$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa File: 4339716f-1035-3a93-8a86-6a2a6d14ef21.roa (raw, json) Hash identifier: Jkzn/vvAU+TXLnRx41xcik/AtRbUk3JKqPA/+7FaCmA= Subject key identifier: 33:CB:E0:C1:EC:81:7C:46:33:A4:E1:D8:87:65:ED:19:C5:59:93:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0435F3FD26DE0C5D4A766500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 396543 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f3:fd:26:de:0c:5d:4a:76:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=46f9b497-6e0a-47b5-b8c7-797e67ce2364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:57:4c:61:0a:74:a5:74:01:0c:70:52:42: 56:ce:0e:25:28:fe:d4:bb:1e:79:fb:90:4a:dc:17: eb:d0:8d:f4:6a:07:f5:72:d2:4f:de:54:1f:e7:20: 0d:bc:2d:6c:cb:41:a8:8d:9d:47:04:c7:50:97:88: 23:3c:b0:f7:00:f5:dc:d7:ba:f1:32:75:a7:41:b1: ac:6c:6d:61:19:27:6d:93:e8:68:62:3d:12:0c:7c: 97:fb:52:09:68:0d:c3:73:d4:5e:fd:ea:bf:6b:06: 63:4b:b9:86:9d:76:b4:af:dd:09:73:49:e6:c7:0c: 16:48:83:a0:29:79:57:70:c6:d6:66:64:01:21:18: 11:cc:82:36:82:b9:02:3a:78:9c:c2:6c:60:0f:1d: 11:b3:ba:85:9d:ae:f4:17:ff:96:a9:7d:42:14:50: d8:fa:c3:b0:43:89:ea:61:5a:04:93:fd:81:54:90: 89:20:59:ef:a9:31:da:00:e2:ee:98:c9:a2:94:44: 04:cb:6a:be:51:a2:b9:02:1c:69:6a:34:9e:37:cb: 3a:b1:70:85:5a:c2:e8:80:78:ee:87:23:20:7d:8a: 41:a5:15:35:59:ba:81:04:5f:c1:ed:23:c4:27:e6: 81:35:f9:b2:31:2f:30:0e:b0:2a:48:3e:e9:15:28: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:E0:C1:EC:81:7C:46:33:A4:E1:D8:87:65:ED:19:C5:59:93:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:27:c7:7f:c3:7a:3c:4c:66:cc:b4:16:95:a3:0b:7d:ac:ed: a1:02:25:80:6e:cf:e9:b6:84:68:18:0e:60:38:a9:00:ba:72: ee:bc:51:29:9e:ec:8a:40:73:7e:8b:0e:17:7c:c2:72:92:7b: bd:19:22:7c:68:a7:3d:5d:45:63:1a:d9:37:fc:e4:36:ee:15: 00:80:91:94:61:89:2e:bd:7c:b8:fb:95:e4:f3:9d:96:82:3c: ed:3f:ed:62:4e:75:94:42:c0:65:b9:49:ff:10:82:14:bd:d6: 92:cc:ba:34:a2:9e:80:17:01:15:ec:af:53:2e:4d:94:97:69: 8d:87:06:85:27:42:65:10:74:b4:68:6b:4c:e6:06:e1:0f:9c: 19:ef:84:d2:dc:c6:00:fd:5f:ba:06:d8:04:8e:70:67:51:e6: 42:e0:84:64:62:26:51:72:12:c4:23:85:00:9a:37:58:be:53: fd:18:09:3f:8f:83:36:31:b1:b4:76:7d:7c:47:8b:6d:42:58: 62:a3:bd:b4:a7:b5:f9:d3:34:8b:1b:80:b9:55:ed:2e:a4:8b: 71:57:e1:88:e7:a8:92:fa:8d:b4:b2:30:dd:41:84:d2:ec:5a: f6:07:fe:a5:88:d2:aa:6a:64:f7:a2:d2:d6:91:9d:d4:17:8e: a0:48:54:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENfP9Jt4MXUp2ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NDZmOWI0OTctNmUwYS00N2I1LWI4YzctNzk3ZTY3Y2UyMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMxXTGEKdKV0AQxwUkJWzg4lKP7Uux55+5BK 3Bfr0I30agf1ctJP3lQf5yANvC1sy0GojZ1HBMdQl4gjPLD3APXc17rxMnWnQbGs bG1hGSdtk+hoYj0SDHyX+1IJaA3Dc9Re/eq/awZjS7mGnXa0r90Jc0nmxwwWSIOg KXlXcMbWZmQBIRgRzII2grkCOnicwmxgDx0Rs7qFna70F/+WqX1CFFDY+sOwQ4nq YVoEk/2BVJCJIFnvqTHaAOLumMmilEQEy2q+UaK5AhxpajSeN8s6sXCFWsLogHju hyMgfYpBpRU1WbqBBF/B7SPEJ+aBNfmyMS8wDrAqSD7pFSh2UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPL4MHsgXxGM6Th2Idl7RnFWZNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzOTcxNmYtMTAzNS0z YTkzLThhODYtNmEyYTZkMTRlZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYnx3/DejxMZsy0FpWjC32s7aECJYBuz+m2hGgYDmA4qQC6cu68 USme7IpAc36LDhd8wnKSe70ZInxopz1dRWMa2Tf85DbuFQCAkZRhiS69fLj7leTz nZaCPO0/7WJOdZRCwGW5Sf8QghS91pLMujSinoAXARXsr1MuTZSXaY2HBoUnQmUQ dLRoa0zmBuEPnBnvhNLcxgD9X7oG2ASOcGdR5kLghGRiJlFyEsQjhQCaN1i+U/0Y CT+PgzYxsbR2fXxHi21CWGKjvbSntfnTNIsbgLlV7S6ki3FX4YjnqJL6jbSyMN1B hNLsWvYH/qWI0qpqZPei0taRndQXjqBIVM0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:09:11 2026 by rpki-client