$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa File: 8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa (raw, json) Hash identifier: XmC0wHbh8Dj9nu/VZ1eblCjpBGbC8a/APY7/if2j4/8= Subject key identifier: CB:2C:47:32:8C:F3:B6:67:23:9C:77:0E:BA:21:E5:6F:0C:96:D1:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D8884F12FAD31B45105600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 36620 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:4f:12:fa:d3:1b:45:10:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=7108f7ca-05b9-4b10-954b-b3b15a939540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:c1:78:a5:78:c6:81:0c:82:f4:27:c1:59: 5f:63:4b:b3:a9:01:f6:bb:47:5b:42:43:8c:80:b1: 8e:a0:e1:60:28:4c:dc:9c:92:41:61:03:45:fc:32: 2d:bd:7d:2c:34:9f:c6:18:95:eb:a0:cd:8f:87:80: 1b:68:74:68:1f:b4:e9:71:01:0f:30:88:4f:e2:ad: 55:b2:37:58:40:6b:de:55:b8:f3:c3:8e:14:08:ea: c7:be:e9:ec:40:d1:24:7e:9d:68:ec:20:37:ba:05: 77:1e:31:36:a3:69:df:28:d7:95:33:00:85:ad:00: fc:58:13:5c:c5:cc:07:34:7d:65:b5:24:c0:2e:40: ff:19:60:da:d4:6e:42:af:5e:cc:6c:6b:77:aa:db: 49:7a:9c:06:c5:e1:cf:80:68:e5:73:fa:cc:66:95: 4d:ce:c9:a6:64:d1:05:ca:db:ec:24:f2:47:5e:9b: 6d:6f:91:5b:b4:f9:83:5c:93:d8:7b:7e:9b:9e:65: 86:2f:39:b9:be:79:61:bf:87:2e:5e:31:3b:f9:dd: 1b:6f:62:35:f2:42:8c:32:e4:63:2c:25:f5:c2:dd: 74:bc:b3:a9:42:80:4b:c9:4e:e3:21:24:8d:bf:c7: da:67:00:a3:9a:04:94:84:75:0e:c8:65:27:24:68: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:47:32:8C:F3:B6:67:23:9C:77:0E:BA:21:E5:6F:0C:96:D1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:56:f4:48:2a:71:b8:20:fe:b2:8c:4f:b9:50:b9:82:b9:32: ca:c0:7b:2d:51:c7:12:30:a5:de:bc:ff:a5:2c:9f:58:51:47: 9e:d7:b8:5c:1c:30:5b:37:50:2d:e4:dd:f8:bd:b2:ed:53:56: 6b:f8:ae:db:f0:c9:98:ef:23:3f:bd:a5:6b:ca:6c:e6:94:e5: ec:b0:52:36:f0:7d:55:ce:57:3a:0f:d4:6d:69:5a:fb:aa:3c: 72:84:ad:c9:a7:da:98:6e:88:c7:52:b9:e5:eb:0a:18:17:ce: 1d:b3:d2:9b:bc:d0:eb:c1:87:87:22:73:ae:28:c9:ee:2f:05: 30:ff:38:fc:06:f3:17:be:f2:71:81:41:c5:ba:22:76:93:ee: 0f:af:10:db:2d:bc:c4:96:93:e7:dc:6f:14:f7:cb:4f:40:34: 23:c9:cd:97:df:8f:a5:bf:9a:0c:f9:7c:61:db:13:7b:3d:b9: 7f:e5:97:51:57:8d:e6:d8:99:aa:7d:51:6d:e0:79:82:f4:07: 06:c8:93:fd:de:d4:b7:89:5b:c9:90:e5:13:62:3b:39:65:11: 39:17:b2:19:7e:c6:6d:79:74:4a:08:72:16:f5:c5:c2:7c:39: 4f:22:1b:f5:9e:20:47:47:a0:1c:2a:be:bc:35:cd:94:7b:c7: 3b:c9:9e:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IhPEvrTG0UQVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk NzEwOGY3Y2EtMDViOS00YjEwLTk1NGItYjNiMTVhOTM5NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mPBeKV4xoEMgvQnwVlfY0uzqQH2u0dbQkOM gLGOoOFgKEzcnJJBYQNF/DItvX0sNJ/GGJXroM2Ph4AbaHRoH7TpcQEPMIhP4q1V sjdYQGveVbjzw44UCOrHvunsQNEkfp1o7CA3ugV3HjE2o2nfKNeVMwCFrQD8WBNc xcwHNH1ltSTALkD/GWDa1G5Cr17MbGt3qttJepwGxeHPgGjlc/rMZpVNzsmmZNEF ytvsJPJHXpttb5FbtPmDXJPYe36bnmWGLzm5vnlhv4cuXjE7+d0bb2I18kKMMuRj LCX1wt10vLOpQoBLyU7jISSNv8faZwCjmgSUhHUOyGUnJGgv3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMssRzKM87ZnI5x3Droh5W8MltFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGMyZWViNjAtNzdkNC0z ZDFlLThlZjgtZDRlNzJkMzcwODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRW9Egqcbgg/rKMT7lQuYK5MsrAey1RxxIwpd68/6Usn1hRR57X uFwcMFs3UC3k3fi9su1TVmv4rtvwyZjvIz+9pWvKbOaU5eywUjbwfVXOVzoP1G1p WvuqPHKErcmn2phuiMdSueXrChgXzh2z0pu80OvBh4cic64oye4vBTD/OPwG8xe+ 8nGBQcW6InaT7g+vENstvMSWk+fcbxT3y09ANCPJzZffj6W/mgz5fGHbE3s9uX/l l1FXjebYmap9UW3geYL0BwbIk/3e1LeJW8mQ5RNiOzllETkXshl+xm15dEoIchb1 xcJ8OU8iG/WeIEdHoBwqvrw1zZR7xzvJnmk= -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:42 2026 by rpki-client