$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343c666e-2960-3c25-a5c6-c69d2b45db16.roa File: 343c666e-2960-3c25-a5c6-c69d2b45db16.roa (raw, json) Hash identifier: QR6k51zdY3OJuQ2AhMz3E3wmlBhwDbfkZqCIdiYuFe4= Subject key identifier: D2:DD:F1:F0:DF:71:2D:6C:13:93:80:FF:26:99:66:F7:AE:8A:BB:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B009C639A64F9116E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343c666e-2960-3c25-a5c6-c69d2b45db16.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 397208 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:00:9c:63:9a:64:f9:11:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=3ab32169-3697-4142-9a6b-1ebe1d9a82e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:00:e2:51:b4:75:80:5d:03:2f:0b:9c:97: 34:74:15:2b:7f:61:55:e7:89:3b:0c:8d:09:70:b5: 9c:ff:f3:23:c8:5a:e2:19:31:9d:32:8f:62:8a:d4: bf:87:f9:37:a4:03:a7:4f:c8:14:08:f2:e9:74:73: 99:df:29:31:e7:a3:6f:2b:84:34:33:3a:8c:d0:79: 90:12:d5:43:fd:74:a0:5c:ac:71:fa:cd:e2:20:eb: 4d:14:f4:1a:e7:66:fe:05:a9:c9:06:aa:fa:3e:67: d4:86:1b:e9:9f:81:ab:5d:6d:cf:59:0b:84:85:89: 33:55:5a:84:b6:a6:ab:36:de:dd:b5:1d:d4:31:31: 34:fb:e0:df:3d:ce:47:19:31:4a:fe:73:fb:4f:70: b6:f3:c4:ea:02:61:69:d2:b2:89:9e:1b:8d:86:69: 16:d1:f6:9f:80:42:1e:19:36:b2:b7:71:cf:bc:e8: c6:3f:25:55:26:9f:d0:61:21:54:b3:d6:a9:17:7d: 45:29:85:ef:d6:8f:c0:01:8c:9f:ad:58:4b:fd:56: 23:fb:e1:f6:ed:33:62:ef:8a:fd:c4:19:6e:f5:45: 86:42:60:3d:67:7c:60:93:ef:bf:a6:b7:13:c3:fb: d0:ff:8d:cf:46:04:2a:b9:e4:ef:de:c1:71:d9:c4: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:F1:F0:DF:71:2D:6C:13:93:80:FF:26:99:66:F7:AE:8A:BB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343c666e-2960-3c25-a5c6-c69d2b45db16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3a:49:ae:54:20:80:08:cd:64:c1:3a:9b:47:2d:af:69:34: f0:cb:45:9d:e9:15:4b:7f:59:a6:ae:10:14:82:0b:48:68:ae: b0:fe:f9:63:71:d5:6c:63:9f:34:d5:72:2f:96:94:99:ee:30: 1d:34:2b:38:85:bb:8a:8e:9b:66:23:d1:7a:67:05:2f:19:62: af:96:db:32:4e:55:85:62:57:13:bd:d5:67:af:01:c3:84:19: 52:1a:99:94:b5:5d:b4:2f:e3:d1:45:d8:01:cf:6d:06:f7:ec: 79:fa:b9:c5:b2:2c:b6:f9:26:61:70:8f:d3:67:44:14:44:11: fb:aa:99:51:87:e3:35:0b:4f:67:da:8e:4e:2b:8a:5f:b4:04: f1:c9:09:a8:bd:b0:c8:bb:e4:d2:73:d2:9b:eb:ee:3e:03:d2: fe:2c:1a:3d:85:d6:86:4a:d2:d3:bf:13:e7:11:60:b9:ab:a3: 04:fd:7f:fa:b8:52:3f:0a:aa:40:58:49:cf:7b:8b:d1:94:a6: af:76:81:ec:ff:99:fa:e5:12:da:f9:06:91:bc:07:a6:33:83: ce:70:06:87:15:49:c9:15:a3:9f:16:68:29:44:2f:79:4a:7a: 87:2c:43:6f:5e:ad:a6:0a:65:2c:00:b5:45:49:b5:65:85:84: f4:d4:5b:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IsAnGOaZPkRboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk M2FiMzIxNjktMzY5Ny00MTQyLTlhNmItMWViZTFkOWE4MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVEA4lG0dYBdAy8LnJc0dBUrf2FV54k7DI0J cLWc//MjyFriGTGdMo9iitS/h/k3pAOnT8gUCPLpdHOZ3ykx56NvK4Q0MzqM0HmQ EtVD/XSgXKxx+s3iIOtNFPQa52b+BanJBqr6PmfUhhvpn4GrXW3PWQuEhYkzVVqE tqarNt7dtR3UMTE0++DfPc5HGTFK/nP7T3C288TqAmFp0rKJnhuNhmkW0fafgEIe GTayt3HPvOjGPyVVJp/QYSFUs9apF31FKYXv1o/AAYyfrVhL/VYj++H27TNi74r9 xBlu9UWGQmA9Z3xgk++/prcTw/vQ/43PRgQqueTv3sFx2cTpAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNLd8fDfcS1sE5OA/yaZZveuiruOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzYzY2NmUtMjk2MC0z YzI1LWE1YzYtYzY5ZDJiNDVkYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEc6Sa5UIIAIzWTBOptHLa9pNPDLRZ3pFUt/WaauEBSCC0horrD+ +WNx1WxjnzTVci+WlJnuMB00KziFu4qOm2Yj0XpnBS8ZYq+W2zJOVYViVxO91Wev AcOEGVIamZS1XbQv49FF2AHPbQb37Hn6ucWyLLb5JmFwj9NnRBREEfuqmVGH4zUL T2fajk4ril+0BPHJCai9sMi75NJz0pvr7j4D0v4sGj2F1oZK0tO/E+cRYLmrowT9 f/q4Uj8KqkBYSc97i9GUpq92gez/mfrlEtr5BpG8B6Yzg85wBocVSckVo58WaClE L3lKeocsQ29eraYKZSwAtUVJtWWFhPTUW/g= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:07 2026 by rpki-client