$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa File: 868a7808-3776-3950-9ff8-03f2405c5ff6.roa (raw, json) Hash identifier: RQCz4TWTuEEN5jQvv0tv1o50ciDENqj70Dxo5FHZ4ug= Subject key identifier: 93:11:31:7E:E5:E1:30:3E:7F:A5:48:78:E5:D5:52:0B:7E:B1:52:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F1216C90F9E2166428980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 396612 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:12:16:c9:0f:9e:21:66:42:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=ec8368cc-b613-4688-ae18-82569a4beb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:d3:a9:fc:af:b6:5e:20:ee:bf:66:bc:b4: 72:1b:26:43:48:31:81:6f:1a:30:5f:4e:84:03:36: 87:78:c0:9f:41:13:31:cb:f1:c6:40:c9:34:db:18: ea:2c:16:44:cc:d3:cd:7e:eb:5c:2c:19:6b:da:17: fa:90:d4:fc:7a:95:39:45:93:9f:8d:39:62:45:46: a4:55:5a:bf:53:10:e8:b0:14:a0:3e:f5:8d:cf:69: 26:30:2b:5a:df:65:67:76:ab:a9:a2:c3:94:49:e9: 8f:bf:10:2e:7f:f4:f1:20:d9:3f:fb:8c:3c:4b:dc: 3a:93:c5:e7:21:8e:a6:d0:19:65:80:cc:59:78:96: fc:42:5f:21:8d:64:2b:bd:15:42:fa:85:56:53:0f: 62:1c:3f:8e:ba:38:33:ba:0b:d1:95:8b:5c:4f:73: 9f:99:91:ed:5c:f0:b4:ef:29:8d:63:94:75:15:48: 54:b0:dd:64:c0:05:da:ee:6e:6c:b4:2a:af:6b:b0: 74:25:3b:20:4b:91:94:c3:eb:f1:cf:44:84:9a:d5: 0f:69:ab:15:fb:0b:68:73:9b:06:6d:7f:cd:b2:8d: fc:f8:13:0b:7a:fa:98:f3:52:a8:c8:7b:ca:90:67: 27:d6:24:78:a1:8c:45:25:96:0c:37:cf:69:0d:d8: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:11:31:7E:E5:E1:30:3E:7F:A5:48:78:E5:D5:52:0B:7E:B1:52:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e7:93:a0:97:51:28:95:78:f1:0c:f2:23:b3:85:de:c3:4a: 1f:b9:b0:b8:29:ed:b4:92:92:09:66:ee:81:1d:5e:2e:83:13: 37:da:9f:ad:54:45:c0:e9:e9:72:e6:6f:d8:f7:c2:bf:9c:85: fd:f3:6c:ea:7a:f8:e3:8e:b2:b1:9e:ab:2f:a2:98:5a:7b:0a: 55:44:8d:73:b1:93:45:42:79:d4:29:af:03:b2:f0:88:c7:e5: d7:76:8e:16:03:69:9d:3c:71:f7:81:be:c1:de:e9:d0:c0:7c: 0f:41:79:46:f0:7f:7e:68:28:bd:68:17:e0:59:f7:1c:47:21: e4:63:00:d1:2f:99:66:6b:f3:44:71:48:a3:24:99:64:19:1d: 1a:64:9e:d9:6c:c0:eb:48:e5:cf:1a:c0:34:c7:c3:b7:e8:38: e5:32:b2:1a:52:9b:38:e0:c6:65:64:86:54:91:8e:59:51:11: 21:f3:d5:1b:c4:8d:59:61:94:31:f8:f2:c3:d6:40:e1:3e:35: 00:d0:cf:68:d9:87:52:5b:42:da:80:8a:8d:11:c7:51:67:5f: 71:75:3f:7d:2b:60:b3:93:f8:78:79:c5:c8:7c:88:b6:97:bb: 51:a5:5d:a3:82:d2:da:69:a8:5e:a6:64:68:7a:23:ae:c8:c1: a6:bd:dd:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxIWyQ+eIWZCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZWM4MzY4Y2MtYjYxMy00Njg4LWFlMTgtODI1NjlhNGJlYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnvTqfyvtl4g7r9mvLRyGyZDSDGBbxowX06E AzaHeMCfQRMxy/HGQMk02xjqLBZEzNPNfutcLBlr2hf6kNT8epU5RZOfjTliRUak VVq/UxDosBSgPvWNz2kmMCta32VndquposOUSemPvxAuf/TxINk/+4w8S9w6k8Xn IY6m0BllgMxZeJb8Ql8hjWQrvRVC+oVWUw9iHD+OujgzugvRlYtcT3OfmZHtXPC0 7ymNY5R1FUhUsN1kwAXa7m5stCqva7B0JTsgS5GUw+vxz0SEmtUPaasV+wtoc5sG bX/Nso38+BMLevqY81KoyHvKkGcn1iR4oYxFJZYMN89pDdgobwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJMRMX7l4TA+f6VIeOXVUgt+sVLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY4YTc4MDgtMzc3Ni0z OTUwLTlmZjgtMDNmMjQwNWM1ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBt55Ogl1EolXjxDPIjs4Xew0ofubC4Ke20kpIJ Zu6BHV4ugxM32p+tVEXA6ely5m/Y98K/nIX982zqevjjjrKxnqsvophaewpVRI1z sZNFQnnUKa8DsvCIx+XXdo4WA2mdPHH3gb7B3unQwHwPQXlG8H9+aCi9aBfgWfcc RyHkYwDRL5lma/NEcUijJJlkGR0aZJ7ZbMDrSOXPGsA0x8O36DjlMrIaUps44MZl ZIZUkY5ZUREh89UbxI1ZYZQx+PLD1kDhPjUA0M9o2YdSW0LagIqNEcdRZ19xdT99 K2Czk/h4ecXIfIi2l7tRpV2jgtLaaahepmRoeiOuyMGmvd10 -----END CERTIFICATE-----Generated at Sat Jun 13 17:47:20 2026 by rpki-client