$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa File: 836d6194-c8b4-30fb-a5d1-88439615aa2a.roa (raw, json) Hash identifier: G/bBXdYZO4g6ato7SL/Tr09YdMkvzpg9tCGq6bBcSUQ= Subject key identifier: 38:35:4B:9C:CA:A9:94:0A:36:AA:B8:8A:84:25:24:7B:A6:40:2C:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E104F0E5CD17EE2249C25C9A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 396573 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:0e:5c:d1:7e:e2:24:9c:25:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=6fe574dd-8e95-4dc7-8bf7-a2361a6b17d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:3c:15:90:23:f4:c9:ff:74:7d:22:a5:46: d5:f2:bc:c0:ff:2a:91:ee:b6:e3:1c:18:fc:56:7d: ac:ac:19:76:4d:ff:c3:6e:27:32:36:b6:1c:c5:4b: 9f:6d:a2:57:3d:ea:14:40:0d:ad:d6:01:f6:2a:77: 13:15:b8:d6:8a:d1:4c:93:1d:82:02:85:2d:6e:06: e3:d2:1d:4b:59:f9:d9:fd:25:42:70:a5:0e:5f:52: d5:5f:80:9d:15:7f:2d:5b:b2:60:16:13:4b:c4:0c: ec:d5:27:3d:e6:e9:8a:54:84:f4:22:76:fa:33:5a: cc:57:d2:1f:be:f2:b0:09:7b:4e:d3:d4:14:1d:83: 24:52:85:00:d4:f6:1b:da:6d:2e:8a:58:bd:a5:d3: 2a:1d:63:05:83:ad:ae:29:e7:c4:57:9f:52:fe:e5: a1:3f:39:b7:f5:4c:55:bc:74:ed:93:14:01:3f:2c: d9:2a:ca:ca:42:f0:73:5c:3f:51:1b:af:2b:b6:43: 6f:fc:13:eb:a5:65:a0:e1:cb:cd:bd:93:e8:7f:f9: 74:39:68:ed:4d:17:35:20:f8:15:b7:2c:f0:49:ec: a0:d3:cd:e3:7d:8f:3f:38:40:b4:36:9a:6b:96:e8: 72:5f:ac:cd:68:bd:58:96:b3:d3:e2:62:bf:2c:95: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:4B:9C:CA:A9:94:0A:36:AA:B8:8A:84:25:24:7B:A6:40:2C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5c:a1:91:d7:29:1f:6e:7f:8a:ab:c0:fc:2e:e9:ff:4b:33: c4:54:2d:79:8c:5c:33:47:da:a7:0c:8a:08:32:55:9f:71:ef: 23:03:1c:f4:a6:41:dd:2d:0b:15:7f:02:6a:7a:f8:31:21:e8: 03:79:fe:24:41:19:b9:61:00:55:a0:a6:1e:e6:b1:7c:1f:99: 2a:f4:1f:d1:e3:f3:a5:92:32:d9:15:8a:f3:18:34:1d:e6:0a: bc:29:66:05:b5:fc:01:9b:fb:6e:72:17:0e:e6:59:9d:d1:67: 40:b1:21:96:41:a5:8d:ce:34:f0:13:50:65:69:c3:fc:da:02: f6:8b:7d:e2:30:0a:d6:d5:76:83:e7:20:80:e0:5b:5f:85:df: 3e:bb:a0:99:33:19:d4:4c:80:12:be:fd:14:3d:a7:35:e6:c9: 20:61:11:44:f0:02:77:52:3e:68:6a:bd:0a:49:a1:8b:32:1e: 8b:0a:76:f4:b2:bd:7e:71:11:eb:3a:ca:08:2d:8d:9e:ea:fc: 9f:1c:6e:9b:97:ba:4b:bf:d8:31:9a:1d:92:93:36:a2:cf:97: 23:33:2d:0d:b4:0e:db:be:5d:45:2d:92:38:4a:0f:c1:cf:e0: 3d:06:85:01:e7:be:42:a6:b7:9e:58:ec:f6:70:ea:b6:81:4d: b8:f3:34:3c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTw5c0X7iJJwlyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NmZlNTc0ZGQtOGU5NS00ZGM3LThiZjctYTIzNjFhNmIxN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndI8FZAj9Mn/dH0ipUbV8rzA/yqR7rbjHBj8 Vn2srBl2Tf/DbicyNrYcxUufbaJXPeoUQA2t1gH2KncTFbjWitFMkx2CAoUtbgbj 0h1LWfnZ/SVCcKUOX1LVX4CdFX8tW7JgFhNLxAzs1Sc95umKVIT0Inb6M1rMV9If vvKwCXtO09QUHYMkUoUA1PYb2m0uili9pdMqHWMFg62uKefEV59S/uWhPzm39UxV vHTtkxQBPyzZKsrKQvBzXD9RG68rtkNv/BPrpWWg4cvNvZPof/l0OWjtTRc1IPgV tyzwSeyg083jfY8/OEC0NpprluhyX6zNaL1YlrPT4mK/LJWt0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDg1S5zKqZQKNqq4ioQlJHumQCxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODM2ZDYxOTQtYzhiNC0z MGZiLWE1ZDEtODg0Mzk2MTVhYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSXKGR1ykfbn+Kq8D8Lun/SzPEVC15jFwzR9qn DIoIMlWfce8jAxz0pkHdLQsVfwJqevgxIegDef4kQRm5YQBVoKYe5rF8H5kq9B/R 4/OlkjLZFYrzGDQd5gq8KWYFtfwBm/tuchcO5lmd0WdAsSGWQaWNzjTwE1BlacP8 2gL2i33iMArW1XaD5yCA4Ftfhd8+u6CZMxnUTIASvv0UPac15skgYRFE8AJ3Uj5o ar0KSaGLMh6LCnb0sr1+cRHrOsoILY2e6vyfHG6bl7pLv9gxmh2Skzaiz5cjMy0N tA7bvl1FLZI4Sg/Bz+A9BoUB575CpreeWOz2cOq2gU248zQ8 -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:49 2026 by rpki-client