$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa File: 5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa (raw, json) Hash identifier: 2MDpUtDZ3mBLWSyMA8GMWPa08uK2u4OEtbf01iPygTU= Subject key identifier: 49:90:EE:8E:D4:8C:34:17:EE:12:20:10:B9:32:F7:6B:BE:20:A8:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E131992C6B2504D3F75C23E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 20431 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:92:c6:b2:50:4d:3f:75:c2:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=82d89aae-0104-4ee6-a09f-4536ba4d964b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:e0:d7:32:ec:85:27:84:d7:44:5f:29:d8: 72:5f:39:df:5f:02:9c:90:88:69:67:2d:68:69:34: 1c:38:55:7e:6d:7b:7a:00:f8:22:70:c7:ee:c1:ff: fe:fd:c7:96:04:87:ec:2d:eb:8d:2a:74:fe:0f:fa: b9:71:f4:c9:06:50:86:5b:59:b3:bc:81:ae:62:c7: 82:cc:9b:e3:a0:5f:aa:7c:c6:67:4f:b7:e9:2e:60: 12:b4:3f:9a:0c:2d:c0:85:ed:49:c4:da:28:53:1f: bd:dc:75:61:f5:3c:a2:75:fb:5f:79:25:81:b7:21: 36:bd:6f:29:56:a4:94:42:21:dd:ec:0e:ae:c5:79: 18:45:dc:7e:38:99:bd:9b:15:db:a6:c7:20:20:8b: 15:f4:55:30:24:32:b7:27:93:cf:1a:d5:e9:d1:69: 70:2e:5b:4f:f9:e1:5c:88:9d:3c:d6:62:4e:d0:7c: 6f:02:79:e9:13:ec:9a:5a:94:2c:3e:b2:b7:86:26: ac:44:10:19:56:f3:0e:91:3e:95:77:b8:ce:df:47: 0c:7a:a2:33:f2:cc:14:7b:eb:39:16:31:a3:12:e0: 46:d5:dc:44:4d:a0:10:43:7a:db:4a:f7:e4:34:7e: c9:5f:86:1a:1e:42:85:99:3d:68:33:5a:1a:5e:30: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:EE:8E:D4:8C:34:17:EE:12:20:10:B9:32:F7:6B:BE:20:A8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:96:9d:7b:1c:2b:78:5d:8f:53:4c:02:d7:3e:6e:2d:3c:56: 41:32:a8:b5:09:54:cd:0a:9e:10:e7:8c:05:df:30:42:f7:ee: a8:cb:e2:ef:b5:f7:00:9c:50:29:5d:9a:4e:f0:77:ee:27:b6: 2d:f1:ee:68:3a:02:4e:d6:b3:92:46:ea:0b:ce:8d:29:d6:e2: 9b:bc:b8:94:99:8f:a6:16:9a:71:6c:11:ef:1e:18:ef:09:a3: e7:2d:b5:0c:1b:c6:de:59:26:10:d8:1f:71:93:2f:84:cb:a9: 81:ce:6a:de:b7:ee:55:bf:56:f3:6f:68:a3:73:5d:6a:6f:50: 7f:7a:b6:bc:0f:66:ac:90:15:b9:85:15:1b:09:74:a2:f4:0e: 9f:53:d4:a4:77:53:d5:98:0b:7f:86:94:55:c7:f9:e9:b7:40: 2b:c3:64:00:67:6a:1d:46:2a:2a:98:b0:3e:4d:66:c1:b6:52: bf:f7:8f:08:0c:30:38:81:3b:ec:77:65:e6:69:b5:b4:1e:dd: 75:28:fc:46:66:c5:17:1e:30:23:64:66:bb:5c:5b:9f:98:f9: a8:e4:e0:56:63:a4:8f:91:d3:09:0c:89:ee:7d:f2:94:15:f4: 87:0d:28:99:08:76:c4:af:4a:79:0f:d8:40:0b:d4:49:47:99: 4c:45:e4:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZLGslBNP3XCPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk ODJkODlhYWUtMDEwNC00ZWU2LWEwOWYtNDUzNmJhNGQ5NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Tg1zLshSeE10RfKdhyXznfXwKckIhpZy1o aTQcOFV+bXt6APgicMfuwf/+/ceWBIfsLeuNKnT+D/q5cfTJBlCGW1mzvIGuYseC zJvjoF+qfMZnT7fpLmAStD+aDC3Ahe1JxNooUx+93HVh9TyidftfeSWBtyE2vW8p VqSUQiHd7A6uxXkYRdx+OJm9mxXbpscgIIsV9FUwJDK3J5PPGtXp0WlwLltP+eFc iJ081mJO0HxvAnnpE+yaWpQsPrK3hiasRBAZVvMOkT6Vd7jO30cMeqIz8swUe+s5 FjGjEuBG1dxETaAQQ3rbSvfkNH7JX4YaHkKFmT1oM1oaXjBdZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmQ7o7UjDQX7hIgELky92u+IKhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA2MGIxYzUtMWU1Zi0z YmQzLWJiNzYtM2NlMDJjY2ZkNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmWnXscK3hdj1NMAtc+bi08VkEyqLUJVM0KnhDnjAXfMEL37qjL 4u+19wCcUCldmk7wd+4nti3x7mg6Ak7Ws5JG6gvOjSnW4pu8uJSZj6YWmnFsEe8e GO8Jo+cttQwbxt5ZJhDYH3GTL4TLqYHOat637lW/VvNvaKNzXWpvUH96trwPZqyQ FbmFFRsJdKL0Dp9T1KR3U9WYC3+GlFXH+em3QCvDZABnah1GKiqYsD5NZsG2Ur/3 jwgMMDiBO+x3ZeZptbQe3XUo/EZmxRceMCNkZrtcW5+Y+ajk4FZjpI+R0wkMie59 8pQV9IcNKJkIdsSvSnkP2EAL1ElHmUxF5CY= -----END CERTIFICATE-----Generated at Sat Jun 13 13:28:16 2026 by rpki-client