$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa File: 476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa (raw, json) Hash identifier: k7H6FueWycu4VIsw4OjsqZjBPXjuFjEUlZk7LPFFetE= Subject key identifier: 22:C7:DB:39:E0:D8:DD:5E:21:76:FC:E5:2C:A1:84:20:A2:BA:8C:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B752C601DE388102500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 36625 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:75:2c:60:1d:e3:88:10:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=34cd724c-6ab0-4e9c-9cac-5b0fcb81f7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:44:cf:8c:07:41:fd:3d:f2:e4:ae:b6:c9: ef:8d:8b:14:ba:d6:ec:0e:8b:d8:80:e2:29:a7:ac: c5:a7:41:35:48:78:f0:fd:be:07:48:4c:a9:f9:a1: dc:4a:2b:64:6c:ae:8c:02:0d:8f:46:d4:32:67:af: e6:0a:0f:63:c1:5b:d6:9c:a6:da:d4:11:f5:07:80: 86:3e:1a:5a:20:b8:1f:11:fb:2a:da:84:40:d1:ba: 8c:8e:0d:b9:f5:fc:47:9e:e4:dc:e2:24:1c:7c:18: 4c:db:4e:e7:5a:cc:bd:69:73:96:78:2b:4e:d6:33: 26:ef:60:04:7a:fa:b6:d0:32:0c:80:a4:71:5e:0d: 5f:99:33:25:bd:0f:93:6e:d6:89:da:52:79:cd:f2: 29:64:e6:78:e7:88:9a:db:22:fc:2a:0e:aa:14:97: ba:2e:44:4d:45:03:68:ef:fc:a5:48:a4:f0:2d:50: 14:48:70:4e:94:3c:24:39:b6:8d:39:3e:c8:07:f6: 4d:b6:3b:af:de:43:82:8d:8d:ce:31:a2:9b:9a:46: b4:08:f2:a1:93:29:93:b2:2b:cc:fc:13:d3:90:5e: bb:4d:bb:7e:c6:aa:60:bf:b0:33:9f:33:71:ef:53: 88:01:d6:51:3d:f3:41:da:fa:35:68:41:99:22:d6: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:DB:39:E0:D8:DD:5E:21:76:FC:E5:2C:A1:84:20:A2:BA:8C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:52:75:13:fa:42:95:34:4f:bf:50:c3:52:d1:11:21:3a:f5: de:ec:cb:3e:f8:00:23:24:7b:59:4d:f7:34:ae:81:60:81:95: 57:c3:e0:ce:ac:be:5b:c5:a0:a3:7c:57:0d:ca:64:94:bf:64: 53:5f:8a:b7:02:16:ca:fb:1d:70:97:f9:be:23:e7:1d:c6:66: b7:a7:45:11:e5:bb:71:9a:61:fa:a5:26:87:06:66:27:02:53: 45:fe:2f:88:68:36:f4:6c:c9:f8:12:1e:2b:18:d4:a1:b3:42: 52:b3:26:94:a6:8c:f7:d4:15:b5:c7:e8:1e:3f:4e:b0:b6:7e: 36:ee:e6:2c:77:e2:2f:9f:5a:ba:76:ae:79:f2:af:4f:69:31: c3:da:65:ed:1f:98:b0:0b:0a:a5:b2:39:7d:88:50:f0:7a:9b: f3:68:fa:d8:41:43:a5:fe:61:2a:fb:ca:f9:c5:ee:b9:92:5d: 50:cd:2b:49:b2:5e:2c:09:4d:14:bd:bd:dd:eb:78:12:b0:0c: a2:83:cd:43:cc:35:e9:8e:ef:a7:1e:e4:31:9f:77:7e:4e:2b: 6b:40:0c:2a:25:06:dd:96:a9:77:97:18:12:bc:41:fd:0a:8a: 85:80:32:e4:de:28:bf:d4:d1:a1:ed:ec:55:87:34:3a:68:28: 94:02:80:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2It1LGAd44gQJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk MzRjZDcyNGMtNmFiMC00ZTljLTljYWMtNWIwZmNiODFmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+ZEz4wHQf098uSutsnvjYsUutbsDovYgOIp p6zFp0E1SHjw/b4HSEyp+aHcSitkbK6MAg2PRtQyZ6/mCg9jwVvWnKba1BH1B4CG PhpaILgfEfsq2oRA0bqMjg259fxHnuTc4iQcfBhM207nWsy9aXOWeCtO1jMm72AE evq20DIMgKRxXg1fmTMlvQ+TbtaJ2lJ5zfIpZOZ454ia2yL8Kg6qFJe6LkRNRQNo 7/ylSKTwLVAUSHBOlDwkObaNOT7IB/ZNtjuv3kOCjY3OMaKbmka0CPKhkymTsivM /BPTkF67Tbt+xqpgv7AznzNx71OIAdZRPfNB2vo1aEGZIta3kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLH2zng2N1eIXb85SyhhCCiuoz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc2ZGU0MGQtMWQ4Yy0z NmQxLTg0ZWYtZmVmZWY0ZWNhMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9SdRP6QpU0T79Qw1LRESE69d7syz74ACMke1lN9zSugWCBlVfD 4M6svlvFoKN8Vw3KZJS/ZFNfircCFsr7HXCX+b4j5x3GZrenRRHlu3GaYfqlJocG ZicCU0X+L4hoNvRsyfgSHisY1KGzQlKzJpSmjPfUFbXH6B4/TrC2fjbu5ix34i+f Wrp2rnnyr09pMcPaZe0fmLALCqWyOX2IUPB6m/No+thBQ6X+YSr7yvnF7rmSXVDN K0myXiwJTRS9vd3reBKwDKKDzUPMNemO76ce5DGfd35OK2tADColBt2WqXeXGBK8 Qf0KioWAMuTeKL/U0aHt7FWHNDpoKJQCgPc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:13 2026 by rpki-client