$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa File: 8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa (raw, json) Hash identifier: yhvAxocBk5MbevJssYATES7T2TSdoKw1sLF7Xt9bNX0= Subject key identifier: A6:DF:8B:52:C4:CA:ED:6A:B2:43:6D:3D:35:6B:7C:05:6E:D0:6B:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E104F08A52EF025B868F9E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 397200 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:08:a5:2e:f0:25:b8:68:f9:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=4a66ce68-7a6c-44d4-81b9-9a0668654451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:eb:68:3c:2d:b5:4b:df:10:bc:b2:51:e9: 94:5f:4c:56:fa:dd:f2:d1:9a:51:9e:ac:b7:63:05: 2e:57:51:43:5a:ac:32:2d:29:11:81:c7:9b:ea:87: 5d:ea:3f:44:f5:cb:79:ef:c2:d1:91:76:14:47:b1: 87:fa:1f:a8:68:d0:b5:e5:7a:f8:90:33:08:b1:ea: 23:f6:d7:8c:33:1e:0d:fa:6c:73:10:cc:bd:0c:e6: 73:4e:04:9c:26:4f:37:12:2e:0d:d8:3b:b3:c6:33: 76:d1:b2:65:cb:bf:b4:cb:14:77:5b:b8:7c:76:6d: 00:38:2c:a6:31:b9:4c:79:52:29:b8:80:2e:20:02: e5:85:1b:f0:8e:be:84:9d:3c:91:b3:80:a3:7e:9a: f9:7b:49:96:e3:b7:3d:af:56:c3:7e:e5:ff:54:f5: 33:cd:f2:0c:54:fc:2e:52:08:57:f6:62:f3:54:8e: 74:29:aa:e0:c2:86:63:f6:09:e1:4b:9f:67:46:cd: e7:09:33:9d:25:5c:90:27:ad:60:de:19:b5:34:c6: 6b:8a:da:37:1d:a8:f4:92:bb:9f:1b:28:eb:44:e2: 7d:25:be:43:cf:25:a2:22:a8:1a:a2:e7:93:2f:69: 7f:b2:fd:bb:da:7d:be:06:98:e6:eb:f0:9d:31:d1: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DF:8B:52:C4:CA:ED:6A:B2:43:6D:3D:35:6B:7C:05:6E:D0:6B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d7:e0:f7:16:f3:90:2b:ed:5d:d9:ef:cf:64:82:06:38:c1: 16:d8:77:1f:cf:89:ae:b4:ac:d3:2d:dc:5d:7e:79:85:ef:30: 27:49:69:ea:ea:77:aa:e9:0f:c0:5c:12:5b:1d:65:ed:cf:6e: 6d:c5:76:ac:3d:d4:39:60:39:a7:87:40:ca:0b:46:42:43:3e: f4:68:d9:57:49:3c:19:25:93:7d:ff:13:f3:26:bb:d8:76:42: 2d:73:f5:2b:4d:44:41:55:6a:de:dd:f6:1e:58:56:36:3d:e0: 23:1f:56:92:0e:b9:4f:1a:00:a7:8b:af:8e:41:8c:41:c1:7b: 28:5e:44:94:84:bb:7d:a5:a7:fd:95:f2:95:49:74:74:a9:71: cc:0c:e4:2d:9c:ca:9a:d7:c6:a6:a4:4c:10:6f:d0:8f:30:ee: cf:f5:d6:a0:3d:c9:47:c0:be:c5:d6:32:b7:fe:b2:07:e9:d3: dc:20:d4:fa:05:78:68:ae:85:b8:a4:f4:65:6e:6b:a9:13:f7: 28:3e:81:4f:b9:e5:ca:44:94:0c:ed:48:26:df:cd:73:03:f0: 5a:82:c5:aa:a0:9e:35:ba:d3:a5:49:da:81:30:46:8c:d2:0a: 0a:d5:4b:46:29:53:46:45:a7:09:87:b2:ea:55:a7:59:4c:8b: 74:75:a8:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTwilLvAluGj54gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NGE2NmNlNjgtN2E2Yy00NGQ0LTgxYjktOWEwNjY4NjU0NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3raDwttUvfELyyUemUX0xW+t3y0ZpRnqy3 YwUuV1FDWqwyLSkRgceb6odd6j9E9ct578LRkXYUR7GH+h+oaNC15Xr4kDMIseoj 9teMMx4N+mxzEMy9DOZzTgScJk83Ei4N2DuzxjN20bJly7+0yxR3W7h8dm0AOCym MblMeVIpuIAuIALlhRvwjr6EnTyRs4Cjfpr5e0mW47c9r1bDfuX/VPUzzfIMVPwu UghX9mLzVI50KargwoZj9gnhS59nRs3nCTOdJVyQJ61g3hm1NMZrito3Haj0kruf GyjrROJ9Jb5DzyWiIqgaoueTL2l/sv272n2+Bpjm6/CdMdGvUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKbfi1LEyu1qskNtPTVrfAVu0GswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGFmMWFjZWUtMmJmNi0z ZjA1LWJhZjktYjNiOTg3NTYwYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBD1+D3FvOQK+1d2e/PZIIGOMEW2Hcfz4mutKzT LdxdfnmF7zAnSWnq6neq6Q/AXBJbHWXtz25txXasPdQ5YDmnh0DKC0ZCQz70aNlX STwZJZN9/xPzJrvYdkItc/UrTURBVWre3fYeWFY2PeAjH1aSDrlPGgCni6+OQYxB wXsoXkSUhLt9paf9lfKVSXR0qXHMDOQtnMqa18ampEwQb9CPMO7P9dagPclHwL7F 1jK3/rIH6dPcINT6BXhoroW4pPRlbmupE/coPoFPueXKRJQM7Ugm381zA/BagsWq oJ41utOlSdqBMEaM0goK1UtGKVNGRacJh7LqVadZTIt0dahE -----END CERTIFICATE-----Generated at Sat Jun 13 13:22:58 2026 by rpki-client