$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa File: 7b37d16e-ee16-367f-82b5-9295b373d859.roa (raw, json) Hash identifier: Qrc+S9MrDLdZTmIP8T3FyUgskGZnrIMSPP88az+8nVI= Subject key identifier: FA:5A:60:DC:C4:B9:49:7E:1F:5B:E8:2A:31:D0:13:E4:BE:53:84:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE9B0727C5D7BF4DDF1B9A4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 36630 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:72:7c:5d:7b:f4:dd:f1:b9:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=b94f56f0-176b-4b96-b76a-47b68866967d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:93:9c:a4:00:c9:ee:ea:05:5b:60:52:d8: 34:7a:c2:bc:eb:fa:eb:86:65:0a:9a:b3:9e:48:2c: f0:0b:ee:63:9a:ab:37:2c:67:4d:c5:62:39:70:f3: 37:e6:40:76:d3:e3:48:48:8a:62:b7:75:7e:bc:2f: d1:57:e9:54:89:41:15:0c:e0:4d:b8:e1:79:2e:56: af:ea:86:aa:06:71:b5:67:e6:75:d2:ae:73:09:8c: 84:52:56:65:9b:68:6b:68:93:97:16:0d:58:ef:fc: cd:51:3f:26:f3:00:a1:f2:b2:49:46:26:10:c1:f0: f7:e6:c9:9e:ed:89:e0:1c:b7:c3:99:b4:26:ba:b1: b1:a0:d7:69:05:46:fc:35:e9:64:6e:f9:d7:af:46: 93:ac:15:c2:79:c2:57:35:f7:08:23:ad:a2:ad:0e: 31:67:df:bf:a1:34:b8:f3:1a:b4:70:a2:40:58:14: 52:50:7b:e7:c3:6d:d6:8e:1b:8e:ac:bd:a4:a7:1d: 6a:6b:72:cc:60:78:27:08:c5:6f:5d:7e:5a:40:0c: 62:3a:9e:aa:9a:fa:23:24:79:2b:11:21:3b:ee:18: 6b:27:54:64:99:5b:07:c3:da:69:5b:70:67:a1:56: d6:ce:56:14:9c:06:40:32:b5:46:75:00:c4:10:17: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:60:DC:C4:B9:49:7E:1F:5B:E8:2A:31:D0:13:E4:BE:53:84:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7b:96:8a:5b:2c:8c:2e:a5:36:70:01:b2:8f:e3:27:81:d2: 03:40:ce:5d:2f:25:79:cc:18:46:5b:62:d4:42:24:b5:0e:ec: 8e:f2:46:1b:a4:96:a2:50:c4:7d:44:c6:b9:21:79:be:2e:78: 8b:d2:6d:ef:6e:c6:e2:30:1d:8f:b4:ca:ea:75:82:07:4e:ed: fe:e9:52:ec:7b:ef:ea:e4:ee:cf:f7:40:11:82:44:13:05:26: 28:49:3d:c8:ec:a0:79:35:c5:d8:28:7b:4a:61:12:f6:a8:e9: df:a8:35:d0:14:a7:93:da:31:2b:57:17:34:7c:53:f9:01:49: 22:5c:11:e0:f7:e7:37:c3:1e:9d:fc:81:39:f9:1a:b0:77:c2: 4a:b9:e8:db:bd:5b:ce:a9:1b:12:a8:ea:20:72:69:14:65:f0: 07:58:cf:7e:57:58:0a:5f:62:55:4e:54:1e:f8:47:60:f9:fb: f4:8b:39:2f:8a:ce:d2:c3:a9:28:02:66:d2:25:83:71:ac:8a: 9b:79:d2:63:64:10:4c:2b:49:0f:90:12:e2:b6:cf:e9:9e:2e: 5e:79:e0:51:d5:b3:fe:06:ef:89:f3:11:0c:39:03:31:99:c1: 27:b1:b6:1a:0b:60:4e:83:1e:78:46:2f:56:5a:8a:9e:74:15: b4:e5:85:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psHJ8XXv03fG5pMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk Yjk0ZjU2ZjAtMTc2Yi00Yjk2LWI3NmEtNDdiNjg4NjY5NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3CTnKQAye7qBVtgUtg0esK86/rrhmUKmrOe SCzwC+5jmqs3LGdNxWI5cPM35kB20+NISIpit3V+vC/RV+lUiUEVDOBNuOF5Llav 6oaqBnG1Z+Z10q5zCYyEUlZlm2hraJOXFg1Y7/zNUT8m8wCh8rJJRiYQwfD35sme 7YngHLfDmbQmurGxoNdpBUb8NelkbvnXr0aTrBXCecJXNfcII62irQ4xZ9+/oTS4 8xq0cKJAWBRSUHvnw23WjhuOrL2kpx1qa3LMYHgnCMVvXX5aQAxiOp6qmvojJHkr ESE77hhrJ1RkmVsHw9ppW3BnoVbWzlYUnAZAMrVGdQDEEBeEnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpaYNzEuUl+H1voKjHQE+S+U4RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2IzN2QxNmUtZWUxNi0z NjdmLTgyYjUtOTI5NWIzNzNkODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF97lopbLIwupTZwAbKP4yeB0gNAzl0vJXnMGEZbYtRCJLUO7I7y RhuklqJQxH1Exrkheb4ueIvSbe9uxuIwHY+0yup1ggdO7f7pUux77+rk7s/3QBGC RBMFJihJPcjsoHk1xdgoe0phEvao6d+oNdAUp5PaMStXFzR8U/kBSSJcEeD35zfD Hp38gTn5GrB3wkq56Nu9W86pGxKo6iByaRRl8AdYz35XWApfYlVOVB74R2D5+/SL OS+KztLDqSgCZtIlg3Gsipt50mNkEEwrSQ+QEuK2z+meLl554FHVs/4G74nzEQw5 AzGZwSexthoLYE6DHnhGL1Zaip50FbTlha8= -----END CERTIFICATE-----Generated at Sat Jun 13 14:37:13 2026 by rpki-client