$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa File: 0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa (raw, json) Hash identifier: vbV80FGHIsY0W7NhLwMgtQPOUcQEOgOSACufiQTDmnQ= Subject key identifier: 43:69:02:E1:FB:70:EA:25:D7:F1:66:92:89:B1:43:4C:EC:61:BB:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F122E17FE62997C0C0600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 20172 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:12:2e:17:fe:62:99:7c:0c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=9b837bda-6990-4c54-a3ea-94962d3b4e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:44:cd:84:91:36:63:17:6b:89:25:d1:e4: f0:00:8d:9e:7a:0b:6a:10:b7:cb:86:f9:df:0f:18: 15:48:15:a7:b1:e9:6a:09:33:02:33:b8:99:45:a5: 8f:8b:6e:14:fd:75:88:b2:2b:6d:bd:25:81:a3:31: 24:9f:c0:89:87:9d:eb:58:2a:2b:f6:f0:af:2d:38: df:3e:f0:5a:84:8d:d5:63:74:d3:e8:1a:61:72:e4: b9:cf:bf:42:cb:85:65:22:8e:8e:22:18:fa:4f:ed: 2e:21:be:86:e5:67:b6:f9:a1:18:c8:3b:d4:78:97: 95:71:57:ce:76:b4:a9:7c:61:76:0c:90:be:89:b7: de:97:0a:84:36:7d:9c:d1:25:8a:c4:d1:84:2e:c4: 16:5f:2a:b8:54:b3:77:6c:44:c1:a5:25:b4:c1:89: f3:71:44:05:02:f2:a3:85:d5:bf:f9:0b:6f:85:31: 6c:39:60:ac:91:20:91:90:43:26:c7:08:73:a4:79: c3:84:22:1b:a2:3e:35:7a:e0:4e:b8:54:59:11:a1: 26:aa:07:e8:af:83:a7:62:ba:2a:14:4b:30:dc:91: 25:52:ce:e0:28:42:56:40:2b:ee:46:ce:5e:61:bf: 6a:37:da:43:5e:5c:98:2e:63:d0:da:68:71:3c:88: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:69:02:E1:FB:70:EA:25:D7:F1:66:92:89:B1:43:4C:EC:61:BB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:36:52:80:c4:97:14:3e:a0:3c:3e:8b:06:b9:29:ef:3d:b5: 99:01:3a:98:29:28:5e:4b:b5:0d:82:40:a0:cf:8d:34:a8:c0: 18:ef:9c:58:d2:0b:c5:12:31:c6:3c:b3:23:16:9b:3e:9e:60: ef:ac:84:c4:d7:5f:48:97:e4:0c:98:ec:a9:df:09:1a:9b:32: 64:99:0f:71:26:7a:f8:f1:bc:b0:9d:da:74:be:01:a7:68:29: df:18:6d:a8:e1:7e:d7:1b:8b:29:a2:4b:e5:60:3d:a8:11:2d: 26:b9:83:2a:85:84:99:91:3b:ed:b1:de:19:a3:8c:2a:f1:44: 2e:ae:d6:6b:c9:43:6f:f3:b9:95:4d:76:e3:00:a1:d0:ac:86: 67:16:ac:c1:c0:bc:f7:a5:73:8b:1b:94:7c:b6:45:2d:78:f8: 35:f3:52:84:b9:e8:84:be:01:8b:12:ad:5c:a4:0d:4c:22:1c: c9:9d:87:ca:0c:3c:7e:c5:d4:ab:2a:1b:1f:58:22:5e:d7:95: aa:38:ee:a2:44:fa:f2:94:5d:c1:db:86:f8:0c:e1:18:fc:7f: 59:2f:a0:9e:4c:51:0d:47:11:f3:03:e7:5a:90:40:be:73:63: c6:97:6b:31:35:6f:8f:46:42:85:e2:10:d6:20:74:64:f4:9d: 2c:76:b5:eb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxIuF/5imXwMBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk OWI4MzdiZGEtNjk5MC00YzU0LWEzZWEtOTQ5NjJkM2I0ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vlEzYSRNmMXa4kl0eTwAI2eegtqELfLhvnf DxgVSBWnselqCTMCM7iZRaWPi24U/XWIsittvSWBozEkn8CJh53rWCor9vCvLTjf PvBahI3VY3TT6BphcuS5z79Cy4VlIo6OIhj6T+0uIb6G5We2+aEYyDvUeJeVcVfO drSpfGF2DJC+ibfelwqENn2c0SWKxNGELsQWXyq4VLN3bETBpSW0wYnzcUQFAvKj hdW/+QtvhTFsOWCskSCRkEMmxwhzpHnDhCIboj41euBOuFRZEaEmqgfor4OnYroq FEsw3JElUs7gKEJWQCvuRs5eYb9qN9pDXlyYLmPQ2mhxPIh+QQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFENpAuH7cOol1/FmkomxQ0zsYbuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZhOTUwZTgtNWVlMC0z ZWQ4LWE0NmItNzNhOWIyZDgxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQNlKAxJcUPqA8PosGuSnvPbWZATqYKSheS7UN gkCgz400qMAY75xY0gvFEjHGPLMjFps+nmDvrITE119Il+QMmOyp3wkamzJkmQ9x Jnr48bywndp0vgGnaCnfGG2o4X7XG4spokvlYD2oES0muYMqhYSZkTvtsd4Zo4wq 8UQurtZryUNv87mVTXbjAKHQrIZnFqzBwLz3pXOLG5R8tkUtePg181KEueiEvgGL Eq1cpA1MIhzJnYfKDDx+xdSrKhsfWCJe15WqOO6iRPrylF3B24b4DOEY/H9ZL6Ce TFENRxHzA+dakEC+c2PGl2sxNW+PRkKF4hDWIHRk9J0sdrXr -----END CERTIFICATE-----Generated at Sat Jun 13 15:21:48 2026 by rpki-client