$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa File: 3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa (raw, json) Hash identifier: gy1KKhLOpdgwKMPLfLhVPBJjYD8vHciWht1mb5jfTkc= Subject key identifier: AC:81:0A:58:71:82:D6:87:92:4C:63:65:44:F7:AB:72:90:99:F9:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D888F4671EDFDE1D120000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 36618 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:f4:67:1e:df:de:1d:12:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=fe53a780-a2cf-4e95-852f-67295499a2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:e4:95:2d:fc:a9:23:d8:8e:9e:4b:d6:f0: 67:a6:c4:9b:a1:c3:b3:8b:15:ce:a6:be:c1:67:d2: 11:09:91:30:3f:c0:0a:f4:e4:48:da:2b:fb:07:d1: 15:f5:1c:c7:0a:7d:ae:a2:08:fb:c4:19:47:e1:68: 33:8b:07:7a:6d:68:7b:7e:23:6e:5c:e5:37:5e:47: b5:bc:97:eb:d2:df:5d:27:7f:e2:37:6a:b5:73:08: c0:02:e7:b3:5a:47:36:ec:68:4e:e9:dd:1d:50:58: 47:83:dc:cc:52:ec:a0:a8:3e:89:a1:69:4d:6d:03: da:7e:82:50:59:73:65:d7:79:21:d5:5c:92:28:a6: 7c:30:91:78:d9:26:da:7c:25:d5:c4:f7:6c:ce:71: 99:a9:0b:f4:3c:46:94:3d:95:9c:ea:47:89:93:be: 4e:69:e3:eb:47:e0:40:3c:f2:ef:6b:08:8b:9d:5d: c0:75:eb:db:58:67:3d:bf:ec:16:cc:d9:c5:86:89: 21:16:cf:f7:e4:88:14:f0:ad:d1:e1:2a:3d:9b:13: 77:31:d6:94:d4:07:9a:d1:a4:7f:24:57:8d:53:76: ac:38:f2:2d:33:c1:92:c9:48:32:4c:6b:b7:57:9d: 76:7a:42:0e:93:47:6c:9b:a4:aa:45:7e:5e:82:da: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:81:0A:58:71:82:D6:87:92:4C:63:65:44:F7:AB:72:90:99:F9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2e:a6:0d:c7:7a:b1:01:ff:34:a3:fa:e8:84:0f:e8:63:c6: e3:7a:c5:de:b9:99:d6:f3:27:69:8e:93:09:df:ba:18:28:55: 65:44:07:04:45:5c:5b:a6:20:a9:f9:b9:65:e6:8e:f5:50:e1: b8:7f:5a:9b:ad:60:59:16:71:b3:72:58:ce:ff:e0:ec:dd:48: d2:f6:f0:dc:a9:de:57:94:24:13:3f:53:14:ed:e1:dc:d9:80: 6c:93:b7:2f:95:8b:ba:62:85:b3:ff:b3:81:fa:7f:49:1e:44: d2:d0:be:2f:b8:73:86:02:c0:c3:53:69:78:d0:6b:1d:5c:b7: d6:45:f6:22:1a:cb:29:12:f7:07:77:fe:7e:0f:85:22:07:bd: 62:3e:b3:be:92:25:a6:f2:22:2f:71:a2:92:97:9c:18:29:2b: 77:48:57:8e:5b:05:28:52:c8:b4:d4:2b:99:16:88:62:33:c5: 80:0c:0d:a4:b7:9f:d3:ad:2f:51:97:4e:6b:3f:e6:01:d0:09: 4b:a2:37:a2:0f:73:1f:ca:e8:40:7e:53:5b:bc:35:93:02:51: f2:05:75:d9:a6:86:8e:b8:c7:f0:bd:97:8f:53:56:f3:df:82: d8:46:f6:3b:b4:93:0e:c4:49:07:69:1e:14:5d:b3:ec:58:8d: e0:23:f6:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2Ij0Zx7f3h0SAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk ZmU1M2E3ODAtYTJjZi00ZTk1LTg1MmYtNjcyOTU0OTlhMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWPklS38qSPYjp5L1vBnpsSbocOzixXOpr7B Z9IRCZEwP8AK9ORI2iv7B9EV9RzHCn2uogj7xBlH4Wgziwd6bWh7fiNuXOU3Xke1 vJfr0t9dJ3/iN2q1cwjAAuezWkc27GhO6d0dUFhHg9zMUuygqD6JoWlNbQPafoJQ WXNl13kh1VySKKZ8MJF42SbafCXVxPdsznGZqQv0PEaUPZWc6keJk75OaePrR+BA PPLvawiLnV3AdevbWGc9v+wWzNnFhokhFs/35IgU8K3R4So9mxN3MdaU1Aea0aR/ JFeNU3asOPItM8GSyUgyTGu3V512ekIOk0dsm6SqRX5egtqxNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKyBClhxgtaHkkxjZUT3q3KQmfkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2QyZTJiMmItYWQ4NC0z ZDVmLWIwNzctYWY1MmY4ZjliNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgupg3HerEB/zSj+uiED+hjxuN6xd65mdbzJ2mOkwnfuhgoVWVE BwRFXFumIKn5uWXmjvVQ4bh/WputYFkWcbNyWM7/4OzdSNL28Nyp3leUJBM/UxTt 4dzZgGyTty+Vi7pihbP/s4H6f0keRNLQvi+4c4YCwMNTaXjQax1ct9ZF9iIayykS 9wd3/n4PhSIHvWI+s76SJabyIi9xopKXnBgpK3dIV45bBShSyLTUK5kWiGIzxYAM DaS3n9OtL1GXTms/5gHQCUuiN6IPcx/K6EB+U1u8NZMCUfIFddmmho64x/C9l49T VvPfgthG9ju0kw7ESQdpHhRds+xYjeAj9jI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:27 2026 by rpki-client