$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3690f4df-be3a-3094-af06-275c029e1b9c.roa File: 3690f4df-be3a-3094-af06-275c029e1b9c.roa (raw, json) Hash identifier: zEtHKyEKECB0TG0yjzXVDgsVqy1lWa4I6LAYmRWT00k= Subject key identifier: CA:68:52:7F:54:35:67:A9:09:A9:2E:58:64:80:FD:33:09:EC:C1:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D888C16B9062B053621780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3690f4df-be3a-3094-af06-275c029e1b9c.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 36631 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:c1:6b:90:62:b0:53:62:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=c04a5e12-99b2-4dad-9471-423fe60e1865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:31:82:96:88:66:b5:3a:0f:f0:e5:94:58: 05:67:70:28:42:90:49:d4:3c:af:76:08:93:d5:46: 0b:d6:22:e7:72:bb:0d:31:7f:21:5c:67:b1:cc:af: b1:2a:14:fe:a8:e0:a0:a7:09:a1:eb:96:ef:09:5c: f0:b8:0d:ae:cf:63:cf:fa:82:0c:90:2e:5c:52:f0: f1:27:b6:53:13:e6:c0:c8:4f:09:1b:d2:47:dd:2c: 2e:e5:2c:71:ea:d9:57:ac:e1:ff:03:92:8d:f0:26: 13:97:17:2e:15:9f:7c:a1:31:11:61:91:7d:42:fc: 8c:f3:d5:69:a1:f3:fa:b4:8a:52:62:8b:07:0f:05: b4:97:dc:f9:e7:d2:84:5a:a6:d5:75:69:7b:a9:92: 5e:8d:62:b9:c7:08:58:71:6e:bb:85:47:07:ff:b2: 1d:50:29:3a:7d:a2:34:56:c4:dc:f1:39:ad:05:24: 3e:bb:93:da:bd:f8:d7:5d:cd:8e:3c:7c:63:c3:c8: 8b:f5:86:e0:71:3c:f5:76:d9:62:81:50:46:5d:41: 8b:d4:39:19:8b:4a:fc:cc:aa:17:c5:98:9f:2a:69: 09:a5:a9:1e:03:63:81:d3:ea:96:fa:9b:3f:de:2f: 32:b4:8c:1d:4e:0d:c2:56:4a:d3:b7:f6:1e:c8:13: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:52:7F:54:35:67:A9:09:A9:2E:58:64:80:FD:33:09:EC:C1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3690f4df-be3a-3094-af06-275c029e1b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0d:c6:63:37:23:73:e7:fc:9e:36:f0:1c:4a:c2:5b:13:c1: ad:a0:56:e7:b5:5b:56:88:b4:76:56:fe:51:dd:cf:11:28:e5: d5:1a:18:0c:b9:01:a0:5d:45:55:53:d3:62:91:a5:92:bc:a8: 7a:b1:70:dc:97:05:cb:ff:04:fe:43:7c:a9:64:1b:c9:86:1b: 64:02:a0:c5:ad:0b:32:12:85:8d:2c:eb:8e:82:d5:c8:1e:38: d4:2f:6b:5a:a0:58:a5:02:73:62:05:a6:ee:82:bd:1e:6e:15: ee:93:68:0c:f9:0b:08:23:38:da:60:e2:c6:d7:8d:a3:fe:2b: d1:e5:90:90:fe:45:11:bc:b9:bf:e4:30:84:45:21:25:de:46: 41:7b:9b:2a:d7:48:34:0b:01:74:d0:49:ce:ab:73:ff:33:fb: 4f:8b:3b:f4:81:bd:21:62:83:9f:36:72:37:91:6a:93:c3:ae: c8:93:d7:d2:1c:f8:70:3d:1d:d2:99:81:23:5b:c5:8f:b6:58: 55:a7:26:92:7c:d2:24:39:34:e9:33:16:0e:e5:a8:4d:04:ea: 08:c2:b2:05:5c:c3:0f:ca:ab:ff:d0:b1:89:f0:6b:df:ca:35: 63:1c:08:45:af:af:ed:73:65:0f:0c:fa:8e:bd:7d:9d:79:a9: 31:1b:9e:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IjBa5BisFNiF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk YzA0YTVlMTItOTliMi00ZGFkLTk0NzEtNDIzZmU2MGUxODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5QxgpaIZrU6D/DllFgFZ3AoQpBJ1DyvdgiT 1UYL1iLncrsNMX8hXGexzK+xKhT+qOCgpwmh65bvCVzwuA2uz2PP+oIMkC5cUvDx J7ZTE+bAyE8JG9JH3Swu5Sxx6tlXrOH/A5KN8CYTlxcuFZ98oTERYZF9QvyM89Vp ofP6tIpSYosHDwW0l9z559KEWqbVdWl7qZJejWK5xwhYcW67hUcH/7IdUCk6faI0 VsTc8TmtBSQ+u5PavfjXXc2OPHxjw8iL9YbgcTz1dtligVBGXUGL1DkZi0r8zKoX xZifKmkJpakeA2OB0+qW+ps/3i8ytIwdTg3CVkrTt/YeyBPkzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpoUn9UNWepCakuWGSA/TMJ7MHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY5MGY0ZGYtYmUzYS0z MDk0LWFmMDYtMjc1YzAyOWUxYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUNxmM3I3Pn/J428BxKwlsTwa2gVue1W1aItHZW/lHdzxEo5dUa GAy5AaBdRVVT02KRpZK8qHqxcNyXBcv/BP5DfKlkG8mGG2QCoMWtCzIShY0s646C 1cgeONQva1qgWKUCc2IFpu6CvR5uFe6TaAz5CwgjONpg4sbXjaP+K9HlkJD+RRG8 ub/kMIRFISXeRkF7myrXSDQLAXTQSc6rc/8z+0+LO/SBvSFig582cjeRapPDrsiT 19Ic+HA9HdKZgSNbxY+2WFWnJpJ80iQ5NOkzFg7lqE0E6gjCsgVcww/Kq//QsYnw a9/KNWMcCEWvr+1zZQ8M+o69fZ15qTEbnso= -----END CERTIFICATE-----Generated at Sat Jun 13 14:33:46 2026 by rpki-client