$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa File: 68965c62-5420-328c-98c0-645cdde1957d.roa (raw, json) Hash identifier: wihQbqfFV6Cc0qkbMAC3kFMiBA2WBnMqGif1oh1Ku+k= Subject key identifier: 15:D9:5D:7A:93:18:49:B8:73:B5:FD:D0:08:E5:B4:44:A9:A8:24:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD625C42E66101C57459ED740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 36625 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:c4:2e:66:10:1c:57:45:9e:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=f8432a87-bbe3-4767-81a6-b1bec04cab15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:c3:49:ef:9d:4f:0e:3b:83:36:61:75:99: 17:a7:e1:88:f8:c6:2f:0d:fd:4a:68:f9:23:62:7c: 7f:06:e6:2b:11:95:c8:8d:bd:c7:ce:32:fc:7f:ac: a1:90:31:53:57:59:dc:31:98:d5:d1:fb:bc:e4:5d: dc:37:e1:d2:c1:65:57:fd:fb:97:67:9b:45:77:29: 09:30:c4:6a:77:e0:28:07:2b:32:f3:df:db:d6:c9: 98:d2:98:75:5b:de:8b:3e:4b:c2:df:42:1a:c7:83: e0:62:35:41:1a:74:5c:e6:06:83:44:67:c0:5e:74: 17:37:02:cf:a6:7a:5f:95:34:cb:27:96:5f:2f:0b: 30:a7:7f:36:37:39:e1:50:09:8f:62:0b:ca:65:bd: b4:9d:b2:7d:4d:31:4f:2f:73:61:4a:5a:bc:cb:eb: 8f:fc:8f:e9:ef:17:e6:e1:89:e0:0e:d6:45:4d:5b: 9b:53:02:1f:ad:3b:3b:ee:00:48:6d:51:b0:31:84: 73:95:13:95:0b:6d:1c:99:e6:f6:51:56:c1:65:cb: 57:f4:26:9a:60:8d:88:b6:b6:e3:db:eb:dc:73:13: b0:d6:1f:62:c6:32:17:b0:a9:29:bb:3d:2b:85:06: ba:d4:ea:5a:57:d1:d2:a8:e7:a6:6a:37:40:fb:e0: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D9:5D:7A:93:18:49:B8:73:B5:FD:D0:08:E5:B4:44:A9:A8:24:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68965c62-5420-328c-98c0-645cdde1957d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3c:ae:42:15:bd:f6:f6:bc:70:ef:8b:f6:bf:7e:06:c2:4a: ee:78:94:19:7c:c4:e2:fb:69:69:e2:4c:61:47:80:03:67:8d: c9:69:fa:73:d3:0f:90:fc:a5:33:33:43:19:17:65:ad:8c:20: c7:74:f5:73:a0:fd:3f:12:08:da:c6:fe:75:a4:45:a6:30:e9: ab:2d:b8:71:2d:de:54:a7:ae:55:12:58:21:10:22:20:4e:93: e9:f5:5a:10:c7:bd:25:6e:2b:81:6a:64:8e:a9:8c:87:fb:ee: 8c:c9:ae:a6:e4:24:34:97:a7:77:15:78:39:2f:22:c0:bf:b0: 0f:87:f5:9d:c5:19:ff:09:be:38:43:56:ef:09:d9:80:13:b5: e9:17:31:1e:58:a3:0d:7d:4a:ad:06:43:25:dd:aa:d1:27:10: 6b:bc:da:6a:87:11:06:c2:d0:96:28:b9:be:cc:3e:af:9e:58: 65:a8:3d:b8:9a:ed:fb:66:be:29:44:7a:5f:2e:17:c4:ab:f3: e0:2c:eb:5a:b2:de:06:e1:1d:c2:51:24:17:4f:d4:64:18:e6: 00:88:69:aa:13:e3:29:91:0d:55:e6:8f:cb:e5:8d:e3:1d:c8: 14:6a:1e:d7:3b:10:61:d6:c7:29:cc:50:58:9f:c7:d8:8a:9d: fc:6f:2a:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3WJcQuZhAcV0We10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk Zjg0MzJhODctYmJlMy00NzY3LTgxYTYtYjFiZWMwNGNhYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh/DSe+dTw47gzZhdZkXp+GI+MYvDf1KaPkj Ynx/BuYrEZXIjb3HzjL8f6yhkDFTV1ncMZjV0fu85F3cN+HSwWVX/fuXZ5tFdykJ MMRqd+AoBysy89/b1smY0ph1W96LPkvC30Iax4PgYjVBGnRc5gaDRGfAXnQXNwLP pnpflTTLJ5ZfLwswp382NznhUAmPYgvKZb20nbJ9TTFPL3NhSlq8y+uP/I/p7xfm 4YngDtZFTVubUwIfrTs77gBIbVGwMYRzlROVC20cmeb2UVbBZctX9CaaYI2Itrbj 2+vccxOw1h9ixjIXsKkpuz0rhQa61OpaV9HSqOemajdA++BzzQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBXZXXqTGEm4c7X90AjltESpqCRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjg5NjVjNjItNTQyMC0z MjhjLTk4YzAtNjQ1Y2RkZTE5NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAePK5CFb329rxw74v2v34GwkrueJQZfMTi+2lp 4kxhR4ADZ43Jafpz0w+Q/KUzM0MZF2WtjCDHdPVzoP0/Egjaxv51pEWmMOmrLbhx Ld5Up65VElghECIgTpPp9VoQx70lbiuBamSOqYyH++6Mya6m5CQ0l6d3FXg5LyLA v7APh/WdxRn/Cb44Q1bvCdmAE7XpFzEeWKMNfUqtBkMl3arRJxBrvNpqhxEGwtCW KLm+zD6vnlhlqD24mu37Zr4pRHpfLhfEq/PgLOtast4G4R3CUSQXT9RkGOYAiGmq E+MpkQ1V5o/L5Y3jHcgUah7XOxBh1scpzFBYn8fYip38bypm -----END CERTIFICATE-----Generated at Sat Jun 13 18:45:31 2026 by rpki-client