:55:dd:c6:e9:a5:45:1c:18:02:00:36:a2:a1:b6: 2a:1d:37:db:d9:04:c3:4d:a0:3b:fe:f6:d7:8a:ed:96:2f:09: c3:e2:3c:fb:66:0d:84:51:e3:8f:1c:3b:56:01:ff:1e:25:91: 64:d0:3b:18:c4:e7:46:bb:43:e5:4f:3c:0a:80:f3:63:cc:14: 76:90:f4:56:01:f2:3a:79:5a:e8:11:e6:58:42:dc:88:4c:90: dc:48:55:72:de:ee:c6:df:f1:bc:1c:bc:11:a0:27:b0:69:eb: 66:5e:0d:e9:64:b5:b9:6d:6a:6d:fe:ad:9a:53:c7:32:1e:ef: c1:30:7b:44:14:66:76:27:17:a3:02:37:1f:41:01:23:51:3c: 14:0a:e5:4d:cd:72:96:68:fb:df:cb:52:fc:82:7f:39:b3:c4: 3e:77:fd:8e:f0:f2:a5:58:d1:9f:c4:5f:ab:e1:13:67:99:6f: 1f:af:5a:af:dd:57:56:fd:69:3a:07:12:76:76:60:fb:aa:16: 3d:95:60:24:f4:53:24:b3:16:55:e1:0e:bf:89:1a:9d:ae:3f: 51:ff:2f:e4:e4:f4:10:fd:83:07:b4:f7:d7:6b:d7:f5:ea:2a: 77:38:05:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IiCCRmduFk4nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk YWJmYTkyNWYtNTgwZC00NDljLTk4NDEtM2NhMDM3OWFhMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX1CnTIJPj70dDARrzN4pVGEFzZ93qDcUoYt L2UIG6RKiUHKo5OcFZfWVkgopcudrod0K3BHNuU83mLRvcVaBdgJ3aQbhdQbL+tj ZIUQMij1VTg99ovg42S2nCyV7Ib2sN/CRnQl6d4X7WeZHWOmkEXV3wKruFkd2hOT BwzxBRTkHw6X+G0ff3JwEW99LXIQe2EXlsW6TIRPXL1K2npE7VDNhiv3xk7KY5zE zdgLWBLfn8OaBkMOjLn2rVfE4qql/LePoHSTBHVjetY8eA8KC4dstoIEnN36PK95 6KckI27pafuj6vnDElm/0IRWwEcE5udGZJLaA8bTvh7dCwtJjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtEB6DehGFMChNrS39HEDuvZDIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDMyYzY1N2EtNjFlMi0z MjcyLWI1NjMtMjJlOTM2NWQ2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCtmdIp+FyH9KLnIAXx7qjggdCeBX5V3cbppUUcGAIANqKhtiod N9vZBMNNoDv+9teK7ZYvCcPiPPtmDYRR448cO1YB/x4lkWTQOxjE50a7Q+VPPAqA 82PMFHaQ9FYB8jp5WugR5lhC3IhMkNxIVXLe7sbf8bwcvBGgJ7Bp62ZeDelktblt am3+rZpTxzIe78Ewe0QUZnYnF6MCNx9BASNRPBQK5U3NcpZo+9/LUvyCfzmzxD53 /Y7w8qVY0Z/EX6vhE2eZbx+vWq/dV1b9aToHEnZ2YPuqFj2VYCT0UySzFlXhDr+J Gp2uP1H/L+Tk9BD9gwe099dr1/XqKnc4BQs= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:42 2026 by rpki-client