$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa File: 28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa (raw, json) Hash identifier: PAKCYwvG/gtK49N3sRbpsCFaw9S+yWk25D3YFZ/rlGY= Subject key identifier: 2D:BC:7C:8E:CD:15:84:A8:E4:1E:D9:3F:73:10:F3:5A:4B:96:65:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0435F50B199B3626C653AAA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 396604 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f5:0b:19:9b:36:26:c6:53:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=0b605e0e-b9c4-4e43-a3bf-ce921edd65d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:05:60:a6:51:86:1c:31:ef:ca:86:88:41: 6e:6b:0f:4f:cf:dd:52:cd:6b:98:af:43:32:f6:1d: 11:a7:fe:53:47:d8:5a:76:a4:0c:00:9c:c5:e9:08: b8:9b:3d:c1:4c:58:60:be:ea:41:9b:e2:91:cf:22: b8:87:9e:9a:73:e8:35:b2:51:9d:21:ec:9a:88:03: 13:de:7d:be:08:9c:8c:16:d3:ee:ac:de:f8:dc:cb: 03:ae:b0:37:c7:1d:87:7a:53:f2:62:a6:9f:e9:e5: 37:5b:b7:db:32:f0:d8:67:9b:41:91:0e:80:0b:fb: e0:66:e9:71:b0:36:01:b9:24:96:87:bc:63:c9:ef: 38:87:0e:80:af:cf:90:16:29:a1:18:9d:98:c0:55: 60:bc:57:3f:de:77:93:df:b5:24:4a:0d:dc:95:c1: ff:be:d6:56:1c:7a:c9:c6:b0:86:ee:68:50:d7:b2: 85:8b:b5:80:5d:ed:a2:79:67:30:d3:35:ed:cb:92: b8:03:96:3a:a7:72:33:1a:96:f9:f3:98:34:f3:0e: b6:b6:6c:70:08:9d:8a:19:8c:71:33:3c:bd:cc:72: 29:71:f8:77:e6:48:e0:81:6d:c3:06:30:20:74:a7: 91:eb:43:47:55:b3:79:79:c3:b5:cd:f6:dc:15:1f: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:7C:8E:CD:15:84:A8:E4:1E:D9:3F:73:10:F3:5A:4B:96:65:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0c:bd:6b:2b:1a:b3:ae:e1:ea:52:01:32:b5:5a:1c:db:d9: af:29:c1:25:aa:b3:e7:ac:cb:73:65:68:53:32:48:65:98:bf: eb:a9:20:84:d2:22:47:ce:19:d3:eb:c2:ad:3b:a3:ec:74:97: da:5b:e1:60:0a:d6:45:42:f0:c5:44:f4:01:71:99:25:9e:61: 7c:dd:e2:e8:db:9a:29:a3:4b:0e:e8:0d:46:e0:9e:77:40:98: 5b:de:2e:d6:c8:78:85:dd:28:19:8e:d0:66:ea:f1:e5:0c:13: b6:f7:2c:eb:7d:f5:a9:86:51:7c:12:99:76:84:61:98:b0:62: 78:6b:57:b5:fa:b3:73:2d:ab:f1:6e:5e:ff:53:b6:06:ef:14: 96:a3:b3:7d:31:a9:6e:7b:fb:e5:31:5c:01:f8:3c:2f:81:94: a7:c7:62:5c:2d:30:34:f3:c9:31:0c:54:f9:78:f7:b3:86:27: 72:9d:61:9f:3f:72:7f:79:53:95:3b:87:55:0d:1a:c4:8a:23: 53:38:c1:67:d1:b9:90:40:52:9f:7d:91:14:a5:a2:d0:64:c9: 0b:a4:1d:f3:79:b9:28:a8:17:7f:a7:21:65:54:d3:6d:6d:0c: 9e:1d:f8:98:88:af:c4:e2:d4:c5:38:72:0a:cb:22:0d:18:fd: eb:4c:a1:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENfULGZs2JsZTqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MGI2MDVlMGUtYjljNC00ZTQzLWEzYmYtY2U5MjFlZGQ2NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll8FYKZRhhwx78qGiEFuaw9Pz91SzWuYr0My 9h0Rp/5TR9hadqQMAJzF6Qi4mz3BTFhgvupBm+KRzyK4h56ac+g1slGdIeyaiAMT 3n2+CJyMFtPurN743MsDrrA3xx2HelPyYqaf6eU3W7fbMvDYZ5tBkQ6AC/vgZulx sDYBuSSWh7xjye84hw6Ar8+QFimhGJ2YwFVgvFc/3neT37UkSg3clcH/vtZWHHrJ xrCG7mhQ17KFi7WAXe2ieWcw0zXty5K4A5Y6p3IzGpb585g08w62tmxwCJ2KGYxx Mzy9zHIpcfh35kjggW3DBjAgdKeR60NHVbN5ecO1zfbcFR/OqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC28fI7NFYSo5B7ZP3MQ81pLlmVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhZTE3MzEtZDMxMy0z MmE1LWIwZTctYmY3ZTRhM2JmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgMvWsrGrOu4epSATK1Whzb2a8pwSWqs+esy3NlaFMySGWYv+up IITSIkfOGdPrwq07o+x0l9pb4WAK1kVC8MVE9AFxmSWeYXzd4ujbmimjSw7oDUbg nndAmFveLtbIeIXdKBmO0Gbq8eUME7b3LOt99amGUXwSmXaEYZiwYnhrV7X6s3Mt q/FuXv9TtgbvFJajs30xqW57++UxXAH4PC+BlKfHYlwtMDTzyTEMVPl497OGJ3Kd YZ8/cn95U5U7h1UNGsSKI1M4wWfRuZBAUp99kRSlotBkyQukHfN5uSioF3+nIWVU 021tDJ4d+JiIr8Ti1MU4cgrLIg0Y/etMoZM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:45 2026 by rpki-client