$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa File: 8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa (raw, json) Hash identifier: rVymHJaAVenbbdupV5xidxClMV0GprHw9j1/tai8tkI= Subject key identifier: 95:B2:7F:99:EB:37:F0:08:1E:BC:D6:25:72:87:C9:D7:08:C4:DD:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F0DE45620A48EF693C200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 36616 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0d:e4:56:20:a4:8e:f6:93:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=9ff2a2fe-d2bc-48fa-b80e-1aab23744764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:aa:29:43:d7:0e:e1:09:18:52:9f:66:3f: d9:db:cf:ae:fb:05:cb:ba:f2:52:21:a3:f1:b0:fe: 99:9e:2f:dd:41:6d:a1:25:33:12:1c:f6:df:44:8b: 9a:a8:2b:d4:66:18:10:29:5e:b0:fc:b5:45:31:0a: 7e:03:34:79:f9:82:58:45:cd:cf:47:83:4e:95:6f: 95:9d:97:48:74:61:3b:a2:13:64:fd:61:34:ec:a1: 7e:fa:f7:56:8d:f9:83:99:10:52:08:59:3d:d1:43: cf:7a:ff:fc:fa:56:fc:2a:1a:a5:f1:a0:a4:0d:ad: 7f:68:14:e6:62:d2:2b:b2:cf:58:bc:19:8d:77:0c: 6e:ef:95:fe:8e:5f:ac:fa:71:1d:b9:eb:60:ba:c5: b2:b1:5d:35:6d:0a:07:64:ab:7d:cb:2b:d3:64:40: 55:b4:fb:38:eb:a2:cb:9f:e7:d2:5e:bb:30:ce:b5: a9:a8:fe:f9:a8:f0:27:63:66:08:29:7f:74:55:b5: b5:19:6d:af:81:fb:03:17:4b:53:c4:cc:c4:e6:16: 97:52:7d:92:7c:72:9c:e5:6b:7c:c0:ed:ee:f4:27: fe:d0:5b:94:dd:95:02:f3:21:9c:59:b9:2d:f2:73: 8c:55:f6:3c:91:b4:4d:17:ce:43:91:4d:57:b0:25: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B2:7F:99:EB:37:F0:08:1E:BC:D6:25:72:87:C9:D7:08:C4:DD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8578d5d1-f6c6-3beb-b09b-fe8b5ed9f673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:9c:bf:48:96:d8:3e:fd:12:7f:f7:15:95:dd:f0:bf:4e: 7a:86:36:17:eb:1b:72:bf:17:ec:31:43:fe:08:cd:40:d6:e0: 46:a4:bd:17:11:d2:f4:5b:51:50:9d:57:f0:e7:e7:f8:5a:96: 86:da:a5:bd:28:55:6b:bf:74:ba:df:59:63:47:0d:d4:c0:49: fe:a4:6b:6d:02:a0:f1:dc:aa:15:ee:be:a1:a3:a1:91:37:5f: 3e:44:bf:4b:e2:6a:ba:b9:cd:ed:ba:b2:6b:68:eb:6b:08:1c: cd:a8:e7:45:56:0e:38:aa:02:b3:56:1a:45:3f:9d:79:75:1e: db:72:6e:c4:49:b0:06:18:38:06:24:9e:2c:24:d6:86:fa:0a: e3:b7:4a:8b:e6:5f:e2:6e:32:f1:99:68:32:5b:6d:9e:1a:da: e5:a1:8e:1f:89:25:16:3a:6b:0e:b8:a7:b4:8c:a4:97:ee:db: 3c:25:4a:f8:a6:1b:ca:85:e4:60:f0:af:1a:91:b0:26:d4:da: d0:f2:ca:47:a3:7e:28:c4:9c:0d:80:a7:ac:a1:64:75:45:81: ae:3c:3c:68:0b:03:48:01:27:a2:bc:f9:ea:ef:14:4d:8e:7d: 17:66:da:27:07:09:f1:3d:83:1c:98:89:6d:c1:3b:4a:55:d7: 84:41:40:3b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPw3kViCkjvaTwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk OWZmMmEyZmUtZDJiYy00OGZhLWI4MGUtMWFhYjIzNzQ0NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4mqKUPXDuEJGFKfZj/Z28+u+wXLuvJSIaPx sP6Zni/dQW2hJTMSHPbfRIuaqCvUZhgQKV6w/LVFMQp+AzR5+YJYRc3PR4NOlW+V nZdIdGE7ohNk/WE07KF++vdWjfmDmRBSCFk90UPPev/8+lb8Khql8aCkDa1/aBTm YtIrss9YvBmNdwxu75X+jl+s+nEduetgusWysV01bQoHZKt9yyvTZEBVtPs466LL n+fSXrswzrWpqP75qPAnY2YIKX90VbW1GW2vgfsDF0tTxMzE5haXUn2SfHKc5Wt8 wO3u9Cf+0FuU3ZUC8yGcWbkt8nOMVfY8kbRNF85DkU1XsCUXUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJWyf5nrN/AIHrzWJXKHydcIxN2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3OGQ1ZDEtZjZjNi0z YmViLWIwOWItZmU4YjVlZDlmNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQArVJy/SJbYPv0Sf/cVld3wv056hjYX6xtyvxfs MUP+CM1A1uBGpL0XEdL0W1FQnVfw5+f4WpaG2qW9KFVrv3S631ljRw3UwEn+pGtt AqDx3KoV7r6ho6GRN18+RL9L4mq6uc3turJraOtrCBzNqOdFVg44qgKzVhpFP515 dR7bcm7ESbAGGDgGJJ4sJNaG+grjt0qL5l/ibjLxmWgyW22eGtrloY4fiSUWOmsO uKe0jKSX7ts8JUr4phvKheRg8K8akbAm1NrQ8spHo34oxJwNgKesoWR1RYGuPDxo CwNIASeivPnq7xRNjn0XZtonBwnxPYMcmIltwTtKVdeEQUA7 -----END CERTIFICATE-----Generated at Sat Jun 13 15:36:26 2026 by rpki-client