$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/202035a7-c3cb-35a6-a770-6d15062d333b.roa File: 202035a7-c3cb-35a6-a770-6d15062d333b.roa (raw, json) Hash identifier: vx9xHZLW/sSIjc7UQEgly5NgSCVnDs/LXJWaonF6KPQ= Subject key identifier: B1:C3:76:F6:37:50:87:26:81:6D:BF:0B:34:55:DE:A4:F9:8B:31:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1319911C10D99DA38EE74B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/202035a7-c3cb-35a6-a770-6d15062d333b.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396551 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:91:1c:10:d9:9d:a3:8e:e7:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=c81de48d-0983-4e95-812d-ff0563bdf62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:16:17:56:2b:00:76:5a:14:8a:f7:67:21: 01:23:bc:72:ab:12:37:bf:31:c6:b0:c7:08:bb:72: 52:de:d4:06:a5:68:74:d2:28:4b:86:66:8f:41:7a: 2d:ea:6e:72:d6:76:62:0a:6c:5a:47:41:50:07:05: 99:23:88:3e:93:85:6b:65:c1:d5:aa:82:1d:a0:93: ee:7e:02:08:29:7a:cd:86:41:9c:60:13:8e:f0:8f: 01:3b:40:97:a9:89:5c:46:e9:3d:63:af:43:53:c8: c9:05:40:1b:61:3f:a9:72:81:47:77:6f:90:91:9c: d6:58:51:4c:36:c5:3d:f5:a4:73:3e:4c:b1:a5:5c: a8:88:25:15:d0:dd:b5:13:3a:0f:26:64:82:96:eb: e7:8e:df:99:09:d6:5f:c2:0d:c6:1d:96:61:ae:ab: c1:18:ec:b1:f0:85:15:64:1b:e3:f8:5e:e0:9d:e9: 53:ef:4c:cb:b5:66:e7:94:68:c8:ec:35:2d:9e:18: c4:df:d2:4b:cf:cd:b2:4c:b0:4f:83:d7:af:cc:d4: dc:33:5f:f2:cc:0d:9c:ef:da:2c:59:51:4a:93:51: 98:bc:ef:ca:fb:8b:36:d7:d6:0b:59:e1:c8:8e:37: 3d:c2:9b:23:c3:43:9e:2d:94:7f:ed:1a:39:b4:27: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:76:F6:37:50:87:26:81:6D:BF:0B:34:55:DE:A4:F9:8B:31:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/202035a7-c3cb-35a6-a770-6d15062d333b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f8:7d:f2:51:46:6d:f3:78:f2:ab:49:65:5d:cb:31:ea:ad: 3e:af:14:00:7c:36:ed:4f:ee:f3:a9:bb:c1:22:40:a4:d0:f8: d3:6c:69:5a:e3:85:51:70:15:69:56:fd:80:0e:64:75:d3:a1: b0:84:86:6f:24:fe:5f:c4:9e:b7:c0:d7:12:43:d7:59:99:84: ce:8a:63:d8:e4:a2:cd:38:b6:6e:27:02:0b:c4:4a:3f:6c:92: a1:ff:14:3e:53:40:95:47:55:58:ef:38:23:f2:d9:d9:d2:84: b9:f4:39:20:6e:79:7d:d4:1c:7e:ad:0a:aa:d9:f0:cf:f2:87: 34:c7:4b:71:12:fa:cd:24:d6:e7:23:dc:bb:fb:a7:93:de:20: f0:c3:fb:59:6d:e5:cb:d2:1e:82:de:ae:e9:84:72:9a:a5:31: e6:67:85:f8:fe:91:df:8d:97:e0:5b:5a:d2:57:98:b0:01:03: 4a:b3:63:4d:6c:a0:dd:25:f0:7c:6e:33:c8:92:3e:25:09:3f: 9b:33:44:5d:fe:89:ae:10:6e:e7:68:a9:3c:bb:eb:1d:9e:c6: 01:7b:a9:cb:6e:53:06:82:99:6d:5f:ed:42:bc:b0:e2:5b:58: 5c:fd:e3:33:ab:3f:cf:33:c1:c7:2d:69:23:af:41:a4:6e:7d: 19:44:b4:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZEcENmdo47nS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk YzgxZGU0OGQtMDk4My00ZTk1LTgxMmQtZmYwNTYzYmRmNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCcWF1YrAHZaFIr3ZyEBI7xyqxI3vzHGsMcI u3JS3tQGpWh00ihLhmaPQXot6m5y1nZiCmxaR0FQBwWZI4g+k4VrZcHVqoIdoJPu fgIIKXrNhkGcYBOO8I8BO0CXqYlcRuk9Y69DU8jJBUAbYT+pcoFHd2+QkZzWWFFM NsU99aRzPkyxpVyoiCUV0N21EzoPJmSCluvnjt+ZCdZfwg3GHZZhrqvBGOyx8IUV ZBvj+F7gnelT70zLtWbnlGjI7DUtnhjE39JLz82yTLBPg9evzNTcM1/yzA2c79os WVFKk1GYvO/K+4s219YLWeHIjjc9wpsjw0OeLZR/7Ro5tCcMvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHDdvY3UIcmgW2/CzRV3qT5izEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjAyMDM1YTctYzNjYi0z NWE2LWE3NzAtNmQxNTA2MmQzMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABn4ffJRRm3zePKrSWVdyzHqrT6vFAB8Nu1P7vOpu8EiQKTQ+NNs aVrjhVFwFWlW/YAOZHXTobCEhm8k/l/EnrfA1xJD11mZhM6KY9jkos04tm4nAgvE Sj9skqH/FD5TQJVHVVjvOCPy2dnShLn0OSBueX3UHH6tCqrZ8M/yhzTHS3ES+s0k 1ucj3Lv7p5PeIPDD+1lt5cvSHoLerumEcpqlMeZnhfj+kd+Nl+BbWtJXmLABA0qz Y01soN0l8HxuM8iSPiUJP5szRF3+ia4QbudoqTy76x2exgF7qctuUwaCmW1f7UK8 sOJbWFz94zOrP88zwcctaSOvQaRufRlEtG0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:03:48 2026 by rpki-client