$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa File: 1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa (raw, json) Hash identifier: dN5WLjBGSHey/vj9NCSnHuXRMHr2vXqa+7TX7UWjyfs= Subject key identifier: 3B:45:73:0D:0D:AC:A8:A5:CF:83:1D:5A:85:8C:1B:00:7B:DA:04:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E04361109AC07A942949616C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 36619 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:11:09:ac:07:a9:42:94:96:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=9b76cadd-4523-4d92-8f39-f954f4c8a9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:64:c6:cf:1b:f7:f4:a8:15:56:ab:79:fb: 91:ce:0c:db:56:56:da:e5:d4:46:7e:06:ae:95:66: 03:a1:52:b4:a7:a0:e2:2e:97:c7:7f:a9:7f:b4:6f: 8c:ef:9c:c2:4f:07:d4:8a:8f:d5:ef:32:71:75:de: fb:b1:69:4c:dc:52:0a:d2:27:22:cc:a2:e8:95:ea: d0:a0:02:2e:26:3e:3d:5d:77:35:21:f0:b0:a2:29: b2:f6:04:b3:bd:39:87:e4:c9:ac:9c:55:d8:6a:f3: 00:5f:d9:2d:48:9c:07:7b:f5:1e:d3:18:c3:75:93: e3:b3:6f:64:e3:9e:97:c3:0c:2a:f0:04:cf:5c:1d: 6a:2d:55:04:6e:90:43:d6:e3:64:a2:3f:24:cc:8e: c2:c2:01:4d:49:9b:ef:e1:a7:41:1c:b4:d9:1d:be: 2f:3a:b7:76:18:5f:10:74:7a:aa:a1:e5:8a:c4:6b: b7:45:63:45:97:da:12:44:5d:fc:f0:e4:43:85:55: ea:13:bf:1d:7e:30:eb:cc:af:17:59:c7:23:bf:79: 77:5b:c2:b0:dc:76:7c:35:55:20:db:9a:cb:6f:b3: 10:99:7b:cc:5e:52:11:22:3d:e2:be:d9:47:e6:9a: 03:79:47:38:30:75:09:c6:02:7e:27:70:e2:83:c3: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:73:0D:0D:AC:A8:A5:CF:83:1D:5A:85:8C:1B:00:7B:DA:04:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:cb:e6:c0:a6:f2:bf:a8:33:d0:9e:b6:dc:7e:09:06:77: 89:62:c8:da:a4:3f:85:cf:08:d7:6e:26:d8:41:d1:cd:c4:db: b7:e6:4c:bc:74:cd:c4:01:a2:f9:1a:da:0d:dd:93:db:c6:4c: 12:9d:87:2a:a1:b2:bc:b4:eb:4d:17:05:be:f6:41:1b:36:0c: 3c:dc:47:b5:d2:11:06:61:5a:63:58:46:90:a2:45:49:7d:db: 49:90:cc:fc:e0:c5:0a:c8:aa:04:4c:43:fe:82:2f:e4:8f:0f: 34:c6:c2:ee:3e:37:ac:72:38:fc:24:fb:23:05:1f:33:76:25: 7b:72:2f:a1:d7:3a:45:3e:4b:dc:d3:d0:59:15:9f:12:93:cd: 50:67:1e:b6:5e:84:01:fa:ca:cd:f7:ae:60:57:86:4f:bc:0b: 05:f6:cd:13:69:49:bb:a3:5f:4f:1c:10:85:c8:0a:75:32:63: 15:9f:5c:32:39:7e:6a:5a:50:a6:71:c3:69:f2:7a:12:ac:fd: 27:4e:7d:3c:2c:82:0c:a4:5a:b2:4c:8c:17:bf:4a:16:82:6b: e4:1a:64:60:cf:d1:5a:ca:9c:cf:f9:c2:6b:1e:26:fc:18:e8: 6f:46:76:11:0b:0b:6d:64:19:03:1d:5e:3f:a5:c6:88:dd:7c: 0c:56:bc:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENhEJrAepQpSWFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OWI3NmNhZGQtNDUyMy00ZDkyLThmMzktZjk1NGY0YzhhOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNNkxs8b9/SoFVarefuRzgzbVlba5dRGfgau lWYDoVK0p6DiLpfHf6l/tG+M75zCTwfUio/V7zJxdd77sWlM3FIK0icizKLolerQ oAIuJj49XXc1IfCwoimy9gSzvTmH5MmsnFXYavMAX9ktSJwHe/Ue0xjDdZPjs29k 456Xwwwq8ATPXB1qLVUEbpBD1uNkoj8kzI7CwgFNSZvv4adBHLTZHb4vOrd2GF8Q dHqqoeWKxGu3RWNFl9oSRF388ORDhVXqE78dfjDrzK8XWccjv3l3W8Kw3HZ8NVUg 25rLb7MQmXvMXlIRIj3ivtlH5poDeUc4MHUJxgJ+J3Dig8PsrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtFcw0NrKilz4MdWoWMGwB72gRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWM2OTg0MDYtMWQ4Zi0z ZjUxLWJmZDItYjFhMTU5YWYwYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUny+bApvK/qDPQnrbcfgkGd4liyNqkP4XPCNduJthB0c3E27fm TLx0zcQBovka2g3dk9vGTBKdhyqhsry0600XBb72QRs2DDzcR7XSEQZhWmNYRpCi RUl920mQzPzgxQrIqgRMQ/6CL+SPDzTGwu4+N6xyOPwk+yMFHzN2JXtyL6HXOkU+ S9zT0FkVnxKTzVBnHrZehAH6ys33rmBXhk+8CwX2zRNpSbujX08cEIXICnUyYxWf XDI5fmpaUKZxw2nyehKs/SdOfTwsggykWrJMjBe/ShaCa+QaZGDP0VrKnM/5wmse JvwY6G9GdhELC21kGQMdXj+lxojdfAxWvP0= -----END CERTIFICATE-----Generated at Sat Jun 13 14:37:08 2026 by rpki-client