$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa File: 34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa (raw, json) Hash identifier: OHAYiHRPBp/otXiETNjt2D6O58oY84xST2t37lfjf6s= Subject key identifier: 60:AB:7E:70:3E:86:20:BF:7F:FF:5B:72:25:32:2F:15:17:97:57:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE9B0BE5CF2260108FEFEBE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 27544 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:be:5c:f2:26:01:08:fe:fe:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=ff49ea4f-e6d7-43ae-904f-9bbec59d1ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:4e:e0:90:58:66:4c:33:1b:05:28:d1:9b: af:e1:32:14:27:be:78:9c:4b:4f:45:f2:05:4d:b1: 60:9f:6c:f5:76:00:24:9e:a4:f5:63:1f:50:a7:06: b6:31:f2:15:c8:c8:af:f2:83:f3:75:37:ff:a2:56: 5e:43:1c:92:de:cb:e6:85:4a:3f:7c:76:de:81:d4: b3:6c:16:3f:e8:4f:e7:a1:66:63:20:d0:31:54:b6: 22:b3:a7:d2:f4:56:aa:cf:5b:5e:4e:c7:c4:7e:93: a1:28:c2:96:c4:c4:b1:00:9d:ba:ac:fe:69:94:f7: e9:2f:b2:bb:5c:47:52:85:3b:49:79:49:2f:0e:56: 5a:cf:25:17:2d:b6:39:1d:9f:75:f4:d3:c9:72:d6: 52:8b:0f:98:d4:72:bd:dc:e9:ad:45:d5:c7:0f:11: 5b:19:3d:1c:2e:fa:69:5e:9f:f3:74:3e:e3:fe:81: 13:c2:a4:5a:92:95:fa:bc:c5:ae:27:44:30:ca:45: de:dc:10:cc:a1:1a:0e:97:2c:75:da:65:ef:49:2e: 5b:1a:fd:87:54:f6:ba:b2:a7:99:1e:a3:95:2d:e5: 70:c9:fd:26:00:3a:01:81:ec:65:75:3a:a6:35:aa: 56:6d:10:b9:01:c5:d8:59:e4:c1:b9:d9:ca:5f:6c: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AB:7E:70:3E:86:20:BF:7F:FF:5B:72:25:32:2F:15:17:97:57:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:de:5d:70:e7:42:b2:40:93:e8:ff:04:29:f1:b2:40:60:d4: 2c:73:2f:b9:75:93:54:e1:e3:8e:01:92:39:bc:a6:b2:66:cc: 53:05:49:bf:97:a2:bb:98:24:59:a2:8b:2a:85:65:d7:53:8a: e3:ed:6a:b0:b0:b4:46:e8:03:2d:98:99:41:98:d4:dc:d1:26: 80:a2:cd:2b:da:fe:12:b3:3b:d5:aa:0d:b9:34:6a:c7:f0:32: 2e:8b:ea:96:a9:d2:e6:39:de:be:95:b2:94:89:f8:8e:b5:05: cf:c2:75:9e:a0:3c:95:66:4d:d7:df:1f:15:49:db:e3:39:0e: 8e:79:7d:d9:b6:e5:c1:0b:c1:62:da:16:f1:59:11:38:ad:de: 12:ac:98:f7:bd:20:94:05:22:9e:27:0d:fd:f2:ac:93:d8:85: b5:4a:c8:57:ab:70:90:4c:92:d8:08:6e:0f:57:72:02:e5:bb: d4:83:44:ef:1f:b9:12:fc:8d:ce:94:4a:6a:46:90:88:7c:7e: 80:f8:3b:0d:48:78:54:6f:45:21:3a:9a:02:16:96:5c:71:88: c5:f5:fc:3c:d6:3c:cd:82:d9:cb:1f:da:63:b0:bb:73:fc:d3: 39:5d:b0:b1:82:da:63:7f:16:a5:19:8b:b4:54:b2:34:9d:22: 87:b2:d9:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psL5c8iYBCP7+voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZmY0OWVhNGYtZTZkNy00M2FlLTkwNGYtOWJiZWM1OWQxZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaRO4JBYZkwzGwUo0Zuv4TIUJ754nEtPRfIF TbFgn2z1dgAknqT1Yx9Qpwa2MfIVyMiv8oPzdTf/olZeQxyS3svmhUo/fHbegdSz bBY/6E/noWZjINAxVLYis6fS9Faqz1teTsfEfpOhKMKWxMSxAJ26rP5plPfpL7K7 XEdShTtJeUkvDlZazyUXLbY5HZ919NPJctZSiw+Y1HK93OmtRdXHDxFbGT0cLvpp Xp/zdD7j/oETwqRakpX6vMWuJ0QwykXe3BDMoRoOlyx12mXvSS5bGv2HVPa6sqeZ HqOVLeVwyf0mADoBgexldTqmNapWbRC5AcXYWeTBudnKX2x1ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCrfnA+hiC/f/9bciUyLxUXl1ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzRmMWYxYWMtNjBjMi0z ZWM5LTkzN2ItYTQ4MGRhZjM1OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfeXXDnQrJAk+j/BCnxskBg1CxzL7l1k1Th444Bkjm8prJmzFMF Sb+XoruYJFmiiyqFZddTiuPtarCwtEboAy2YmUGY1NzRJoCizSva/hKzO9WqDbk0 asfwMi6L6pap0uY53r6VspSJ+I61Bc/CdZ6gPJVmTdffHxVJ2+M5Do55fdm25cEL wWLaFvFZETit3hKsmPe9IJQFIp4nDf3yrJPYhbVKyFercJBMktgIbg9XcgLlu9SD RO8fuRL8jc6USmpGkIh8foD4Ow1IeFRvRSE6mgIWllxxiMX1/DzWPM2C2csf2mOw u3P80zldsLGC2mN/FqUZi7RUsjSdIoey2aY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:30:31 2026 by rpki-client