$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/608cb28b-234e-3d4a-934d-8948cdba17be.roa File: 608cb28b-234e-3d4a-934d-8948cdba17be.roa (raw, json) Hash identifier: yf7KyaEVzmylypAFnwjYq6GWD15o9F4WCxGtAy2RVoY= Subject key identifier: 1F:B5:F4:72:60:54:57:7D:E1:24:19:ED:32:82:88:81:D0:D7:F8:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1319914A18311E7E01A85DC8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/608cb28b-234e-3d4a-934d-8948cdba17be.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396606 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:91:4a:18:31:1e:7e:01:a8:5d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=a71cd42b-d94d-40eb-8bc0-f102863bc61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:72:b3:2a:76:50:9d:1a:90:63:bb:4d:f1: 36:fb:be:ba:af:bd:cc:0b:77:a3:32:a4:6e:f7:44: d7:49:1c:15:87:ee:82:2a:58:77:42:86:e7:a4:d2: 9c:b7:7d:56:c0:d8:4f:48:24:ca:c7:81:ea:71:a8: 6d:4f:aa:fb:79:49:f1:22:7f:41:cc:da:fd:6f:91: 8d:bf:72:e8:1a:72:1e:15:c5:a4:2d:b6:e1:4f:fe: 63:fc:6f:32:e0:e3:ba:7f:81:1a:6e:eb:78:7e:00: 56:f2:71:0f:a5:67:16:69:4f:f9:31:25:09:0f:13: bb:1f:dd:6b:44:1e:02:6f:c3:ca:37:67:0d:9f:56: 46:7f:25:09:a9:aa:10:7e:0b:b0:4a:59:4c:be:65: 4b:ae:3f:ea:ed:1e:61:e6:76:92:04:98:7b:06:cb: e0:92:6e:cb:61:20:c6:4d:ae:2c:ed:a4:c4:86:df: 36:eb:9d:82:75:cc:54:40:2a:25:03:6f:1a:3d:59: 5a:b3:56:60:41:9f:f6:29:b0:77:51:d9:95:32:d5: 84:d6:34:fb:47:48:2c:b6:94:0c:c5:ae:4e:11:2a: 58:ae:3b:ae:e1:57:b8:f8:cf:fc:16:93:24:41:c1: 3c:4e:24:ca:5e:93:99:90:e3:05:cc:43:dd:56:ba: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:F4:72:60:54:57:7D:E1:24:19:ED:32:82:88:81:D0:D7:F8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/608cb28b-234e-3d4a-934d-8948cdba17be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4a:0d:8a:db:4e:5f:01:03:6e:9e:73:01:e2:c0:c6:b4:a6: bb:f3:61:65:84:d0:82:93:00:61:a0:10:8e:e9:7e:fb:e7:c0: ae:b2:be:fa:87:3a:ff:41:e4:f5:13:e2:c3:d6:4f:7d:37:33: 4c:17:64:d3:0b:f7:ed:f0:a8:82:07:7a:27:fe:9e:db:d1:89: 99:ef:5e:9d:fa:1e:ac:72:64:f8:42:ac:69:92:b0:3f:9a:13: 8c:ad:99:4a:4a:fb:c4:30:97:2f:af:ee:5f:62:e5:fc:05:fa: b7:a6:45:54:47:01:05:bd:a5:24:1a:7d:41:53:8a:7d:23:5a: c8:95:6b:e7:a0:23:0d:82:e0:f3:51:31:13:09:ac:4a:c6:6f: ec:91:83:13:e9:cc:70:41:40:a6:c3:0e:b0:7d:7e:8e:fd:f9: 08:e6:48:71:fc:4b:b8:d0:b3:b4:6c:d8:14:d5:8d:4b:27:4f: 1f:2b:0d:08:99:d2:00:e7:dc:72:15:ce:8a:6d:e4:40:0e:bf: ad:08:59:d6:60:79:c6:79:f8:d6:f8:5d:44:8f:c4:f3:c4:6d: 85:3d:32:f2:89:51:4f:6d:b0:93:86:6c:fa:6d:d2:fe:58:f8: 25:03:7e:97:bf:aa:fe:77:a0:d7:65:71:cd:8a:06:f2:0e:00: 38:dd:27:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZFKGDEefgGoXcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk YTcxY2Q0MmItZDk0ZC00MGViLThiYzAtZjEwMjg2M2JjNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdysyp2UJ0akGO7TfE2+766r73MC3ejMqRu 90TXSRwVh+6CKlh3QobnpNKct31WwNhPSCTKx4HqcahtT6r7eUnxIn9BzNr9b5GN v3LoGnIeFcWkLbbhT/5j/G8y4OO6f4Eabut4fgBW8nEPpWcWaU/5MSUJDxO7H91r RB4Cb8PKN2cNn1ZGfyUJqaoQfguwSllMvmVLrj/q7R5h5naSBJh7Bsvgkm7LYSDG Ta4s7aTEht82652CdcxUQColA28aPVlas1ZgQZ/2KbB3UdmVMtWE1jT7R0gstpQM xa5OESpYrjuu4Ve4+M/8FpMkQcE8TiTKXpOZkOMFzEPdVrrkswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+19HJgVFd94SQZ7TKCiIHQ1/idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjA4Y2IyOGItMjM0ZS0z ZDRhLTkzNGQtODk0OGNkYmExN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVKDYrbTl8BA26ecwHiwMa0prvzYWWE0IKTAGGgEI7pfvvnwK6y vvqHOv9B5PUT4sPWT303M0wXZNML9+3wqIIHeif+ntvRiZnvXp36HqxyZPhCrGmS sD+aE4ytmUpK+8Qwly+v7l9i5fwF+remRVRHAQW9pSQafUFTin0jWsiVa+egIw2C 4PNRMRMJrErGb+yRgxPpzHBBQKbDDrB9fo79+QjmSHH8S7jQs7Rs2BTVjUsnTx8r DQiZ0gDn3HIVzopt5EAOv60IWdZgecZ5+Nb4XUSPxPPEbYU9MvKJUU9tsJOGbPpt 0v5Y+CUDfpe/qv53oNdlcc2KBvIOADjdJxE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:47:25 2026 by rpki-client