$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: gzUXSg0K2HAyJkeGn7A5ZeooJGI2JE0Ivvoe7XjXMJM= Subject key identifier: 1C:90:26:4F:DA:1C:4D:3B:54:A4:93:10:C3:AD:02:72:B2:05:F0:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE9B0BF4F4987866006EA3E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:bf:4f:49:87:86:60:06:ea:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=cfd54aff-096b-4a9c-a229-771bd10982df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:ee:e1:8e:f3:7e:86:50:9b:98:4a:98:b5: da:cd:a7:70:dc:cd:80:80:ef:64:a5:81:61:1c:29: 0b:b1:88:df:b2:7e:a6:11:3a:35:b7:75:76:39:50: 2a:82:74:dc:db:8b:49:59:63:3c:73:f4:e5:89:62: 00:70:17:0f:00:ae:c0:f3:06:af:4c:be:4a:12:9c: 7d:02:bf:64:cc:71:89:bc:bf:f9:ab:63:a7:67:b7: 67:ae:1c:d6:04:1c:f4:6d:df:2a:a2:d7:00:56:9a: 98:db:ed:95:5f:d1:8d:5b:8d:1e:db:de:20:fe:ed: a0:0f:2d:c0:f7:83:82:e0:2a:90:3a:33:aa:a7:1d: 00:e3:1b:ea:cb:ed:01:d7:92:ab:3d:31:7c:66:a7: c3:a3:33:3e:73:63:2e:71:c1:80:0e:07:d3:1e:59: 63:4e:5c:f5:fc:4c:9a:8a:49:9c:fe:f6:53:b6:a7: 01:b9:96:8b:6b:4a:ac:4a:d5:e3:30:f8:37:f6:61: 33:5c:09:68:f9:8b:7c:35:f1:86:9e:bd:66:0f:5d: e7:78:dd:f9:d7:9d:6a:4b:3a:c8:da:94:8a:1c:c9: 5e:48:86:57:92:b2:7a:db:b9:83:83:31:8e:f3:22: 84:37:15:41:c6:2f:8e:44:dd:d5:02:fb:4f:86:cd: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:26:4F:DA:1C:4D:3B:54:A4:93:10:C3:AD:02:72:B2:05:F0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b9:52:31:ea:06:c3:42:f3:73:be:c3:1a:b8:92:73:e9:33: 43:83:7f:3d:14:ce:89:db:5c:41:4d:2d:b4:c3:c8:44:ac:a4: 7b:0f:83:bf:88:8b:23:c0:e8:69:64:2e:ab:e5:93:87:7b:eb: d6:54:10:4c:0a:16:83:03:8d:5b:f0:c2:34:f8:87:99:96:07: 1e:eb:b5:92:c6:8d:f7:8f:26:49:c4:c2:d2:f9:dd:c7:15:a8: 13:aa:81:d8:d7:64:46:9b:29:97:64:8f:63:3e:24:8b:69:fb: 59:9d:7f:6b:30:36:8c:c9:4b:a1:5e:56:28:08:a3:f1:1e:a8: a1:0e:8d:59:69:69:ee:4b:e6:cd:ef:5c:c2:4b:fd:a2:60:0d: 18:d3:8b:69:a3:41:83:50:fb:61:0d:3c:c8:40:49:98:4f:bd: 71:a9:08:6e:be:09:de:b6:94:85:4b:e3:ea:46:37:b4:87:7e: ce:22:48:67:50:89:ed:d2:b9:b2:50:00:d2:0b:61:0a:9f:f4: cb:92:00:81:39:38:fb:f6:79:00:85:83:bd:d3:45:e4:f0:e7: f8:c1:29:b0:b9:41:0b:da:d5:ba:c1:ab:12:d4:ae:a7:a6:75: 18:0f:b2:95:b2:73:ca:0f:92:62:8a:6b:db:e6:f0:f7:e1:84: 54:60:20:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psL9PSYeGYAbqPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2ZkNTRhZmYtMDk2Yi00YTljLWEyMjktNzcxYmQxMDk4MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dXu4Y7zfoZQm5hKmLXazadw3M2AgO9kpYFh HCkLsYjfsn6mETo1t3V2OVAqgnTc24tJWWM8c/TliWIAcBcPAK7A8wavTL5KEpx9 Ar9kzHGJvL/5q2OnZ7dnrhzWBBz0bd8qotcAVpqY2+2VX9GNW40e294g/u2gDy3A 94OC4CqQOjOqpx0A4xvqy+0B15KrPTF8ZqfDozM+c2MuccGADgfTHlljTlz1/Eya ikmc/vZTtqcBuZaLa0qsStXjMPg39mEzXAlo+Yt8NfGGnr1mD13neN35151qSzrI 2pSKHMleSIZXkrJ627mDgzGO8yKENxVBxi+ORN3VAvtPhs28XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFByQJk/aHE07VKSTEMOtAnKyBfDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGO5UjHqBsNC83O+wxq4knPpM0ODfz0UzonbXEFNLbTDyESspHsP g7+IiyPA6GlkLqvlk4d769ZUEEwKFoMDjVvwwjT4h5mWBx7rtZLGjfePJknEwtL5 3ccVqBOqgdjXZEabKZdkj2M+JItp+1mdf2swNozJS6FeVigIo/EeqKEOjVlpae5L 5s3vXMJL/aJgDRjTi2mjQYNQ+2ENPMhASZhPvXGpCG6+Cd62lIVL4+pGN7SHfs4i SGdQie3SubJQANILYQqf9MuSAIE5OPv2eQCFg73TReTw5/jBKbC5QQva1brBqxLU rqemdRgPspWyc8oPkmKKa9vm8PfhhFRgIBA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:49 2026 by rpki-client