$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7abeb7ec-06f7-372a-96dc-07170a41f25f.roa File: 7abeb7ec-06f7-372a-96dc-07170a41f25f.roa (raw, json) Hash identifier: crJpk90WPiH3mFKqx0PHcEolGezZ0YzJO1rFkK0cdg4= Subject key identifier: D3:25:A0:83:82:66:B6:E8:80:3B:70:2E:00:28:78:53:19:1D:78:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88BB7D3BD0C11B9144040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7abeb7ec-06f7-372a-96dc-07170a41f25f.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 396542 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:b7:d3:bd:0c:11:b9:14:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=0de8d8e8-e5d5-4f9a-a597-6d5b0f5b2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:5f:22:6c:8c:70:ad:d4:40:c3:79:30:06: c2:d0:19:09:43:dc:96:20:75:3f:4c:57:32:82:c3: 60:9a:cd:bd:08:ad:94:88:b5:06:c1:a4:e5:11:f8: 17:e0:bd:ca:23:19:8d:82:a8:89:c6:a5:5a:41:5b: 20:1c:b3:a1:c5:b5:2d:87:18:48:89:1f:5e:1f:a7: da:0d:f0:e3:8f:f8:ee:e8:4d:03:cc:c8:1c:db:48: 56:d0:de:7e:7e:78:cf:b7:39:c6:24:37:d2:22:08: e6:3d:7f:6e:10:96:89:ea:e0:15:91:d1:b4:55:0e: 72:97:ec:34:b9:5a:5c:af:e4:28:67:75:e6:5f:05: c2:a7:25:d3:46:23:fb:19:52:87:87:16:54:9d:24: f1:22:0a:ed:f4:4b:29:66:9b:1c:9f:12:05:79:a9: 23:90:90:98:8b:cd:42:5a:96:9f:8e:13:f9:2a:c4: bf:77:c3:2b:54:19:c8:e9:57:7f:8b:8f:47:85:12: f1:1c:59:f1:ca:14:53:a8:ae:e5:94:41:74:d7:8d: 21:35:52:11:2d:38:3f:a1:5a:4f:5a:44:7b:06:e0: c2:0b:07:a9:12:7a:53:e1:22:27:0c:34:d0:9d:91: 37:54:0f:37:0b:6f:d2:0a:ed:b7:53:0b:8a:5e:11: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:A0:83:82:66:B6:E8:80:3B:70:2E:00:28:78:53:19:1D:78:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7abeb7ec-06f7-372a-96dc-07170a41f25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:34:34:e5:0e:24:23:8b:d1:42:d1:cf:67:1e:53:fc:82:2b: 28:c0:50:31:a4:5e:19:52:68:56:17:da:ca:45:0f:d9:6a:1f: fe:4f:8c:5d:24:1e:e8:30:d6:69:61:99:34:26:2a:e4:38:9f: 33:27:94:aa:b7:3d:d3:40:30:99:6a:78:3b:1a:5a:fe:d3:bc: 21:9f:ad:79:42:86:57:80:29:85:e9:c9:27:d1:06:4d:5c:24: 56:53:a9:e9:7d:3c:18:b4:90:d8:5e:cf:d7:b4:e0:34:5e:f9: 96:0a:8c:5b:76:40:87:71:ac:a7:42:56:ae:68:95:5c:ef:f7: 01:2c:b3:b2:fb:6b:30:a3:24:d6:3a:af:e2:38:3f:c8:d6:b8: 1c:cf:d0:6d:8f:7d:74:3f:f4:ec:39:a1:4b:ce:d9:5c:b9:9f: 3d:0b:e8:dd:a8:35:99:b5:03:e8:fa:5f:c5:98:6a:be:75:8d: a2:5b:39:e5:f0:42:58:56:95:8c:c9:23:a9:44:fc:61:f5:5c: 6d:1b:39:4e:b2:6a:b8:e3:f7:59:b1:7e:56:6e:6c:84:19:7e: 31:81:e5:b4:5e:60:6a:a7:ca:be:d0:c8:59:3a:89:bf:e7:83: 89:34:96:18:dc:85:44:35:74:b6:e5:f5:b9:8c:c8:24:75:bc: 3d:69:9d:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2Iu3070MEbkUQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk MGRlOGQ4ZTgtZTVkNS00ZjlhLWE1OTctNmQ1YjBmNWIyMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNBfImyMcK3UQMN5MAbC0BkJQ9yWIHU/TFcy gsNgms29CK2UiLUGwaTlEfgX4L3KIxmNgqiJxqVaQVsgHLOhxbUthxhIiR9eH6fa DfDjj/ju6E0DzMgc20hW0N5+fnjPtznGJDfSIgjmPX9uEJaJ6uAVkdG0VQ5yl+w0 uVpcr+QoZ3XmXwXCpyXTRiP7GVKHhxZUnSTxIgrt9EspZpscnxIFeakjkJCYi81C WpafjhP5KsS/d8MrVBnI6Vd/i49HhRLxHFnxyhRTqK7llEF0140hNVIRLTg/oVpP WkR7BuDCCwepEnpT4SInDDTQnZE3VA83C2/SCu23UwuKXhEAVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNMloIOCZrbogDtwLgAoeFMZHXhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2FiZWI3ZWMtMDZmNy0z NzJhLTk2ZGMtMDcxNzBhNDFmMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEs0NOUOJCOL0ULRz2ceU/yCKyjAUDGkXhlSaFYX2spFD9lqH/5P jF0kHugw1mlhmTQmKuQ4nzMnlKq3PdNAMJlqeDsaWv7TvCGfrXlChleAKYXpySfR Bk1cJFZTqel9PBi0kNhez9e04DRe+ZYKjFt2QIdxrKdCVq5olVzv9wEss7L7azCj JNY6r+I4P8jWuBzP0G2PfXQ/9Ow5oUvO2Vy5nz0L6N2oNZm1A+j6X8WYar51jaJb OeXwQlhWlYzJI6lE/GH1XG0bOU6yarjj91mxflZubIQZfjGB5bReYGqnyr7QyFk6 ib/ng4k0lhjchUQ1dLbl9bmMyCR1vD1pnco= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:57 2026 by rpki-client