$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/883e2ee5-8f49-3bec-ba5a-622a41b130b7.roa File: 883e2ee5-8f49-3bec-ba5a-622a41b130b7.roa (raw, json) Hash identifier: iqHjKL209zFJCWQrAvxu8KS5vXE25wDTATSV2NhqpTk= Subject key identifier: 48:BB:DD:61:63:1F:FB:01:30:4A:F0:ED:6D:E1:D6:03:9A:FF:95:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88CBFD296D3A69A3B8F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/883e2ee5-8f49-3bec-ba5a-622a41b130b7.roa Signing time: Tue 19 May 2026 14:10:35 +0000 ROA not before: Tue 19 May 2026 14:10:35 +0000 ROA not after: Mon 17 Aug 2026 14:10:35 +0000 asID: 396585 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8c:bf:d2:96:d3:a6:9a:3b:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:35 2026 GMT Not After : Aug 17 14:10:35 2026 GMT Subject: CN=d4e4c505-1f39-47c4-a6d8-0c6ae96c30c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:c6:8d:92:28:0d:c6:63:96:82:6c:5b:4c: 76:ae:b0:26:7e:79:64:2b:cc:ca:51:48:f9:24:a5: 69:4a:38:8f:87:a5:de:57:e0:b4:da:fd:c0:9a:20: a8:e6:6e:49:92:f4:24:cf:4f:34:a9:f7:7a:3b:40: a8:48:c9:fb:41:7f:84:f9:0c:b9:9a:49:e8:78:02: ad:28:34:b1:b7:72:e0:f0:1b:2d:90:a7:84:5c:f9: d3:00:82:5a:95:bf:50:2a:83:4e:63:9a:59:0a:cd: 6e:84:13:21:a0:d3:d3:53:29:c2:75:9c:41:2a:e4: 40:93:f9:b6:39:2c:a9:1f:3c:25:e9:da:c9:ce:2b: e3:83:0c:dd:43:4b:10:f4:9d:36:4c:94:f5:13:95: a3:cc:1e:28:ae:b8:70:36:92:05:49:27:a8:2f:c7: 13:06:7a:fc:3e:e3:4a:a9:2f:77:65:3c:0f:50:4f: d8:03:84:a1:f0:85:07:49:42:1f:b4:2f:3c:5d:d3: 04:2a:0c:50:0e:0d:25:fa:23:f0:4e:1a:0c:ae:43: 20:e3:7f:c8:92:d5:a5:f7:06:5a:0a:6a:14:ec:a7: 94:61:c9:55:0f:27:ea:73:d9:8c:5e:dc:04:9c:08: 39:1f:67:49:b7:97:df:7f:de:7b:a5:d4:3f:7d:df: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:DD:61:63:1F:FB:01:30:4A:F0:ED:6D:E1:D6:03:9A:FF:95:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/883e2ee5-8f49-3bec-ba5a-622a41b130b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:48:e8:c7:24:11:5f:4e:53:15:00:db:f7:1f:41:f3:5a:6c: 29:78:12:72:ae:3e:c3:8a:55:d4:4c:af:29:e0:35:53:6e:0c: 02:9b:a1:78:c4:5c:a7:4b:d4:d8:01:11:73:e2:3f:3b:c4:0d: 55:d0:d6:e2:d4:99:2f:45:9a:53:2b:0f:d2:43:68:2d:5e:d6: 95:6e:b5:a7:e8:b3:bf:a3:ff:2e:ec:55:56:50:b0:3d:42:6a: f7:d5:ef:3a:72:bb:41:90:a5:27:a8:09:54:09:cd:57:fd:a4: 8e:10:a8:5c:95:8c:c6:81:25:0f:7b:42:ac:e0:4c:5f:5e:25: cf:ac:09:00:2f:3b:93:d1:1d:ae:92:e9:d7:99:38:53:e6:15: 1f:da:91:9c:35:3c:f6:6c:90:1a:35:44:9f:78:96:08:4b:4e: 0a:ba:3c:33:5e:c6:3a:35:05:b1:83:e7:1a:a3:b5:19:ae:16: e0:e6:92:b9:b9:19:e7:fd:72:16:14:67:33:e6:bd:e4:6e:ba: 66:c7:63:82:80:1e:91:a4:04:03:9e:51:e9:39:ef:5e:21:e3: 8c:81:03:61:a1:a4:aa:d3:07:65:77:f3:16:56:4e:cf:83:71: fb:34:05:00:fd:90:7f:aa:aa:db:8d:a8:e8:57:77:76:b7:93: 5f:30:cf:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2Iy/0pbTppo7j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk ZDRlNGM1MDUtMWYzOS00N2M0LWE2ZDgtMGM2YWU5NmMzMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxajGjZIoDcZjloJsW0x2rrAmfnlkK8zKUUj5 JKVpSjiPh6XeV+C02v3AmiCo5m5JkvQkz080qfd6O0CoSMn7QX+E+Qy5mknoeAKt KDSxt3Lg8BstkKeEXPnTAIJalb9QKoNOY5pZCs1uhBMhoNPTUynCdZxBKuRAk/m2 OSypHzwl6drJzivjgwzdQ0sQ9J02TJT1E5WjzB4orrhwNpIFSSeoL8cTBnr8PuNK qS93ZTwPUE/YA4Sh8IUHSUIftC88XdMEKgxQDg0l+iPwThoMrkMg43/IktWl9wZa CmoU7KeUYclVDyfqc9mMXtwEnAg5H2dJt5fff957pdQ/fd+IswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEi73WFjH/sBMErw7W3h1gOa/5VqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODgzZTJlZTUtOGY0OS0z YmVjLWJhNWEtNjIyYTQxYjEzMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpI6MckEV9OUxUA2/cfQfNabCl4EnKuPsOKVdRMryngNVNuDAKb oXjEXKdL1NgBEXPiPzvEDVXQ1uLUmS9FmlMrD9JDaC1e1pVutafos7+j/y7sVVZQ sD1CavfV7zpyu0GQpSeoCVQJzVf9pI4QqFyVjMaBJQ97QqzgTF9eJc+sCQAvO5PR Ha6S6deZOFPmFR/akZw1PPZskBo1RJ94lghLTgq6PDNexjo1BbGD5xqjtRmuFuDm krm5Gef9chYUZzPmveRuumbHY4KAHpGkBAOeUek5714h44yBA2GhpKrTB2V38xZW Ts+Dcfs0BQD9kH+qqtuNqOhXd3a3k18wz8Y= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:57 2026 by rpki-client