$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa File: 2a044801-bef0-3083-a8a9-a11d33411f51.roa (raw, json) Hash identifier: bFZSMqLKpUg04kZ/4sE7vX0os0FpRQTOeElyK6mFqeE= Subject key identifier: E5:D1:75:39:76:F1:03:0D:A1:71:6E:B7:1D:9E:74:78:DC:D0:0D:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E104F0D3198E686B61E77C380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 396560 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:0d:31:98:e6:86:b6:1e:77:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=de95f8c7-065d-4410-803d-7e076b637891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:ef:5f:7e:b0:8a:95:83:f3:9b:51:c5:c9: e2:ff:d1:e4:4d:e9:6d:c4:34:39:49:8a:dc:f7:af: e0:fb:95:94:6e:d5:3b:58:fd:1d:68:a3:28:ac:0a: 8a:68:c7:a3:95:2f:07:14:36:f0:28:37:40:03:ba: d3:ab:0a:bf:3a:61:30:da:34:26:9d:39:dc:a9:13: 79:73:42:b9:40:18:4e:da:92:bb:e5:85:69:de:f7: d2:27:01:10:b0:a2:e7:3a:32:c4:df:98:39:0c:b2: 66:5d:0f:69:44:2a:6a:89:eb:38:79:ca:e9:b8:0e: 1a:3a:d4:86:77:3b:fb:0c:57:05:31:f9:c2:2e:73: 48:76:be:cf:32:21:29:aa:1b:97:5f:54:e3:cb:b7: 41:00:fe:6e:ce:da:8e:88:0a:b3:e3:64:b0:41:b7: b8:42:01:d6:ac:70:61:da:5d:cc:ce:49:05:6e:82: b3:32:38:5a:f9:f5:df:f6:79:97:f8:f9:46:42:f3: d0:77:93:fe:78:81:9d:13:82:24:e7:fb:c3:58:54: af:40:fe:24:62:0b:e9:c2:e0:8e:7e:91:b9:89:f8: 27:9f:1b:b7:64:af:07:a2:1d:ac:85:07:92:4b:a6: fd:1d:47:f2:3d:32:70:98:43:a5:b6:3f:0e:e1:98: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:75:39:76:F1:03:0D:A1:71:6E:B7:1D:9E:74:78:DC:D0:0D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a044801-bef0-3083-a8a9-a11d33411f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b2:5a:5f:05:48:76:87:ea:64:6f:b5:5e:6d:5a:84:f7:43: 9f:32:7e:95:95:53:1d:39:62:d2:56:f1:9f:fb:8e:00:ce:2e: e4:bc:0f:8b:c6:cb:cb:77:d1:27:9c:40:d0:3e:d7:42:d4:ba: e4:b2:ae:7a:a6:45:7e:26:04:fe:40:89:04:8e:24:be:76:78: b4:a4:be:67:9b:f3:34:02:72:37:44:5d:1e:6c:dc:42:ab:7a: 99:16:7e:ce:59:2d:69:cb:b7:68:ba:1e:46:ea:17:67:c4:fb: f7:7d:5d:e5:f4:38:ec:43:25:4b:e9:63:7a:b0:ae:f1:c3:87: 12:6c:9a:32:20:e0:74:52:69:36:69:7b:9c:79:e0:1c:c6:29: 20:46:13:53:b0:77:fa:fa:0b:26:88:67:88:8e:67:12:93:e6: d1:08:d4:2c:9c:bd:ef:ec:9a:1c:93:2a:59:26:6a:87:96:5f: 0f:ea:7b:d6:e8:2a:90:30:8a:75:a7:c0:d1:06:0a:c3:c9:9b: 40:a9:a3:11:d2:56:77:ce:3d:69:db:72:fa:7e:76:90:7f:b0: f5:5d:c4:e6:f4:62:df:a9:51:06:56:7d:6d:09:96:e6:5e:6e: f2:15:51:c2:6a:0e:98:8e:f3:24:a1:06:a4:f9:c7:1c:77:59: d3:7b:2f:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTw0xmOaGth53w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGU5NWY4YzctMDY1ZC00NDEwLTgwM2QtN2UwNzZiNjM3ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyPvX36wipWD85tRxcni/9HkTeltxDQ5SYrc 96/g+5WUbtU7WP0daKMorAqKaMejlS8HFDbwKDdAA7rTqwq/OmEw2jQmnTncqRN5 c0K5QBhO2pK75YVp3vfSJwEQsKLnOjLE35g5DLJmXQ9pRCpqies4ecrpuA4aOtSG dzv7DFcFMfnCLnNIdr7PMiEpqhuXX1Tjy7dBAP5uztqOiAqz42SwQbe4QgHWrHBh 2l3MzkkFboKzMjha+fXf9nmX+PlGQvPQd5P+eIGdE4Ik5/vDWFSvQP4kYgvpwuCO fpG5ifgnnxu3ZK8Hoh2shQeSS6b9HUfyPTJwmEOltj8O4Zi1iQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOXRdTl28QMNoXFutx2edHjc0A10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEwNDQ4MDEtYmVmMC0z MDgzLWE4YTktYTExZDMzNDExZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKslpfBUh2h+pkb7VebVqE90OfMn6VlVMdOWLS VvGf+44Azi7kvA+LxsvLd9EnnEDQPtdC1Lrksq56pkV+JgT+QIkEjiS+dni0pL5n m/M0AnI3RF0ebNxCq3qZFn7OWS1py7douh5G6hdnxPv3fV3l9DjsQyVL6WN6sK7x w4cSbJoyIOB0Umk2aXuceeAcxikgRhNTsHf6+gsmiGeIjmcSk+bRCNQsnL3v7Joc kypZJmqHll8P6nvW6CqQMIp1p8DRBgrDyZtAqaMR0lZ3zj1p23L6fnaQf7D1XcTm 9GLfqVEGVn1tCZbmXm7yFVHCag6YjvMkoQak+cccd1nTey8Y -----END CERTIFICATE-----Generated at Sat Jun 13 15:25:38 2026 by rpki-client