$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa File: 086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa (raw, json) Hash identifier: PFRATGvbqVRGOdsE8Q4Ewt77ufwKKVUEQR+cnqJHh4Y= Subject key identifier: 87:5A:BB:DA:47:C1:47:95:E0:E8:42:63:26:DB:28:B7:25:E5:2C:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E04362488D1002B7222C9A4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 36632 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:24:88:d1:00:2b:72:22:c9:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f8d85a3c-dc75-4953-9951-e4e0fa858767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:4d:7f:ae:9f:d3:76:23:93:df:ec:5b:b4: ed:40:9b:1c:75:aa:c4:18:15:5b:ef:5d:15:0e:7d: 7a:25:9a:a2:ae:fa:cb:fb:6b:29:d4:c0:0e:4a:d6: ad:29:e4:98:37:e2:26:92:94:18:7b:e5:11:7e:f4: 75:71:eb:4f:a4:34:74:f9:58:70:af:04:ea:02:c8: 69:d9:c5:c4:b2:db:46:f3:af:d4:40:11:23:94:4c: d9:50:10:f3:07:b3:93:9c:30:04:0f:ae:01:c9:0a: af:19:45:97:20:1e:e7:92:cb:b8:4a:76:7f:b1:74: 9c:53:3d:3a:9b:03:17:ef:64:69:c6:d5:90:77:6b: 9a:4f:51:5e:04:ad:6c:ac:b5:71:20:e8:b2:c4:61: fa:92:80:b7:f1:20:e3:02:44:da:bc:ca:e3:60:7c: ad:06:8d:3b:95:dc:28:53:37:a8:c0:11:db:55:30: c9:a4:df:f0:56:46:88:28:2c:c1:25:01:02:78:b6: 90:c1:d0:62:de:28:cf:9b:a7:ad:8c:24:57:84:61: 78:cf:5e:da:d4:1c:4f:76:ed:e6:9e:67:46:8d:94: a1:f3:c8:74:0b:4a:b2:d0:3e:b0:0f:0e:51:77:ab: 94:bf:c7:1b:9e:0b:5d:2e:b8:b8:c5:4b:f7:de:ed: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5A:BB:DA:47:C1:47:95:E0:E8:42:63:26:DB:28:B7:25:E5:2C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2c:15:b6:8a:00:6e:b3:00:11:6c:12:ac:5f:38:06:19:a9: 70:40:56:c2:a5:9f:61:55:ad:ca:fc:b9:5e:68:38:06:49:19: 84:73:f1:74:88:33:a5:4a:ba:ba:19:28:23:a9:eb:fe:41:bc: 12:77:ce:db:ac:a5:d5:ae:36:01:05:b1:e5:35:d4:e2:d9:78: 75:8c:5c:b2:31:71:96:a5:d7:6d:ef:7a:88:d7:c4:04:cc:69: 23:d5:77:16:cf:a7:55:1c:7d:b7:36:9d:92:50:bd:2b:0d:8a: 90:54:f4:f3:57:cb:11:90:f3:7e:19:12:3c:5e:68:d5:7c:a2: 54:8a:a2:87:e5:f3:15:6b:0b:08:90:80:cd:d2:29:ca:7c:c5: 94:53:42:b2:d1:93:94:f3:19:94:5f:99:82:b5:57:1d:a8:14: e0:97:51:13:4b:aa:e7:dd:ad:c2:3e:ca:ac:b5:04:d9:c5:7a: 6e:0b:06:1d:b2:3b:c0:f1:8c:b0:55:32:ae:39:f9:a8:b1:cb: c8:65:ad:be:3b:e5:20:b9:5b:55:97:68:69:f1:40:14:02:44: 79:d5:a4:16:a1:56:ea:35:e4:4a:f9:a1:6c:44:c6:a1:23:ae: 87:dd:72:75:f2:eb:80:54:63:69:7c:a2:c6:98:3d:3d:21:01: d5:04:ae:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENiSI0QArciLJpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZjhkODVhM2MtZGM3NS00OTUzLTk5NTEtZTRlMGZhODU4NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk1Nf66f03Yjk9/sW7TtQJscdarEGBVb710V Dn16JZqirvrL+2sp1MAOStatKeSYN+ImkpQYe+URfvR1cetPpDR0+VhwrwTqAshp 2cXEsttG86/UQBEjlEzZUBDzB7OTnDAED64ByQqvGUWXIB7nksu4SnZ/sXScUz06 mwMX72RpxtWQd2uaT1FeBK1srLVxIOiyxGH6koC38SDjAkTavMrjYHytBo07ldwo UzeowBHbVTDJpN/wVkaIKCzBJQECeLaQwdBi3ijPm6etjCRXhGF4z17a1BxPdu3m nmdGjZSh88h0C0qy0D6wDw5Rd6uUv8cbngtdLri4xUv33u3T/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdau9pHwUeV4OhCYybbKLcl5Sx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg2OTk4YTItMjFiZi0z OGUyLTlkMGUtZWYzYWNiZjg3ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8sFbaKAG6zABFsEqxfOAYZqXBAVsKln2FVrcr8uV5oOAZJGYRz 8XSIM6VKuroZKCOp6/5BvBJ3ztuspdWuNgEFseU11OLZeHWMXLIxcZal123veojX xATMaSPVdxbPp1Ucfbc2nZJQvSsNipBU9PNXyxGQ834ZEjxeaNV8olSKoofl8xVr CwiQgM3SKcp8xZRTQrLRk5TzGZRfmYK1Vx2oFOCXURNLqufdrcI+yqy1BNnFem4L Bh2yO8DxjLBVMq45+aixy8hlrb475SC5W1WXaGnxQBQCRHnVpBahVuo15Er5oWxE xqEjrofdcnXy64BUY2l8osaYPT0hAdUErlI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:57 2026 by rpki-client