$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8852cde4-e3cf-35fe-9f52-5a0dd52e752c.roa File: 8852cde4-e3cf-35fe-9f52-5a0dd52e752c.roa (raw, json) Hash identifier: WtA7K+QgSnhvVKWejhj4ms7Ti4GeUN7C3rt9TD9uCIc= Subject key identifier: F4:D0:A0:9C:AE:DA:8F:2E:A8:C1:54:C2:BF:EA:B3:6A:7D:8B:26:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B4E2310F2D218E4F580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8852cde4-e3cf-35fe-9f52-5a0dd52e752c.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 397195 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:4e:23:10:f2:d2:18:e4:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=c2fe3332-d91e-4860-912a-d0c34274a394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:db:73:0f:ad:25:01:b3:8c:40:ea:42:31: 18:68:9f:9c:cd:ee:7d:ed:4b:9e:51:87:20:60:2e: 24:29:ea:cb:0b:3e:83:b4:75:33:f4:a2:9d:62:9e: 16:7d:e1:c6:6c:9b:7d:71:bf:18:1f:27:53:0f:fd: e4:ef:e0:9c:8b:c5:6c:72:4d:b4:ec:f8:fd:9f:8f: 01:d1:82:dd:88:69:1a:88:69:af:bc:4d:d0:d6:85: 5c:bf:49:5d:1f:d3:68:e3:89:38:e1:f7:fa:bd:db: f9:ca:0a:8e:6d:ae:ae:aa:89:ff:27:ea:32:38:57: e6:0b:47:6e:83:24:24:72:d3:df:59:9d:02:bc:91: 52:fc:93:85:cb:4a:04:92:56:6d:51:7d:50:a1:6e: 9c:56:6f:25:44:b9:03:4a:69:82:9e:5c:da:40:8c: 59:d7:6e:fa:1c:34:a9:8b:80:53:d3:e0:ba:cf:90: fc:9c:a6:61:48:96:53:98:2f:6a:24:56:91:5e:83: 5f:4a:a2:02:05:88:b2:76:2e:9b:29:05:b1:51:9b: 5a:a8:14:1f:51:1f:4c:2a:73:89:1d:bc:ba:36:c5: 59:29:ae:43:df:fe:e3:84:52:fc:81:7c:8e:01:83: 13:2f:d8:90:05:45:9c:d2:99:ef:06:fa:41:cb:20: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:A0:9C:AE:DA:8F:2E:A8:C1:54:C2:BF:EA:B3:6A:7D:8B:26:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8852cde4-e3cf-35fe-9f52-5a0dd52e752c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ec:90:c2:4d:43:ff:02:78:da:d8:15:55:68:2e:f0:de:13: 83:b7:0f:51:16:e3:b7:03:d4:f0:b6:90:22:d4:0d:cd:25:dc: c9:c6:cd:3f:2d:59:e5:f0:8c:af:82:0c:bf:07:7b:30:27:52: a8:8a:02:cf:01:e6:c3:da:21:1c:92:f2:72:84:bf:9f:c3:05: 6b:e7:51:31:5a:00:85:12:c2:a2:0b:12:f8:ce:33:e5:3c:90: 27:85:c6:f7:72:b0:7d:a8:e5:dd:1e:06:45:2a:b7:b9:bc:e8: cd:ef:04:d2:cb:94:66:dc:16:0e:42:0e:bc:82:f3:fa:c4:8d: 5f:0a:3e:fb:8c:56:7c:48:31:ee:04:61:b2:da:18:f5:c4:30: d8:6f:7a:ad:04:68:87:95:99:44:c5:8b:b7:07:1e:42:0b:90: cc:2b:ff:04:2e:30:0b:d0:58:31:7b:c2:9b:c0:05:ab:d9:d3: 1f:2e:e9:e3:ba:6e:5a:60:14:83:ae:56:7b:33:72:af:5a:4e: c8:c4:5d:9d:91:7b:49:6c:0f:b9:5e:45:f1:e6:5f:97:2c:a2: 20:5c:b8:d7:68:15:20:5a:35:f4:2e:3c:97:3d:94:f8:64:ad: 7d:6a:26:c3:a3:c1:ac:d3:80:cf:8c:31:4b:c8:d4:f8:f7:19: ea:61:08:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2ItOIxDy0hjk9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk YzJmZTMzMzItZDkxZS00ODYwLTkxMmEtZDBjMzQyNzRhMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMbbcw+tJQGzjEDqQjEYaJ+cze597UueUYcg YC4kKerLCz6DtHUz9KKdYp4WfeHGbJt9cb8YHydTD/3k7+Cci8Vsck207Pj9n48B 0YLdiGkaiGmvvE3Q1oVcv0ldH9No44k44ff6vdv5ygqOba6uqon/J+oyOFfmC0du gyQkctPfWZ0CvJFS/JOFy0oEklZtUX1QoW6cVm8lRLkDSmmCnlzaQIxZ1276HDSp i4BT0+C6z5D8nKZhSJZTmC9qJFaRXoNfSqICBYiydi6bKQWxUZtaqBQfUR9MKnOJ Hby6NsVZKa5D3/7jhFL8gXyOAYMTL9iQBUWc0pnvBvpByyBGxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTQoJyu2o8uqMFUwr/qs2p9iyZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODg1MmNkZTQtZTNjZi0z NWZlLTlmNTItNWEwZGQ1MmU3NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXskMJNQ/8CeNrYFVVoLvDeE4O3D1EW47cD1PC2kCLUDc0l3MnG zT8tWeXwjK+CDL8HezAnUqiKAs8B5sPaIRyS8nKEv5/DBWvnUTFaAIUSwqILEvjO M+U8kCeFxvdysH2o5d0eBkUqt7m86M3vBNLLlGbcFg5CDryC8/rEjV8KPvuMVnxI Me4EYbLaGPXEMNhveq0EaIeVmUTFi7cHHkILkMwr/wQuMAvQWDF7wpvABavZ0x8u 6eO6blpgFIOuVnszcq9aTsjEXZ2Re0lsD7leRfHmX5csoiBcuNdoFSBaNfQuPJc9 lPhkrX1qJsOjwazTgM+MMUvI1Pj3GephCPA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:46 2026 by rpki-client