$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa File: 858d2db0-cf70-3659-a965-60917e6c90e8.roa (raw, json) Hash identifier: 5LuyoW9VX+G4pjNWUcLRFtpUzMa5BC6lIqkbL267qhI= Subject key identifier: 57:2A:50:DB:B6:58:11:9E:DD:17:B7:6B:9F:DA:77:02:FB:D8:AA:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0435D2901B06CE7DBB666980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 22547 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d2:90:1b:06:ce:7d:bb:66:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=a9ec96f7-eaec-4478-9b6c-f4ba987b45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:ea:58:a3:45:81:6c:75:0b:ff:d7:63:55: e1:f1:c0:6d:ff:1e:1d:3b:4c:02:22:00:ed:33:3d: dd:3f:f4:c5:f6:4f:15:bf:7a:37:50:f3:a6:15:e1: 4c:78:f3:f4:ca:a5:be:29:c4:43:38:4d:2b:9c:8c: 41:ad:3a:94:f6:ff:ff:6e:69:15:41:3e:14:d4:fa: d2:49:0b:27:c0:31:0d:be:c3:43:ec:0f:cc:45:bc: 3f:df:b6:3d:b3:ce:79:45:d6:59:b2:a3:bc:7a:8e: f8:0a:ec:49:f6:3b:82:c1:46:4e:7b:aa:5c:6c:88: 21:a2:48:ac:18:42:f4:eb:20:a1:dd:c5:60:01:cf: f4:e1:95:ce:f2:8b:a1:2a:7e:79:31:17:d0:78:aa: c1:94:8d:40:17:7f:e0:24:c1:18:03:c6:27:f8:e6: 68:15:1f:86:dd:ac:4e:7c:4b:20:4d:3e:3e:6c:86: 3b:7d:21:5f:24:20:73:7e:8c:81:5d:88:f4:6f:33: 02:06:2d:e0:33:2a:c1:8f:b9:1d:1e:36:ad:25:92: 0a:18:15:0a:6e:49:58:ec:19:2e:c1:0b:45:a7:0e: 03:47:35:3f:01:32:c1:e6:32:99:19:54:d1:1d:3d: da:64:37:d2:42:dc:d3:dc:1a:6c:ae:eb:01:05:23: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:50:DB:B6:58:11:9E:DD:17:B7:6B:9F:DA:77:02:FB:D8:AA:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f2:d8:b4:71:23:db:f6:df:3f:06:67:14:d4:91:46:bf:01: 3d:08:88:18:e6:46:09:4a:4f:c8:2b:6c:f7:04:1d:e7:de:a2: c5:ae:a4:aa:d6:86:8a:09:7a:79:a4:bb:de:40:1c:e1:78:a4: b0:eb:b5:06:07:4c:8a:cf:46:16:1d:80:cc:37:c1:30:6c:cd: e4:9d:82:f3:94:f3:12:fe:9d:47:f1:fd:fe:e3:9d:e6:4e:f4: 75:4e:39:ec:5a:29:71:2f:c7:ef:b2:16:d0:d3:15:80:e9:06: c9:e9:79:87:09:36:57:67:07:66:f6:16:85:5c:4d:a5:8d:c1: eb:90:91:ba:ca:1c:af:99:a7:8a:4f:35:ac:ba:63:b1:37:c2: a0:02:d1:f1:fc:bb:3d:64:4e:61:76:6c:a8:2c:e7:d5:21:71: 04:89:50:ee:84:68:a4:76:9a:13:9d:3e:53:1c:bc:49:87:3f: 6b:36:d5:24:ad:5b:20:c4:4a:29:7f:e8:ca:cb:26:35:76:f1: 33:61:56:ed:70:e5:7e:22:3c:07:f5:3e:c4:76:9b:3f:b0:24: 44:f0:37:c1:a0:2b:d2:00:15:bd:c1:3a:f8:8b:6f:af:56:3a: e2:3e:b0:88:fa:04:0e:c8:fe:76:fe:03:94:44:17:b1:1b:ea: c0:d9:80:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENdKQGwbOfbtmaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YTllYzk2ZjctZWFlYy00NDc4LTliNmMtZjRiYTk4N2I0NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H/qWKNFgWx1C//XY1Xh8cBt/x4dO0wCIgDt Mz3dP/TF9k8Vv3o3UPOmFeFMePP0yqW+KcRDOE0rnIxBrTqU9v//bmkVQT4U1PrS SQsnwDENvsND7A/MRbw/37Y9s855RdZZsqO8eo74CuxJ9juCwUZOe6pcbIghokis GEL06yCh3cVgAc/04ZXO8ouhKn55MRfQeKrBlI1AF3/gJMEYA8Yn+OZoFR+G3axO fEsgTT4+bIY7fSFfJCBzfoyBXYj0bzMCBi3gMyrBj7kdHjatJZIKGBUKbklY7Bku wQtFpw4DRzU/ATLB5jKZGVTRHT3aZDfSQtzT3BpsrusBBSMbIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFcqUNu2WBGe3Re3a5/adwL72KqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4ZDJkYjAtY2Y3MC0z NjU5LWE5NjUtNjA5MTdlNmM5MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvy2LRxI9v23z8GZxTUkUa/AT0IiBjmRglKT8grbPcEHefeosWu pKrWhooJenmku95AHOF4pLDrtQYHTIrPRhYdgMw3wTBszeSdgvOU8xL+nUfx/f7j neZO9HVOOexaKXEvx++yFtDTFYDpBsnpeYcJNldnB2b2FoVcTaWNweuQkbrKHK+Z p4pPNay6Y7E3wqAC0fH8uz1kTmF2bKgs59UhcQSJUO6EaKR2mhOdPlMcvEmHP2s2 1SStWyDESil/6MrLJjV28TNhVu1w5X4iPAf1PsR2mz+wJETwN8GgK9IAFb3BOviL b69WOuI+sIj6BA7I/nb+A5REF7Eb6sDZgIs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:38 2026 by rpki-client