$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d28384d-beeb-3562-bd12-ee79779053e9.roa File: 6d28384d-beeb-3562-bd12-ee79779053e9.roa (raw, json) Hash identifier: M7MKUOITIcI8Yo5tt7qhOtw7lWeQFVIYHxPUKwWt9X4= Subject key identifier: 3A:73:71:7A:2F:39:B6:4F:BA:96:37:66:CA:35:6B:43:9A:76:71:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E131992567943500EF9D1DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d28384d-beeb-3562-bd12-ee79779053e9.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396827 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:92:56:79:43:50:0e:f9:d1:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=d2fe80e1-dd86-4b23-9982-da1130f017ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:bc:fd:e8:a3:23:d5:0c:ad:69:74:dc:23: e4:eb:d6:cd:fa:4d:ed:13:c9:c6:90:ff:3c:3e:12: 99:79:4f:36:81:88:99:90:26:2d:28:b5:cd:56:a9: 68:57:b7:27:ec:9f:4c:c6:31:3c:da:54:52:5a:51: 6e:05:c7:47:40:59:50:04:31:c5:be:50:11:48:25: 8e:0f:b9:b4:a3:58:11:95:5b:0a:bb:80:c4:66:f1: dc:1c:c7:82:07:30:e8:f6:23:bd:bd:75:93:40:09: 42:ab:0a:e4:b6:bc:fd:b1:33:c6:12:bb:4b:51:3a: d4:29:19:0d:af:e4:ec:01:c2:f3:30:36:f9:fb:53: bb:00:90:6c:34:8e:40:4d:0d:97:a9:a3:d1:2e:4d: 6e:eb:46:f4:e1:fd:a2:1c:e4:5e:54:73:8a:97:44: db:35:9d:c7:c9:fc:63:ab:a3:a0:e8:48:43:7a:e6: d5:0d:62:f6:68:87:db:16:34:9a:eb:ae:f0:0e:2a: c2:41:f7:b2:cb:61:f2:cc:be:a1:d8:1c:39:5c:f0: 81:1a:50:f6:ab:ea:57:d0:9c:a7:77:19:df:cd:18: 38:c5:55:bc:5a:b4:97:09:13:85:9d:8e:a7:ff:de: 6e:96:82:33:24:69:62:91:22:c6:6c:79:89:f7:8e: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:71:7A:2F:39:B6:4F:BA:96:37:66:CA:35:6B:43:9A:76:71:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d28384d-beeb-3562-bd12-ee79779053e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0c:e8:26:7c:04:af:eb:9c:69:e7:38:6f:74:36:a7:48:19: 4b:46:88:71:11:e4:2f:7c:57:11:96:65:b9:52:f7:3f:b7:e0: f5:77:fb:be:69:2d:b5:5c:79:33:63:02:e8:b1:8c:c1:9e:32: 17:7d:fd:a1:c4:54:e9:09:31:c8:94:2e:a9:92:75:67:bf:48: f5:8c:af:11:17:85:c6:66:39:d9:14:bc:9d:05:e8:e5:28:2d: 1f:8f:2e:ab:3f:e7:2c:e9:a5:87:c8:74:d9:89:a6:36:50:a7: 00:f0:73:ea:1f:ad:a3:38:f0:d9:34:d1:9f:fc:59:00:e2:dd: ce:e8:5b:b2:5b:7c:99:cf:31:ad:17:5a:32:72:34:f0:dc:e3: 07:94:fb:9b:c7:0f:db:cb:01:45:b4:95:17:41:42:b5:6e:f8: 50:9e:95:46:da:c5:4f:74:6f:27:df:7d:0c:c4:81:d0:e9:55: 45:cb:b8:0e:63:3c:ae:aa:6b:36:f2:f4:e3:f4:d2:e1:0b:a6: 3a:51:ea:65:ad:31:f5:b7:18:b3:2f:8e:73:6f:82:35:98:40: 51:25:36:72:53:ca:96:51:96:5b:3b:8e:47:08:78:e0:59:3a: bd:29:26:c1:c9:f3:df:fe:0b:56:8e:b3:e9:66:64:f0:91:f5: 64:01:54:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZJWeUNQDvnR3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk ZDJmZTgwZTEtZGQ4Ni00YjIzLTk5ODItZGExMTMwZjAxN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLC8/eijI9UMrWl03CPk69bN+k3tE8nGkP88 PhKZeU82gYiZkCYtKLXNVqloV7cn7J9MxjE82lRSWlFuBcdHQFlQBDHFvlARSCWO D7m0o1gRlVsKu4DEZvHcHMeCBzDo9iO9vXWTQAlCqwrktrz9sTPGErtLUTrUKRkN r+TsAcLzMDb5+1O7AJBsNI5ATQ2XqaPRLk1u60b04f2iHOReVHOKl0TbNZ3Hyfxj q6Og6EhDeubVDWL2aIfbFjSa667wDirCQfeyy2HyzL6h2Bw5XPCBGlD2q+pX0Jyn dxnfzRg4xVW8WrSXCROFnY6n/95uloIzJGlikSLGbHmJ947GhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpzcXovObZPupY3Zso1a0OadnFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmQyODM4NGQtYmVlYi0z NTYyLWJkMTItZWU3OTc3OTA1M2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcM6CZ8BK/rnGnnOG90NqdIGUtGiHER5C98VxGWZblS9z+34PV3 +75pLbVceTNjAuixjMGeMhd9/aHEVOkJMciULqmSdWe/SPWMrxEXhcZmOdkUvJ0F 6OUoLR+PLqs/5yzppYfIdNmJpjZQpwDwc+ofraM48Nk00Z/8WQDi3c7oW7JbfJnP Ma0XWjJyNPDc4weU+5vHD9vLAUW0lRdBQrVu+FCelUbaxU90byfffQzEgdDpVUXL uA5jPK6qazby9OP00uELpjpR6mWtMfW3GLMvjnNvgjWYQFElNnJTypZRlls7jkcI eOBZOr0pJsHJ89/+C1aOs+lmZPCR9WQBVLY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:56:15 2026 by rpki-client