$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1de87500-41d0-3318-84ea-b7cf2b470111.roa File: 1de87500-41d0-3318-84ea-b7cf2b470111.roa (raw, json) Hash identifier: nSIGiWLzqy+NU4fgmyS9QqET7Id0UbX6oesKmy3jjA0= Subject key identifier: A8:E2:C5:6C:F5:96:55:FD:1D:81:E4:0F:DA:3C:28:4B:55:91:B0:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D887704482B6F84523DC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1de87500-41d0-3318-84ea-b7cf2b470111.roa Signing time: Tue 19 May 2026 14:10:32 +0000 ROA not before: Tue 19 May 2026 14:10:32 +0000 ROA not after: Mon 17 Aug 2026 14:10:32 +0000 asID: 396562 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:87:70:44:82:b6:f8:45:23:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:32 2026 GMT Not After : Aug 17 14:10:32 2026 GMT Subject: CN=ba4353cf-7d48-45a0-8e0a-0e90cd80c38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:c1:3e:43:2e:96:47:39:20:f3:57:e6:fe: eb:b6:04:fb:06:6e:cb:8b:c6:fc:5b:90:ac:ac:0a: cc:de:52:23:57:d0:16:a6:62:aa:5b:c9:69:c3:67: 61:a4:6d:b7:2f:a0:ef:4c:12:ca:12:9a:1d:15:f3: c1:55:1e:2c:db:15:1c:2f:65:10:2d:1d:1a:f1:03: b2:e0:f5:22:df:b6:7c:37:a3:5a:0d:c7:8b:ba:c1: 64:95:62:fe:f1:bb:76:a0:11:fe:db:e9:ff:f6:d0: 62:76:76:6d:76:b9:90:8d:8c:cb:f5:8e:1c:22:b2: da:7c:20:7d:82:ff:df:5a:68:1c:24:4d:f0:c1:b7: fa:1b:38:d1:1e:37:98:d8:65:2f:2c:af:df:9f:61: 4d:ba:e8:a8:b7:d2:64:1d:09:eb:f3:e5:14:3d:a0: 73:66:1c:68:7b:70:67:07:a9:a6:6f:e4:1e:23:6d: 90:a1:8d:b5:b6:e8:20:62:b1:ad:39:90:03:4e:79: ab:80:48:10:89:09:83:8e:f7:91:f2:94:eb:04:e4: 70:4a:22:9e:46:7a:02:2b:55:59:28:21:19:75:dd: f4:ae:81:e3:d2:5f:a3:e7:d6:bc:b0:b1:05:3c:33: 75:bc:21:21:35:d8:e5:94:f4:22:21:6d:23:32:dc: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:C5:6C:F5:96:55:FD:1D:81:E4:0F:DA:3C:28:4B:55:91:B0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1de87500-41d0-3318-84ea-b7cf2b470111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:70:2b:81:8f:6b:27:3a:45:9c:7a:3e:2e:c6:9f:dc:79:85: 5c:c3:01:39:d8:b0:82:45:93:ab:6f:26:7c:62:57:d0:96:5e: 2c:0b:92:8e:f2:77:d1:ac:b6:22:0a:6b:39:ed:a5:ed:46:4d: 8f:04:77:73:ac:72:fc:3a:41:c8:b6:8e:d6:92:0f:5a:01:ff: 7b:4e:9a:ee:9e:3b:2e:0b:8d:74:e5:2b:6c:ad:85:56:3d:45: 67:97:22:c6:fc:f2:1b:5c:e3:f8:bb:c8:64:ce:0a:cc:de:1d: ed:f0:87:05:35:93:a2:1c:25:c2:63:0a:81:81:da:95:ef:99: ad:f0:45:b4:3a:fe:e7:31:03:5d:57:85:09:cd:f3:51:67:2a: 13:09:ff:e0:eb:73:2d:04:7e:ad:cc:db:95:8d:ce:56:d7:f6: 3f:bb:26:4c:8a:df:02:2f:f3:8d:d7:8d:a0:ab:d7:4d:63:85: e3:29:4c:ec:d2:4e:f2:64:6c:76:1e:43:d3:7d:20:c6:82:8a: ed:ca:60:65:a4:30:cb:70:27:6d:00:02:1b:d5:93:fe:5f:f5: d3:2c:4d:1c:77:26:a9:75:a4:7a:da:53:ca:53:8f:93:54:ea: 9a:6b:02:a7:1c:eb:7d:cf:02:75:ba:9b:66:c2:82:a7:56:c2: f0:c1:0e:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IdwRIK2+EUj3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzMloXDTI2MDgxNzE0MTAzMlowLzEtMCsGA1UEAxMk YmE0MzUzY2YtN2Q0OC00NWEwLThlMGEtMGU5MGNkODBjMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLPBPkMulkc5IPNX5v7rtgT7Bm7Li8b8W5Cs rArM3lIjV9AWpmKqW8lpw2dhpG23L6DvTBLKEpodFfPBVR4s2xUcL2UQLR0a8QOy 4PUi37Z8N6NaDceLusFklWL+8bt2oBH+2+n/9tBidnZtdrmQjYzL9Y4cIrLafCB9 gv/fWmgcJE3wwbf6GzjRHjeY2GUvLK/fn2FNuuiot9JkHQnr8+UUPaBzZhxoe3Bn B6mmb+QeI22QoY21tuggYrGtOZADTnmrgEgQiQmDjveR8pTrBORwSiKeRnoCK1VZ KCEZdd30roHj0l+j59a8sLEFPDN1vCEhNdjllPQiIW0jMtzAtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjixWz1llX9HYHkD9o8KEtVkbBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWRlODc1MDAtNDFkMC0z MzE4LTg0ZWEtYjdjZjJiNDcwMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZwK4GPayc6RZx6Pi7Gn9x5hVzDATnYsIJFk6tvJnxiV9CWXiwL ko7yd9GstiIKazntpe1GTY8Ed3Oscvw6Qci2jtaSD1oB/3tOmu6eOy4LjXTlK2yt hVY9RWeXIsb88htc4/i7yGTOCszeHe3whwU1k6IcJcJjCoGB2pXvma3wRbQ6/ucx A11XhQnN81FnKhMJ/+Drcy0Efq3M25WNzlbX9j+7JkyK3wIv843XjaCr101jheMp TOzSTvJkbHYeQ9N9IMaCiu3KYGWkMMtwJ20AAhvVk/5f9dMsTRx3Jql1pHraU8pT j5NU6pprAqcc633PAnW6m2bCgqdWwvDBDgI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:12 2026 by rpki-client