$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a6d1154-76db-32d4-bc51-9b3c8d639385.roa File: 2a6d1154-76db-32d4-bc51-9b3c8d639385.roa (raw, json) Hash identifier: ZmZ8HxTEe3Ly5hoogCGZL7OkDOoHhgm1EghUMk+DCmA= Subject key identifier: D8:FB:D4:BA:22:F3:B7:29:39:DA:2F:D9:E1:91:FD:2F:E5:13:18:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88C562041EA0FFFA08180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a6d1154-76db-32d4-bc51-9b3c8d639385.roa Signing time: Tue 19 May 2026 14:10:35 +0000 ROA not before: Tue 19 May 2026 14:10:35 +0000 ROA not after: Mon 17 Aug 2026 14:10:35 +0000 asID: 396553 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8c:56:20:41:ea:0f:ff:a0:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:35 2026 GMT Not After : Aug 17 14:10:35 2026 GMT Subject: CN=13a81bc9-08c5-472b-afc2-6bf4bd6b147d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:20:ea:b5:d4:6f:dd:e9:97:d7:b6:55:b4: 22:49:d2:ae:8b:95:f2:66:59:7a:5c:42:fd:48:4c: 28:b0:a3:1f:cf:9c:2a:9e:3d:9f:68:06:82:bf:32: dc:7f:ad:12:a0:1f:c5:cd:bf:cb:38:5d:cf:80:2f: c7:7b:bb:42:50:00:d9:ad:a3:37:ef:da:1e:21:e0: 02:5a:29:86:10:60:93:09:e5:e9:cf:c1:f6:fb:53: 65:e3:c7:3a:af:57:a5:86:3e:2d:71:46:e9:de:98: f4:9d:d0:cd:64:e9:94:60:1a:a7:53:70:8f:db:6e: 61:ad:f5:98:da:3e:7b:a9:a9:0f:0d:3d:2c:dc:f6: 68:29:8c:7e:54:bc:56:59:89:c1:88:ae:66:33:93: 99:6d:a5:cd:66:eb:51:09:1f:56:f1:2d:6a:b5:c1: 99:48:9f:b3:dd:f6:e0:a7:09:83:72:80:d9:39:ac: 08:c3:5b:13:19:95:39:db:dc:20:c9:b8:52:a6:9d: 8f:16:df:64:31:1e:3c:38:39:00:84:dc:14:91:5d: 87:40:5b:8e:0b:f5:e7:6f:62:ff:3f:23:70:c5:21: 19:fa:a3:1e:28:e3:44:e5:71:a2:5d:3c:ae:db:de: 95:d7:1e:de:29:a5:5c:b9:c6:81:cc:be:6e:d0:14: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FB:D4:BA:22:F3:B7:29:39:DA:2F:D9:E1:91:FD:2F:E5:13:18:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a6d1154-76db-32d4-bc51-9b3c8d639385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:18:86:be:1f:60:50:3e:a9:b2:39:2c:80:f7:8d:2a:3e:f9: 53:a2:6a:4f:b0:cf:d2:31:82:fb:9a:1e:11:74:82:25:4b:a6: 5f:0f:81:98:2e:fa:38:1b:d5:f4:52:8e:7c:1b:54:ad:32:81: aa:0e:72:a2:7b:2f:17:f1:0c:00:7e:63:76:f2:f0:29:be:fb: 55:c5:b9:26:ee:1f:e0:1c:3f:8c:92:d0:3b:78:5b:00:d7:2e: bd:07:b5:8e:f2:63:05:13:a7:c4:54:7a:42:79:c1:0f:bd:6b: a2:42:0d:d3:bb:a7:cc:48:81:25:e0:7b:d9:2e:14:c1:00:28: 9b:1c:d3:ed:36:57:7f:c1:5d:b1:6f:37:89:3f:8a:16:97:10: ab:cf:54:4e:d9:95:91:54:f3:cf:9d:5b:c8:d4:92:43:a7:e2: 63:34:a1:cc:4c:eb:8c:84:d5:52:b7:77:15:bb:c3:b0:64:76: ca:89:04:16:a5:ba:3a:ff:de:d2:27:51:e8:8c:b9:e6:1c:15: 5d:b8:1e:3b:ad:54:6c:27:23:42:fc:b2:4a:29:4b:4f:b3:02: b3:59:56:46:99:88:64:20:fa:0b:3a:d4:d2:c9:81:c0:73:ca: 5b:57:1e:bb:d5:7a:7f:7a:f8:85:67:6d:2d:ec:12:a0:0c:75: 27:01:3d:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IxWIEHqD/+ggYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk MTNhODFiYzktMDhjNS00NzJiLWFmYzItNmJmNGJkNmIxNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA8g6rXUb93pl9e2VbQiSdKui5XyZll6XEL9 SEwosKMfz5wqnj2faAaCvzLcf60SoB/Fzb/LOF3PgC/He7tCUADZraM379oeIeAC WimGEGCTCeXpz8H2+1Nl48c6r1elhj4tcUbp3pj0ndDNZOmUYBqnU3CP225hrfWY 2j57qakPDT0s3PZoKYx+VLxWWYnBiK5mM5OZbaXNZutRCR9W8S1qtcGZSJ+z3fbg pwmDcoDZOawIw1sTGZU529wgybhSpp2PFt9kMR48ODkAhNwUkV2HQFuOC/Xnb2L/ PyNwxSEZ+qMeKONE5XGiXTyu296V1x7eKaVcucaBzL5u0BR+8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNj71Loi87cpOdov2eGR/S/lExg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE2ZDExNTQtNzZkYi0z MmQ0LWJjNTEtOWIzYzhkNjM5Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkYhr4fYFA+qbI5LID3jSo++VOiak+wz9IxgvuaHhF0giVLpl8P gZgu+jgb1fRSjnwbVK0ygaoOcqJ7LxfxDAB+Y3by8Cm++1XFuSbuH+AcP4yS0Dt4 WwDXLr0HtY7yYwUTp8RUekJ5wQ+9a6JCDdO7p8xIgSXge9kuFMEAKJsc0+02V3/B XbFvN4k/ihaXEKvPVE7ZlZFU88+dW8jUkkOn4mM0ocxM64yE1VK3dxW7w7BkdsqJ BBalujr/3tInUeiMueYcFV24HjutVGwnI0L8skopS0+zArNZVkaZiGQg+gs61NLJ gcBzyltXHrvVen96+IVnbS3sEqAMdScBPeU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:32 2026 by rpki-client