$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa File: 67a05e70-e633-381a-b8e2-b5e6e9e22526.roa (raw, json) Hash identifier: Vq4QQXFs0jxtDjHELoaGDo6LInFKHHIOtcla2m1PsN8= Subject key identifier: C0:3A:1C:84:EE:A2:94:7A:78:C0:74:AD:A8:1D:41:C2:D2:9A:AA:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E104F0EDDDAE9BB7AF2D1CF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 36625 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:0e:dd:da:e9:bb:7a:f2:d1:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=fd429987-cd71-4a72-984f-11ecc28d19d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:5e:9c:20:ea:3c:fc:a9:d1:53:4c:d3:e6: 5e:15:16:57:13:4c:51:26:b1:0b:bf:50:3d:e1:00: b4:d8:1b:cd:c9:39:be:bf:17:e3:4d:03:74:8e:6c: 5e:cf:f5:69:0e:78:34:46:b6:4b:60:a1:a7:30:83: 32:d7:44:8c:a4:1b:33:f3:26:60:ae:a6:d0:67:e3: 40:e6:42:66:2c:f8:01:40:55:65:82:58:53:73:e9: 04:23:a6:ae:8b:a7:6b:3c:20:b9:2b:e4:a4:81:28: be:3f:f8:22:c7:2e:0c:f0:ab:5d:bc:26:0d:89:82: 84:93:54:29:06:f5:b1:86:1c:47:0f:59:df:da:8e: 15:8a:a3:c8:59:d8:47:4f:56:f4:b1:d4:28:d0:7c: 87:b0:d1:b7:6d:ea:41:bd:82:d6:bc:53:dd:29:6c: 6e:1d:6b:e4:26:ea:61:af:3c:76:03:30:50:c9:3f: 27:f7:d3:51:3a:1b:b8:33:fd:28:9b:14:89:27:2d: 9d:16:5d:8e:a2:79:ba:93:41:62:c9:a7:68:af:58: e9:8c:bc:5e:43:cb:b3:7b:42:ae:e6:82:0c:e4:3a: 3d:37:7f:0b:b9:88:fa:01:c9:ed:08:d8:98:79:a2: 45:48:4f:57:ff:9a:6f:d6:5a:a0:0d:5b:85:73:00: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3A:1C:84:EE:A2:94:7A:78:C0:74:AD:A8:1D:41:C2:D2:9A:AA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:75:9a:b8:ac:a8:fc:b7:4b:70:1f:e7:05:96:75:a1:e8:33: f8:f3:82:da:4b:2d:95:48:b5:9b:83:45:47:b8:e7:a4:92:e3: da:da:45:ad:44:3c:98:a3:53:cf:2e:fe:2f:b6:20:9e:8c:89: c2:ea:7b:dd:37:6d:26:34:89:cf:8e:93:45:86:64:1f:14:50: 29:4e:b3:6b:2c:40:73:c6:b2:c6:dc:fd:82:44:f3:f1:8f:91: 78:44:b6:51:73:48:f9:27:bb:9c:ca:73:99:4a:d9:1e:f8:3d: fa:23:a2:4e:2c:a8:f5:b7:29:71:40:8d:c0:f0:30:36:c5:24: 06:d6:ee:34:d5:8b:be:3a:81:b7:0c:7b:ea:01:44:44:ef:bf: 9f:d7:52:6f:e5:7a:96:ec:93:d8:61:de:a4:dd:e0:6d:13:6d: 55:4a:a4:c2:ec:27:53:45:38:36:05:d5:6b:93:a1:98:aa:78: 8e:72:37:a5:70:dd:81:e3:f7:a9:77:f9:d4:74:30:dc:d7:1f: a4:8c:6c:88:13:00:18:8e:91:a8:2c:fa:d3:33:24:ab:4c:b5: f0:44:b4:bb:81:fb:bd:fc:34:a4:d0:81:0a:df:66:6f:7e:9e: bf:54:e6:7f:2d:0d:a9:2a:ae:89:53:28:0e:17:ae:17:a1:d2: 2e:e7:0f:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTw7d2um7evLRz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZmQ0Mjk5ODctY2Q3MS00YTcyLTk4NGYtMTFlY2MyOGQxOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOhenCDqPPyp0VNM0+ZeFRZXE0xRJrELv1A9 4QC02BvNyTm+vxfjTQN0jmxez/VpDng0RrZLYKGnMIMy10SMpBsz8yZgrqbQZ+NA 5kJmLPgBQFVlglhTc+kEI6aui6drPCC5K+SkgSi+P/gixy4M8KtdvCYNiYKEk1Qp BvWxhhxHD1nf2o4ViqPIWdhHT1b0sdQo0HyHsNG3bepBvYLWvFPdKWxuHWvkJuph rzx2AzBQyT8n99NROhu4M/0omxSJJy2dFl2Oonm6k0Fiyador1jpjLxeQ8uze0Ku 5oIM5Do9N38LuYj6AcntCNiYeaJFSE9X/5pv1lqgDVuFcwCr6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMA6HITuopR6eMB0ragdQcLSmqp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjdhMDVlNzAtZTYzMy0z ODFhLWI4ZTItYjVlNmU5ZTIyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7dZq4rKj8t0twH+cFlnWh6DP484LaSy2VSLWb g0VHuOekkuPa2kWtRDyYo1PPLv4vtiCejInC6nvdN20mNInPjpNFhmQfFFApTrNr LEBzxrLG3P2CRPPxj5F4RLZRc0j5J7ucynOZStke+D36I6JOLKj1tylxQI3A8DA2 xSQG1u401Yu+OoG3DHvqAURE77+f11Jv5XqW7JPYYd6k3eBtE21VSqTC7CdTRTg2 BdVrk6GYqniOcjelcN2B4/epd/nUdDDc1x+kjGyIEwAYjpGoLPrTMySrTLXwRLS7 gfu9/DSk0IEK32Zvfp6/VOZ/LQ2pKq6JUygOF64XodIu5w/5 -----END CERTIFICATE-----Generated at Sat Jun 13 15:47:53 2026 by rpki-client