$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa File: 21a4ea39-0e65-3c46-9645-6a40d2e40110.roa (raw, json) Hash identifier: K3RXE6c9CvOSU8VY6l2uxkwEnj50eYLxutt25/0VZ6w= Subject key identifier: AE:40:E0:95:B4:CF:E7:B7:07:79:C5:1A:BE:61:98:D6:B9:0E:FB:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E04362C451522D6DAE13021C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 397203 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2c:45:15:22:d6:da:e1:30:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=945cfa93-611c-431f-b5dd-e2b297117c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:bc:8b:ec:06:60:f9:69:1a:af:84:bd:bf: fb:50:4d:8a:cc:9b:48:2d:26:6b:90:4c:90:7f:a0: 56:bc:2d:7b:b7:76:ca:14:94:d3:aa:84:dc:68:06: 7f:f1:98:b1:c1:9f:17:21:35:1b:d6:3b:dc:ec:8c: 5e:b6:cc:7d:0b:44:55:05:46:a9:a6:23:30:b3:55: 01:52:47:45:97:85:06:51:dc:f4:20:aa:7c:80:b3: fb:bc:25:bf:3b:c5:8b:74:54:c8:b0:42:7c:4e:92: ed:45:52:2d:c5:2e:39:0c:1a:16:e7:eb:8d:78:ff: ee:38:26:63:63:36:ba:b9:d7:5c:98:a5:83:70:ab: 5d:08:db:0d:7c:ab:6c:0c:bf:0b:50:a6:23:de:a5: e6:d3:eb:f1:fb:d5:40:f2:5b:f4:7b:87:ad:43:e0: bb:b1:41:dc:56:df:07:a9:40:ac:9c:a7:c6:b6:0c: 14:07:b0:3e:01:08:49:88:d8:65:00:df:9f:5f:d9: 42:c1:1b:31:d7:9f:b4:d8:4c:00:05:7e:7f:2f:6b: 39:a9:de:f4:35:c6:48:08:03:42:65:2d:60:4e:76: bf:74:a9:a8:4a:15:81:fe:8f:18:eb:13:27:11:ba: 8e:a3:ea:d5:a9:26:40:fb:29:5d:00:03:8a:da:4b: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:40:E0:95:B4:CF:E7:B7:07:79:C5:1A:BE:61:98:D6:B9:0E:FB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1c:9b:84:4c:36:ff:95:76:fc:df:8e:be:4f:e8:29:44:2d: f0:73:67:c7:f4:16:4b:24:b4:ff:64:18:32:a7:24:ac:c2:10: 32:b6:8c:50:1b:f2:49:e1:d3:8f:d3:c9:91:7a:fe:fa:0c:30: d7:a4:e3:2b:4f:0c:5c:c5:ba:ad:8e:9a:95:bb:12:5d:86:4a: ab:a2:68:70:9d:2a:a7:70:e8:f9:af:29:af:92:a3:f7:58:83: e8:8d:77:1b:6c:0f:bf:b6:d9:a7:fa:18:f8:47:55:51:3d:50: 76:6c:a2:7e:65:e9:d0:c7:f9:7f:f0:67:a3:8a:3d:e4:ea:08: ae:d3:7c:01:6c:a3:76:70:7c:47:74:bd:c6:28:dc:a6:d6:6c: 69:96:bd:39:a9:1e:db:d2:fe:28:5f:97:76:17:45:06:dd:a8: 97:7b:df:47:5c:25:bf:06:66:8b:06:9e:37:d4:e6:73:a1:ab: 37:46:43:0f:ce:d3:0f:d2:4b:64:e1:a3:44:28:1a:66:6e:bf: 89:4d:1e:74:ae:28:fa:29:7c:b3:8b:86:f5:18:94:00:1e:a0: 79:78:88:85:d3:d0:9a:27:6b:e0:0e:e1:63:df:c9:34:ff:bb: 89:ac:44:0b:4a:ee:d7:6d:07:68:cf:76:8a:8a:17:75:d5:d9: 1e:d3:47:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENixFFSLW2uEwIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OTQ1Y2ZhOTMtNjExYy00MzFmLWI1ZGQtZTJiMjk3MTE3YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJa8i+wGYPlpGq+Evb/7UE2KzJtILSZrkEyQ f6BWvC17t3bKFJTTqoTcaAZ/8ZixwZ8XITUb1jvc7Ixetsx9C0RVBUappiMws1UB UkdFl4UGUdz0IKp8gLP7vCW/O8WLdFTIsEJ8TpLtRVItxS45DBoW5+uNeP/uOCZj Yza6uddcmKWDcKtdCNsNfKtsDL8LUKYj3qXm0+vx+9VA8lv0e4etQ+C7sUHcVt8H qUCsnKfGtgwUB7A+AQhJiNhlAN+fX9lCwRsx15+02EwABX5/L2s5qd70NcZICANC ZS1gTna/dKmoShWB/o8Y6xMnEbqOo+rVqSZA+yldAAOK2kswqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK5A4JW0z+e3B3nFGr5hmNa5Dvt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFhNGVhMzktMGU2NS0z YzQ2LTk2NDUtNmE0MGQyZTQwMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0cm4RMNv+Vdvzfjr5P6ClELfBzZ8f0FksktP9kGDKnJKzCEDK2 jFAb8knh04/TyZF6/voMMNek4ytPDFzFuq2OmpW7El2GSquiaHCdKqdw6PmvKa+S o/dYg+iNdxtsD7+22af6GPhHVVE9UHZson5l6dDH+X/wZ6OKPeTqCK7TfAFso3Zw fEd0vcYo3KbWbGmWvTmpHtvS/ihfl3YXRQbdqJd730dcJb8GZosGnjfU5nOhqzdG Qw/O0w/SS2Tho0QoGmZuv4lNHnSuKPopfLOLhvUYlAAeoHl4iIXT0Jona+AO4WPf yTT/u4msRAtK7tdtB2jPdoqKF3XV2R7TR3c= -----END CERTIFICATE-----Generated at Sat Jun 13 19:42:18 2026 by rpki-client