$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa File: 4251f11c-dc39-3d28-9d64-da12cafe6bec.roa (raw, json) Hash identifier: ThzQ1u7PXXLwHir0GQUdIdq7xI8fbz6gZB6n4jPugps= Subject key identifier: CF:E7:50:C2:25:FA:78:BA:9F:DE:BE:EA:E8:CC:F9:91:E4:6E:1A:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E043622EAA34E0B361BAFFE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 397208 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:22:ea:a3:4e:0b:36:1b:af:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=fd38ef15-f3ef-49cb-9c2a-ffd16fa14487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:32:2d:44:cd:d5:5b:15:62:85:1d:95:09: c5:d0:c6:17:ec:f3:d4:b3:1c:08:49:9a:2a:c7:c8: 6b:8b:d9:87:08:be:7d:eb:7a:44:da:47:36:ae:36: d3:e6:6a:33:9e:ba:6f:42:37:8d:8d:3d:0c:4e:98: 71:63:a3:f4:c3:e8:03:93:4d:31:14:4e:ca:8a:16: 9a:2b:b4:20:d5:81:c1:27:f5:6a:fc:62:52:9b:a6: 4e:2c:58:54:1d:ba:10:2d:47:d7:79:f1:c4:93:cc: 4b:48:5d:0b:0b:ec:a2:2c:8a:e3:40:7f:14:47:ca: 0b:bf:4a:f1:a3:92:49:2e:0d:90:6c:65:84:1c:76: 8f:04:9e:d1:ab:b2:27:81:04:a9:aa:9c:03:36:f6: 72:46:fb:ca:f1:27:0d:b5:91:a4:dd:94:78:ff:2d: de:b7:5a:4b:ac:ba:21:81:cd:96:9b:96:6b:42:2c: 82:24:8f:4c:4a:1f:1a:89:9f:8c:f4:4e:32:ee:c2: 5d:e1:b2:35:71:6c:47:4e:6e:c1:18:6d:4e:1c:9f: ec:d0:fb:16:3a:53:30:7b:f8:60:a5:63:42:3c:38: d5:89:84:d9:2c:f3:e1:ea:11:36:18:ce:ef:70:12: 9a:21:e0:10:6b:28:32:c1:7d:cb:78:12:32:b2:37: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:50:C2:25:FA:78:BA:9F:DE:BE:EA:E8:CC:F9:91:E4:6E:1A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:27:bb:30:29:5f:bd:7b:90:70:5e:a1:ba:88:b6:c7:1a:5a: 68:13:f8:9d:bc:5c:ca:be:51:42:d6:56:7a:a4:1d:f6:3d:cc: e2:33:ba:54:e1:66:9f:87:72:48:fb:a7:96:ac:cc:5e:9f:76: 96:b8:c6:55:b0:47:90:f6:6f:86:d2:79:f3:2b:a4:09:3f:dc: 3d:de:9d:1d:6c:dd:60:47:5b:95:09:56:fd:ba:d0:30:87:bf: 31:d0:e5:6f:79:d6:b7:bc:fb:8b:e9:e9:de:0b:71:86:b9:46: e2:9a:1b:90:47:d9:99:02:e2:7f:0a:dd:e9:28:c7:3f:fc:e3: c1:af:91:fd:85:4c:0c:b5:f1:33:54:b2:f3:b0:61:c9:1c:55: 2f:69:7d:24:d2:77:6c:75:d3:14:2e:4d:25:2b:78:f7:c8:11: 83:d4:d8:c6:4c:44:d0:e0:b3:f1:7c:91:fe:9a:f4:f3:da:2a: 77:0b:21:55:52:ad:44:dd:75:20:26:54:dd:98:65:56:f4:94: 64:d4:38:b4:e0:e1:72:4e:82:ff:da:27:8f:02:69:36:ce:8a: c5:2e:fb:3b:4d:d9:19:a3:9c:1b:56:ea:2a:a6:e7:73:17:75: c7:d6:7b:f8:f2:35:bc:c5:34:ec:bc:e9:ac:1e:fc:4a:25:9b: 8d:fd:2b:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENiLqo04LNhuv/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZmQzOGVmMTUtZjNlZi00OWNiLTljMmEtZmZkMTZmYTE0NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrUyLUTN1VsVYoUdlQnF0MYX7PPUsxwISZoq x8hri9mHCL5963pE2kc2rjbT5moznrpvQjeNjT0MTphxY6P0w+gDk00xFE7Kihaa K7Qg1YHBJ/Vq/GJSm6ZOLFhUHboQLUfXefHEk8xLSF0LC+yiLIrjQH8UR8oLv0rx o5JJLg2QbGWEHHaPBJ7Rq7IngQSpqpwDNvZyRvvK8ScNtZGk3ZR4/y3et1pLrLoh gc2Wm5ZrQiyCJI9MSh8aiZ+M9E4y7sJd4bI1cWxHTm7BGG1OHJ/s0PsWOlMwe/hg pWNCPDjViYTZLPPh6hE2GM7vcBKaIeAQaygywX3LeBIysjczUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/nUMIl+ni6n96+6ujM+ZHkbhoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI1MWYxMWMtZGMzOS0z ZDI4LTlkNjQtZGExMmNhZmU2YmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8nuzApX717kHBeobqItscaWmgT+J28XMq+UULWVnqkHfY9zOIz ulThZp+Hckj7p5aszF6fdpa4xlWwR5D2b4bSefMrpAk/3D3enR1s3WBHW5UJVv26 0DCHvzHQ5W951re8+4vp6d4LcYa5RuKaG5BH2ZkC4n8K3ekoxz/848Gvkf2FTAy1 8TNUsvOwYckcVS9pfSTSd2x10xQuTSUrePfIEYPU2MZMRNDgs/F8kf6a9PPaKncL IVVSrUTddSAmVN2YZVb0lGTUOLTg4XJOgv/aJ48CaTbOisUu+ztN2RmjnBtW6iqm 53MXdcfWe/jyNbzFNOy86awe/Eolm439KyA= -----END CERTIFICATE-----Generated at Sat Jun 13 14:29:00 2026 by rpki-client