$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3670fcfd-da92-32c8-89b3-05ea60698692.roa File: 3670fcfd-da92-32c8-89b3-05ea60698692.roa (raw, json) Hash identifier: rhwAKSAOwr+2BIYG8VrwADsvFDYn/iM3z55FJ4p9Yc0= Subject key identifier: FC:36:58:36:8C:A6:87:A2:25:4F:EA:2A:63:05:C7:7B:0C:9C:80:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E13198EA1CF123FCE56150700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3670fcfd-da92-32c8-89b3-05ea60698692.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396600 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:8e:a1:cf:12:3f:ce:56:15:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=bf362607-9d52-41ce-b5e8-a5a92c148d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5e:9b:1b:49:a7:90:10:93:47:58:c0:74:31: 82:35:27:77:51:25:5b:af:ba:3e:53:db:0e:9b:27: 4e:9c:82:32:71:ce:7a:5a:b5:ed:79:40:15:41:18: 1f:e9:a1:96:f4:65:20:60:f3:2d:4b:1e:95:19:30: 9d:ba:dd:10:a1:a1:82:88:af:74:f5:22:2f:71:c8: 6d:d3:57:3d:d5:11:83:15:5c:53:69:6a:8b:e0:39: 24:a5:86:d9:92:70:ad:ef:ee:e6:0f:24:92:53:0d: 88:00:f1:a2:f2:68:67:94:1c:85:85:1e:0f:87:97: 57:a4:30:af:34:2a:4c:bb:a0:d7:7c:59:07:34:8b: da:3a:9a:83:25:9b:6d:2b:a2:c2:6b:5f:f7:d9:83: 56:c6:78:4b:ea:82:1f:12:e8:49:40:61:23:59:ba: 06:91:1e:7c:47:af:43:6e:ca:e2:04:fd:c5:15:9d: 9c:d6:64:d8:ab:c2:3b:e4:89:0c:61:87:a4:43:51: 47:31:d1:0b:c4:00:ed:62:b5:aa:17:36:17:b9:63: 46:7b:b3:ab:e2:f9:02:93:54:63:01:99:5b:35:94: bc:e5:eb:06:7e:5e:26:9a:78:77:f1:99:11:66:8f: 23:5d:dd:0c:e1:aa:5f:fb:83:63:a0:f3:64:a2:73: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:36:58:36:8C:A6:87:A2:25:4F:EA:2A:63:05:C7:7B:0C:9C:80:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3670fcfd-da92-32c8-89b3-05ea60698692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ed:76:2e:ae:2e:69:7b:ec:3d:74:41:e2:aa:ac:86:b6:55: 53:59:ce:9a:d9:06:55:b6:af:13:2e:00:9f:ab:f1:47:4f:64: 90:bf:d2:16:b7:00:c3:28:ef:14:81:fb:57:13:a3:a9:a3:00: a2:f9:d5:f2:8e:80:2a:93:2b:b8:06:aa:97:2c:89:cb:b1:e4: a8:9c:6a:83:df:0c:df:2f:23:31:d0:95:93:45:ec:c0:0f:48: 68:dd:fd:82:a4:0d:9d:b0:eb:eb:4d:60:f8:a0:68:14:59:f3: 74:18:0a:5b:47:05:36:8f:e9:85:5b:ad:2b:8c:43:c9:3c:01: dd:13:cc:36:a1:60:66:2a:20:82:61:4e:62:c5:ef:70:25:30: f6:b8:8c:91:03:a7:ba:ac:84:25:0a:2f:6c:dc:dc:f1:b5:d6: 44:0b:c9:c6:9c:66:e1:87:83:a6:33:94:94:75:e8:7f:08:b9: e2:e1:86:b6:c3:b9:b4:22:0e:f7:36:0d:69:63:9e:ed:31:a6: 18:4f:75:cc:33:1c:7b:74:de:e9:fb:f2:71:51:de:3c:e2:86: 7f:bd:3d:ab:e1:b5:4c:17:7a:c8:9c:bd:06:74:90:d2:bf:1a: 63:45:4c:24:69:c6:4d:a6:80:56:e7:16:1d:f9:d3:f4:cd:48: 56:df:7e:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGY6hzxI/zlYVBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk YmYzNjI2MDctOWQ1Mi00MWNlLWI1ZTgtYTVhOTJjMTQ4ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF6bG0mnkBCTR1jAdDGCNSd3USVbr7o+U9sO mydOnIIycc56WrXteUAVQRgf6aGW9GUgYPMtSx6VGTCdut0QoaGCiK909SIvccht 01c91RGDFVxTaWqL4DkkpYbZknCt7+7mDySSUw2IAPGi8mhnlByFhR4Ph5dXpDCv NCpMu6DXfFkHNIvaOpqDJZttK6LCa1/32YNWxnhL6oIfEuhJQGEjWboGkR58R69D bsriBP3FFZ2c1mTYq8I75IkMYYekQ1FHMdELxADtYrWqFzYXuWNGe7Or4vkCk1Rj AZlbNZS85esGfl4mmnh38ZkRZo8jXd0M4apf+4NjoPNkonMHrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPw2WDaMpoeiJU/qKmMFx3sMnIADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY3MGZjZmQtZGE5Mi0z MmM4LTg5YjMtMDVlYTYwNjk4NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHtdi6uLml77D10QeKqrIa2VVNZzprZBlW2rxMuAJ+r8UdPZJC/ 0ha3AMMo7xSB+1cTo6mjAKL51fKOgCqTK7gGqpcsicux5KicaoPfDN8vIzHQlZNF 7MAPSGjd/YKkDZ2w6+tNYPigaBRZ83QYCltHBTaP6YVbrSuMQ8k8Ad0TzDahYGYq IIJhTmLF73AlMPa4jJEDp7qshCUKL2zc3PG11kQLycacZuGHg6YzlJR16H8IueLh hrbDubQiDvc2DWljnu0xphhPdcwzHHt03un78nFR3jzihn+9PavhtUwXesicvQZ0 kNK/GmNFTCRpxk2mgFbnFh350/TNSFbffhs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:09 2026 by rpki-client