$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa File: 6a3b2996-242b-3f9a-8071-623330e2f499.roa (raw, json) Hash identifier: eNF0XL4rg7Obmfke3FzNZx+HDMWLDV1nxQicJShAMCY= Subject key identifier: D1:E8:ED:00:58:10:47:16:C0:B1:55:5F:34:EF:31:CF:C7:E9:3B:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D8895D89823FBD303C6508 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 397209 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:89:5d:89:82:3f:bd:30:3c:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=4fd5e93b-c347-44d5-bbea-804dce88f5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:67:35:ae:86:f3:53:5d:52:99:aa:df:f3: bd:4d:2d:3d:91:51:bc:ea:e1:7d:46:68:33:29:2d: 52:96:34:f1:fc:b0:92:50:ea:3f:07:76:ab:ea:4e: d9:9f:bb:3d:5a:18:be:2c:65:df:65:41:fa:1f:94: 71:f2:5d:ba:7a:bd:ee:54:c0:ad:9c:00:2b:38:70: 03:b7:95:04:e1:b2:f7:25:51:e3:ce:c5:b0:1b:50: 88:f3:dc:50:50:df:18:69:18:af:b2:5e:fc:f5:86: c9:a6:e7:a7:bc:0c:62:b3:97:f4:85:47:24:c2:d2: ef:6e:58:c0:16:e5:52:c6:3f:b0:4d:9d:32:83:ef: 96:bd:1f:86:64:68:f3:29:45:55:da:db:4d:80:60: 47:fe:76:8e:fc:bd:e7:31:a3:df:15:f6:c2:59:5f: 13:28:5a:7b:22:1c:3f:26:cb:03:92:03:bf:aa:b4: 17:49:10:b1:d2:e6:9e:c2:4c:5b:7b:58:0a:ca:6f: e6:a1:f3:97:17:71:75:24:f7:0a:d6:5d:6e:19:31: a2:37:0d:a2:ac:78:29:40:a7:cd:a5:53:ac:5f:9c: c8:08:e0:d1:55:f9:cd:53:32:34:0f:04:28:0c:cf: 68:da:30:e9:8b:a2:d8:f1:c6:3b:ab:fb:d8:7e:bd: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E8:ED:00:58:10:47:16:C0:B1:55:5F:34:EF:31:CF:C7:E9:3B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b1:3b:1d:4a:36:a2:59:cb:65:01:0b:1c:b0:8f:b7:8b:4a: a9:f8:52:11:f3:82:56:be:b0:e8:55:a4:f2:e2:5e:31:b9:14: 88:26:b7:a2:ad:ab:ab:9b:22:e0:57:be:90:c0:1e:87:70:d0: 3f:8a:17:e3:a6:05:27:ed:01:e1:d2:b7:db:e2:15:2e:00:55: ab:c9:12:c0:5a:7a:42:26:0c:74:3a:ae:cc:e7:17:8e:51:d4: 98:cb:7c:96:55:10:1c:bd:55:1a:b4:c6:31:5d:f1:46:63:17: cd:77:8a:05:43:ee:fe:01:98:6f:27:ab:cf:c2:c3:99:6f:67: b8:3f:0b:17:0f:0e:df:eb:7f:dc:ff:2b:74:d6:33:51:40:d9: c7:ac:18:46:46:2b:c0:2b:98:61:62:25:68:d9:36:ce:04:ca: 14:a0:55:8d:e9:09:ea:6f:ba:80:6c:e8:22:8e:af:d2:71:42: c0:cb:01:94:3a:23:fd:a7:9a:cf:9f:29:c5:96:01:2f:0c:d8: 7e:bc:42:d8:29:f8:6e:c4:6b:2e:a6:cf:60:bf:c8:9f:fa:3c: d3:b9:b2:62:75:c2:92:46:0a:f3:40:3a:0d:5f:6c:9e:37:62: c6:78:64:6f:57:0f:b8:5c:e3:00:cd:39:fb:61:60:43:04:0b: 7a:1c:d7:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IldiYI/vTA8ZQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk NGZkNWU5M2ItYzM0Ny00NGQ1LWJiZWEtODA0ZGNlODhmNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCFnNa6G81NdUpmq3/O9TS09kVG86uF9Rmgz KS1SljTx/LCSUOo/B3ar6k7Zn7s9Whi+LGXfZUH6H5Rx8l26er3uVMCtnAArOHAD t5UE4bL3JVHjzsWwG1CI89xQUN8YaRivsl789YbJpuenvAxis5f0hUckwtLvbljA FuVSxj+wTZ0yg++WvR+GZGjzKUVV2ttNgGBH/naO/L3nMaPfFfbCWV8TKFp7Ihw/ JssDkgO/qrQXSRCx0uaewkxbe1gKym/mofOXF3F1JPcK1l1uGTGiNw2irHgpQKfN pVOsX5zICODRVfnNUzI0DwQoDM9o2jDpi6LY8cY7q/vYfr0k4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHo7QBYEEcWwLFVXzTvMc/H6TtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmEzYjI5OTYtMjQyYi0z ZjlhLTgwNzEtNjIzMzMwZTJmNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKxOx1KNqJZy2UBCxywj7eLSqn4UhHzgla+sOhVpPLiXjG5FIgm t6Ktq6ubIuBXvpDAHodw0D+KF+OmBSftAeHSt9viFS4AVavJEsBaekImDHQ6rszn F45R1JjLfJZVEBy9VRq0xjFd8UZjF813igVD7v4BmG8nq8/Cw5lvZ7g/CxcPDt/r f9z/K3TWM1FA2cesGEZGK8ArmGFiJWjZNs4EyhSgVY3pCepvuoBs6CKOr9JxQsDL AZQ6I/2nms+fKcWWAS8M2H68Qtgp+G7Eay6mz2C/yJ/6PNO5smJ1wpJGCvNAOg1f bJ43YsZ4ZG9XD7hc4wDNOfthYEMEC3oc1x8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:54:00 2026 by rpki-client