$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa File: 427906c0-6c01-3cbf-bd89-80706f3a6427.roa (raw, json) Hash identifier: 1Ddehh6ay51OdPtt9v08XeZOB9iDbSf2FxXyB3PMZCs= Subject key identifier: 2E:68:39:31:AD:35:A9:93:2F:ED:32:8C:5D:D3:8D:3E:A9:9B:D2:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1319932018DED9CE87ED6EE8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396545 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:93:20:18:de:d9:ce:87:ed:6e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=be517fe1-1cf6-4a63-8d47-a7a5f3a6ac47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:29:0e:16:b9:67:4d:fe:81:df:76:52:c6: 18:bd:64:c4:ee:50:17:31:4e:d8:57:44:47:ab:32: 99:84:7a:2c:76:b0:b8:90:ee:e7:5e:bc:0e:b5:08: 38:9c:de:61:55:5b:6e:00:1f:c9:49:cc:e7:ff:5d: 62:d3:99:f0:e5:2e:34:a3:17:d6:83:6c:8f:ce:fc: 50:03:e9:54:0d:14:23:5f:94:97:62:37:2b:20:05: 23:e4:84:02:39:09:d2:b6:5f:ae:6e:56:3d:39:f8: 51:db:3a:a0:b7:e6:7b:f2:78:59:bf:09:6f:de:3c: 4f:cf:02:47:c3:aa:49:a4:9c:4b:96:b9:39:d7:fd: dc:60:6a:e8:de:1e:7e:0e:c9:e1:ab:85:41:50:dd: fd:9e:98:1f:22:7d:7f:cc:e1:3f:01:23:7c:49:96: db:85:c7:2b:3a:a1:a7:87:2d:0a:15:e1:42:91:76: 84:aa:5e:fe:1f:d4:ed:e7:1d:43:0f:0c:46:94:dd: 6b:b8:c5:7a:df:86:60:d3:1c:70:0f:2d:a7:e9:ff: e0:a8:0e:46:74:ab:e4:9d:fb:4e:40:92:12:71:6e: a4:65:b5:e3:f0:dc:01:d4:ce:b3:59:bb:30:1e:25: aa:6c:73:9e:31:d6:37:11:d3:40:c8:98:1f:7b:13: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:39:31:AD:35:A9:93:2F:ED:32:8C:5D:D3:8D:3E:A9:9B:D2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:48:c3:86:21:65:78:49:a1:ab:42:d3:17:c1:49:e3:36:3e: 47:02:3e:3d:b6:d3:e1:d1:e9:5b:ad:6f:81:46:6d:fc:b9:f2: d1:a9:c4:3a:fc:2d:58:67:e1:47:fb:ad:f2:0f:4f:53:4d:50: 05:15:4e:d1:64:8a:f3:8c:ec:b7:45:31:12:b6:b8:7c:35:ef: e5:9c:c3:aa:8c:e9:30:99:86:d4:6b:f8:ac:de:89:34:86:5e: e1:d7:28:e5:d4:96:26:f1:4a:47:4d:58:5c:63:56:94:af:30: b5:9d:67:6c:e7:18:b9:5b:88:2a:59:ad:c4:2a:0a:39:65:d5: 1f:0a:72:24:aa:c6:83:a8:f8:13:90:1a:58:12:cc:ce:04:ef: 34:43:5a:6d:69:29:6e:43:54:e6:7c:77:d9:4b:f9:36:1e:b8: b8:1b:c5:de:14:e1:8a:d7:d5:52:4f:04:c8:85:b2:10:e2:96: 36:d8:d4:71:9c:cf:01:82:bf:50:8d:9f:86:89:be:2e:0e:4b: 5e:42:98:a0:59:87:a5:ca:08:0f:d2:af:6a:7d:9d:5e:e0:0d: 36:6f:73:39:00:0e:63:25:2f:bb:83:25:ea:eb:ed:d2:5c:b2: c2:76:dd:17:17:b9:7b:8d:94:8b:05:ea:cb:c0:4b:5a:7e:6d: 66:f3:ed:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZMgGN7ZzoftbugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk YmU1MTdmZTEtMWNmNi00YTYzLThkNDctYTdhNWYzYTZhYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMspDha5Z03+gd92UsYYvWTE7lAXMU7YV0RH qzKZhHosdrC4kO7nXrwOtQg4nN5hVVtuAB/JSczn/11i05nw5S40oxfWg2yPzvxQ A+lUDRQjX5SXYjcrIAUj5IQCOQnStl+ublY9OfhR2zqgt+Z78nhZvwlv3jxPzwJH w6pJpJxLlrk51/3cYGro3h5+Dsnhq4VBUN39npgfIn1/zOE/ASN8SZbbhccrOqGn hy0KFeFCkXaEql7+H9Tt5x1DDwxGlN1ruMV634Zg0xxwDy2n6f/gqA5GdKvknftO QJIScW6kZbXj8NwB1M6zWbswHiWqbHOeMdY3EdNAyJgfexOyCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC5oOTGtNamTL+0yjF3TjT6pm9JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI3OTA2YzAtNmMwMS0z Y2JmLWJkODktODA3MDZmM2E2NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhIw4YhZXhJoatC0xfBSeM2PkcCPj220+HR6Vutb4FGbfy58tGp xDr8LVhn4Uf7rfIPT1NNUAUVTtFkivOM7LdFMRK2uHw17+Wcw6qM6TCZhtRr+Kze iTSGXuHXKOXUlibxSkdNWFxjVpSvMLWdZ2znGLlbiCpZrcQqCjll1R8KciSqxoOo +BOQGlgSzM4E7zRDWm1pKW5DVOZ8d9lL+TYeuLgbxd4U4YrX1VJPBMiFshDiljbY 1HGczwGCv1CNn4aJvi4OS15CmKBZh6XKCA/Sr2p9nV7gDTZvczkADmMlL7uDJerr 7dJcssJ23RcXuXuNlIsF6svAS1p+bWbz7XI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:36:45 2026 by rpki-client