$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa File: 38020fd7-6ca8-3ce1-9697-be6273e71196.roa (raw, json) Hash identifier: WEoKjQUNtiK1eNkgiLvONuavvyEnR5RwkNfFgnOXcSQ= Subject key identifier: 2A:2C:97:B8:31:4B:68:F2:59:79:04:69:26:AA:97:E2:14:C4:A0:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E131993A8C1D4139224FF4B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 36625 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:93:a8:c1:d4:13:92:24:ff:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=adf08f66-994d-4ac9-9412-21b041ef60ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:ba:6a:49:4e:f1:de:4c:5a:5e:0a:f1:40: 0b:52:a8:2d:a5:06:9c:04:cd:4e:93:24:65:ee:85: d3:fa:91:36:84:24:e9:a3:23:07:9b:86:3b:95:eb: 0e:53:37:32:39:bc:36:4f:eb:11:af:d0:81:fe:60: 9a:17:ea:9e:4f:a9:ba:80:37:85:6b:7b:29:94:ef: a0:f7:f4:1c:2f:03:77:a1:a0:f3:4f:d0:af:7e:94: 15:e7:54:db:98:29:00:4c:33:72:2c:67:f9:ce:b5: 0e:26:78:c6:23:23:aa:e6:62:83:e1:00:2d:83:c6: 11:ce:e2:46:41:e5:e3:c1:a8:e6:42:10:73:99:21: f3:55:28:0e:fb:70:22:cf:e1:eb:cb:4d:df:76:d7: 67:c0:4e:24:86:49:02:ce:4f:de:66:93:52:9e:b2: 32:e2:9e:e2:3d:10:da:07:45:53:57:54:56:29:fa: 28:77:db:a3:2a:86:91:7d:8c:c6:f3:dc:d9:11:71: e0:09:19:10:35:84:25:c5:2c:06:b3:4c:5b:11:cf: c1:b2:18:8a:dc:25:1d:1f:2a:59:d9:66:5b:b1:ce: db:6b:3a:42:11:27:f3:45:5f:0a:28:f1:f0:df:74: 74:72:5a:d7:cc:1a:4c:c4:73:fc:14:7f:bf:41:bc: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2C:97:B8:31:4B:68:F2:59:79:04:69:26:AA:97:E2:14:C4:A0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6b:ed:97:e7:ce:25:bf:2b:fe:d1:e5:47:85:df:22:26:49: 53:2e:dc:eb:82:44:3e:66:2e:92:d1:c3:0d:01:84:bd:d0:0c: 96:ed:d1:9c:ef:6d:73:68:2b:85:88:04:eb:1e:14:f3:b4:df: 60:24:74:25:ed:00:f5:25:d5:cc:de:99:7a:f1:32:b3:3f:71: 9b:a5:b2:0d:24:4f:3b:e5:a4:3f:c3:52:ee:fb:26:7d:20:e6: d4:f8:d7:10:b2:22:c3:43:21:3e:50:58:56:06:ba:ab:19:35: 61:fa:33:ca:49:a9:91:f7:04:44:6f:18:e8:0c:44:a7:63:2b: 8b:73:6c:b7:fe:fe:59:14:ad:e4:fe:e1:1b:1f:b5:b6:9c:82: 90:41:b1:15:19:9d:d0:61:68:6e:58:0b:c3:27:ec:f6:e5:ce: 7e:c4:f1:e6:22:48:2f:43:2e:77:85:3b:81:fc:ac:09:fe:cf: e7:4f:61:a2:8b:2d:9d:c6:fa:0b:fd:51:66:06:fb:e8:de:2d: e4:d3:96:2d:d3:1e:ea:a8:a1:51:98:4f:25:6a:81:8d:c1:9e: 90:be:d8:0f:e4:c0:ba:00:ce:5f:5a:29:71:46:9a:59:c2:ff: 3b:e4:a8:96:71:e1:51:aa:21:36:28:77:fe:8c:c9:51:10:70: 73:2f:15:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZOowdQTkiT/SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk YWRmMDhmNjYtOTk0ZC00YWM5LTk0MTItMjFiMDQxZWY2MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ66aklO8d5MWl4K8UALUqgtpQacBM1OkyRl 7oXT+pE2hCTpoyMHm4Y7lesOUzcyObw2T+sRr9CB/mCaF+qeT6m6gDeFa3splO+g 9/QcLwN3oaDzT9CvfpQV51TbmCkATDNyLGf5zrUOJnjGIyOq5mKD4QAtg8YRzuJG QeXjwajmQhBzmSHzVSgO+3Aiz+Hry03fdtdnwE4khkkCzk/eZpNSnrIy4p7iPRDa B0VTV1RWKfood9ujKoaRfYzG89zZEXHgCRkQNYQlxSwGs0xbEc/BshiK3CUdHypZ 2WZbsc7bazpCESfzRV8KKPHw33R0clrXzBpMxHP8FH+/QbywBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCosl7gxS2jyWXkEaSaql+IUxKCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzgwMjBmZDctNmNhOC0z Y2UxLTk2OTctYmU2MjczZTcxMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFr7ZfnziW/K/7R5UeF3yImSVMu3OuCRD5mLpLRww0BhL3QDJbt 0ZzvbXNoK4WIBOseFPO032AkdCXtAPUl1czemXrxMrM/cZulsg0kTzvlpD/DUu77 Jn0g5tT41xCyIsNDIT5QWFYGuqsZNWH6M8pJqZH3BERvGOgMRKdjK4tzbLf+/lkU reT+4RsftbacgpBBsRUZndBhaG5YC8Mn7Pblzn7E8eYiSC9DLneFO4H8rAn+z+dP YaKLLZ3G+gv9UWYG++jeLeTTli3THuqooVGYTyVqgY3BnpC+2A/kwLoAzl9aKXFG mlnC/zvkqJZx4VGqITYod/6MyVEQcHMvFeM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:32:44 2026 by rpki-client