$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5570dc63-7175-3557-95be-e23bce0db733.roa File: 5570dc63-7175-3557-95be-e23bce0db733.roa (raw, json) Hash identifier: 9uKUKKyhTwG26PJKZyTJk/k8lo1MIDdUPl5pCIa42nw= Subject key identifier: C4:04:20:58:FC:79:5D:E4:31:5B:57:66:B0:4C:EF:CD:6B:BD:B6:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D888018853EAC45799B480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5570dc63-7175-3557-95be-e23bce0db733.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 21313 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:01:88:53:ea:c4:57:99:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=ba2fdb11-d632-43a3-b2c0-6d1d3a408c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:be:eb:9e:fa:47:02:e7:fb:45:ba:58:24: aa:6b:e6:88:03:6a:56:fe:a9:41:82:d9:f0:e3:58: eb:14:d8:3a:07:dd:2a:70:72:db:72:66:8f:82:54: 0a:c1:33:bf:55:0d:2f:c2:d5:c9:2e:31:84:95:cf: 65:8d:7a:9c:55:a1:9a:25:a7:e3:50:e9:2c:51:9d: b6:b1:9a:58:86:e9:a9:d7:aa:2c:58:7d:59:f3:1e: 77:57:6e:aa:64:90:cb:67:17:ff:8e:13:b8:c3:43: 2a:0b:db:ac:ea:93:21:67:c3:c7:04:0d:1c:8e:bf: de:83:8d:c7:32:b2:4c:22:15:32:68:6d:b1:6d:3d: 4d:7c:7c:33:17:11:2d:21:7b:3f:53:c4:d0:6e:41: 21:0a:99:f0:8b:84:27:92:3b:1f:d3:6e:8f:ae:e8: d5:5e:a2:fe:f4:73:de:7f:02:d1:4a:20:9c:68:1c: 88:48:13:de:dc:07:79:6e:ab:86:d2:5c:81:67:e3: 2a:29:17:21:04:dd:17:69:c4:b2:8a:bb:60:22:2f: 3d:a6:21:6b:98:a7:e2:7d:f9:93:35:a2:18:4e:6c: 6b:9d:2c:46:c1:c1:0a:29:d2:8f:72:ba:6a:96:2d: 42:58:c5:e6:52:20:9f:31:3c:78:4e:89:5d:f7:be: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:04:20:58:FC:79:5D:E4:31:5B:57:66:B0:4C:EF:CD:6B:BD:B6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5570dc63-7175-3557-95be-e23bce0db733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:09:ee:b4:e3:f1:e9:78:39:c7:f3:98:8a:a9:63:8a:a7:39: 7a:f5:02:96:e2:a5:8a:6d:02:ce:7b:0a:84:34:54:fc:c7:fa: d8:36:70:17:7c:41:d1:0b:9e:c7:c3:c2:29:44:94:48:8e:c4: 41:c6:c7:1c:28:d2:18:f7:4c:44:ac:0d:5a:77:1b:f3:bc:e5: 3a:57:74:c7:41:24:13:0f:47:91:79:48:0d:30:6b:a5:16:99: f4:09:7f:0e:2a:88:c2:1c:8b:d8:8a:27:99:fc:a0:d1:b9:23: 46:f2:7a:86:24:cb:60:d0:7c:c9:3e:cb:ee:eb:2a:ad:be:d1: 74:d8:0c:a4:c8:9d:35:da:cd:6f:33:7d:b5:19:21:cf:2b:20: cd:92:f5:2b:31:60:4a:1e:b5:0e:d3:e3:34:05:01:56:89:eb: 5c:42:31:e2:3b:e3:bd:53:f3:50:15:cb:a6:41:7c:29:8c:59: 23:7f:d2:ed:4b:79:32:ff:ea:b4:c4:1d:e9:a9:b0:23:fd:87: 0a:1b:06:37:8c:a3:59:32:0d:62:59:99:8a:9d:19:17:5f:54: 03:a1:e9:02:3d:cd:df:97:58:36:77:33:96:ff:45:bd:7c:43: 9f:6a:71:89:f5:19:e2:79:30:04:5a:96:11:fc:02:7b:3e:ba: fa:19:7b:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IgBiFPqxFeZtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk YmEyZmRiMTEtZDYzMi00M2EzLWIyYzAtNmQxZDNhNDA4YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYC+6576RwLn+0W6WCSqa+aIA2pW/qlBgtnw 41jrFNg6B90qcHLbcmaPglQKwTO/VQ0vwtXJLjGElc9ljXqcVaGaJafjUOksUZ22 sZpYhump16osWH1Z8x53V26qZJDLZxf/jhO4w0MqC9us6pMhZ8PHBA0cjr/eg43H MrJMIhUyaG2xbT1NfHwzFxEtIXs/U8TQbkEhCpnwi4Qnkjsf026PrujVXqL+9HPe fwLRSiCcaByISBPe3Ad5bquG0lyBZ+MqKRchBN0XacSyirtgIi89piFrmKfiffmT NaIYTmxrnSxGwcEKKdKPcrpqli1CWMXmUiCfMTx4Told975qywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMQEIFj8eV3kMVtXZrBM781rvbZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTU3MGRjNjMtNzE3NS0z NTU3LTk1YmUtZTIzYmNlMGRiNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE0J7rTj8el4OcfzmIqpY4qnOXr1ApbipYptAs57CoQ0VPzH+tg2 cBd8QdELnsfDwilElEiOxEHGxxwo0hj3TESsDVp3G/O85TpXdMdBJBMPR5F5SA0w a6UWmfQJfw4qiMIci9iKJ5n8oNG5I0byeoYky2DQfMk+y+7rKq2+0XTYDKTInTXa zW8zfbUZIc8rIM2S9SsxYEoetQ7T4zQFAVaJ61xCMeI7471T81AVy6ZBfCmMWSN/ 0u1LeTL/6rTEHempsCP9hwobBjeMo1kyDWJZmYqdGRdfVAOh6QI9zd+XWDZ3M5b/ Rb18Q59qcYn1GeJ5MARalhH8Ans+uvoZe54= -----END CERTIFICATE-----Generated at Sat Jun 13 14:05:44 2026 by rpki-client