$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa File: 85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json) Hash identifier: uLUh/l+R9NKv92g7vfcCV0h/8pI2KgUDh3x6znmzsHQ= Subject key identifier: 8D:7F:DE:A1:5D:45:14:7A:5B:2B:7A:FE:B1:BD:07:87:4D:80:01:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E043618894911BEB11D6CBD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 396573 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:18:89:49:11:be:b1:1d:6c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=cc6ffb3a-ab47-4c4b-a4d0-85ded1f5c5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:2c:af:ce:3a:25:3e:f4:fb:0f:c5:c8:cd: 47:16:cb:27:f9:80:c8:49:c9:0b:04:25:31:36:e8: 3a:42:4a:a0:13:8f:87:53:ab:05:1d:f0:9b:89:c1: 8b:8f:4b:29:50:db:c6:b4:03:c3:a8:6d:8a:e3:a6: 38:e6:0c:50:6b:75:3e:4a:08:77:88:e6:3f:19:29: c1:e3:a8:13:39:ad:3b:a4:5f:3f:8b:17:84:5b:dd: da:03:00:aa:2b:2c:b8:b1:ef:3a:b5:d1:8a:37:9a: 6b:2e:14:36:52:da:16:66:cf:8a:75:06:ab:70:a8: 56:65:8d:b8:a9:aa:16:22:5d:01:23:5e:7b:be:a2: f1:9e:ac:6b:4e:19:48:1c:a2:45:7a:09:11:30:44: bb:ce:c9:70:c9:3d:86:2f:08:0e:ac:ba:af:5a:bc: d5:58:ed:82:7f:7f:7d:e9:8e:75:f0:8c:41:ee:45: 20:a0:a1:7c:c0:25:3d:20:07:1d:53:f0:6d:32:50: 27:d5:a1:8b:7e:09:c5:60:8f:38:cb:96:5f:80:50: 0b:57:58:51:bc:b8:cb:91:cc:21:15:ea:b4:d3:29: 5a:ce:cb:2c:bb:41:74:b9:b7:a9:67:d0:54:73:81: ac:a2:c4:2d:51:69:eb:50:59:9c:2e:f3:7b:35:50: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7F:DE:A1:5D:45:14:7A:5B:2B:7A:FE:B1:BD:07:87:4D:80:01:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:00:20:d6:4c:61:8c:18:51:cf:65:79:3e:ee:ec:bc:cd:07: 82:24:c6:81:e5:f6:1c:63:41:7f:46:ea:d1:ad:b4:13:fa:b4: 61:77:f4:bf:9a:de:07:a8:e5:62:94:1e:0e:b9:74:3f:74:c2: f3:80:8b:c0:19:71:fe:57:09:7a:91:79:0e:da:6c:14:f5:94: 68:55:4e:c2:7d:ed:b4:03:b7:9d:3b:21:2d:71:fe:bb:6e:aa: a3:06:23:c0:6f:73:08:19:cb:dc:1d:9c:17:d3:d3:44:45:52: 5f:d8:06:b6:0a:86:af:0e:46:c7:33:c9:e3:81:da:d8:86:97: 57:4e:f0:4c:44:cf:f8:d5:7b:55:f3:04:2b:8f:ae:ef:70:41: 50:cd:10:3d:94:5c:c8:ba:24:4a:49:41:27:5a:42:14:a1:e5: 56:a2:a3:43:ba:63:05:91:62:be:9a:95:16:3d:ab:aa:1d:2c: e2:08:79:21:b9:46:af:d6:42:07:2d:29:73:6a:70:8f:79:67: 8e:cb:aa:1f:bd:c0:1b:b1:c5:88:ca:6d:8f:67:a9:82:82:66: 5f:fb:d5:e5:b6:ee:06:74:b8:88:21:b3:28:15:21:2d:a5:b7: 95:e9:19:07:8c:10:3f:b5:89:4a:1b:be:cd:ad:cd:24:4c:15: fb:b1:e6:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENhiJSRG+sR1svYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk Y2M2ZmZiM2EtYWI0Ny00YzRiLWE0ZDAtODVkZWQxZjVjNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoYsr846JT70+w/FyM1HFssn+YDISckLBCUx Nug6QkqgE4+HU6sFHfCbicGLj0spUNvGtAPDqG2K46Y45gxQa3U+Sgh3iOY/GSnB 46gTOa07pF8/ixeEW93aAwCqKyy4se86tdGKN5prLhQ2UtoWZs+KdQarcKhWZY24 qaoWIl0BI157vqLxnqxrThlIHKJFegkRMES7zslwyT2GLwgOrLqvWrzVWO2Cf399 6Y518IxB7kUgoKF8wCU9IAcdU/BtMlAn1aGLfgnFYI84y5ZfgFALV1hRvLjLkcwh Feq00ylazsssu0F0ubepZ9BUc4GsosQtUWnrUFmcLvN7NVDAOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1/3qFdRRR6Wyt6/rG9B4dNgAFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhM2FjNGEtODNmMy0z ZjYwLTkwZmEtZTUwMmU4M2Y3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEAINZMYYwYUc9leT7u7LzNB4IkxoHl9hxjQX9G6tGttBP6tGF3 9L+a3geo5WKUHg65dD90wvOAi8AZcf5XCXqReQ7abBT1lGhVTsJ97bQDt507IS1x /rtuqqMGI8BvcwgZy9wdnBfT00RFUl/YBrYKhq8ORsczyeOB2tiGl1dO8ExEz/jV e1XzBCuPru9wQVDNED2UXMi6JEpJQSdaQhSh5Vaio0O6YwWRYr6alRY9q6odLOII eSG5Rq/WQgctKXNqcI95Z47Lqh+9wBuxxYjKbY9nqYKCZl/71eW27gZ0uIghsygV IS2lt5XpGQeMED+1iUobvs2tzSRMFfux5tA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:05:44 2026 by rpki-client