$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa File: 900f48b6-6221-3835-8823-0b321e0a5109.roa (raw, json) Hash identifier: ++mX4D2+V20gWFkrxG844U4JunbF/nFAocJ3Wc2Wlbw= Subject key identifier: 98:E0:00:14:01:91:51:C1:D5:0B:A8:BE:20:07:90:DE:DE:29:EF:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D888420E67D4526D9D3A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 396576 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:42:0e:67:d4:52:6d:9d:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=7b70c03b-03d1-4771-a6d1-96bfae47224c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:56:83:5b:41:60:0b:dc:74:3a:a0:b8:85: 15:97:2f:d9:bc:0a:f2:c7:f9:90:57:54:2e:a1:a8: dc:57:c1:fa:99:38:fb:96:6d:f5:01:c9:2d:50:63: 4f:50:10:71:89:37:39:43:83:db:d4:6d:1d:2a:fb: a0:bd:7e:98:33:10:ce:55:d4:d6:74:0c:3a:e0:60: 48:2d:29:7b:5d:1b:93:49:82:43:62:c2:96:cf:38: b5:04:64:dc:cf:a8:bf:29:eb:31:19:db:84:95:7e: 40:ad:27:18:b9:20:b0:70:2a:43:3d:5a:c7:c7:d8: b1:af:39:d7:1c:4e:30:05:02:4b:ba:33:72:7a:2e: a6:28:b6:78:c9:a2:3d:8d:24:be:56:77:49:a5:b8: 2a:25:2d:b8:62:92:57:4b:68:5c:aa:e3:07:44:d9: 1c:cb:25:53:e5:f7:2c:71:06:24:36:45:80:15:e1: 30:64:cd:c3:54:53:17:ee:05:83:28:56:fb:a8:36: 79:bd:ff:ae:1c:fe:01:2d:d5:c8:ff:bb:c6:8f:28: 49:2b:6f:79:ea:5c:c9:0c:04:a5:9c:32:85:15:bd: 3c:cd:2b:24:e8:6a:45:ab:78:e3:8a:e6:ac:73:0a: 1d:09:5e:64:ef:17:18:27:dc:dd:71:54:0d:06:b6: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E0:00:14:01:91:51:C1:D5:0B:A8:BE:20:07:90:DE:DE:29:EF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:48:1d:e5:6c:3a:41:9a:7e:c0:16:41:59:f0:c5:0f:63:67: 6d:76:7d:9d:93:4f:a7:a8:69:0b:2a:cd:5d:d6:60:9e:e6:93: 68:11:b6:66:5a:dc:75:c4:77:56:76:70:b8:95:5f:b1:5a:ed: e0:c7:66:ea:74:36:78:67:78:d8:af:1b:f2:30:62:e0:dc:40: 1d:72:02:04:32:f0:8d:d3:ee:8f:79:9f:81:70:5d:9b:07:f2: 38:63:ff:f2:35:6f:31:5a:30:90:1e:00:b8:76:e1:ea:48:d6: c3:4b:6c:a9:c1:b4:28:f4:f0:05:29:36:c7:86:5c:d4:1f:32: b3:40:d3:ce:7e:e5:d3:c6:2e:a4:8b:62:89:7a:c7:14:d3:29: b2:a8:42:a8:18:78:6f:84:23:3a:ea:c6:16:4a:5a:5e:7e:80: da:62:90:b8:3e:f5:3e:4d:85:b7:4c:27:15:ec:f6:14:fb:91: 73:b2:4a:fd:af:eb:b2:7f:7d:4b:b9:0c:ae:2a:9f:b2:24:35: d8:61:12:3e:4b:c4:0d:63:f5:71:40:c5:e4:02:f5:c7:d2:8b: a2:74:b4:ef:28:1f:df:73:bb:18:13:ac:ee:c5:44:30:e6:03: 4b:d1:25:cb:ae:9e:e7:68:3c:09:fd:0f:ff:71:8c:e7:45:3f: 89:f7:09:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IhCDmfUUm2dOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk N2I3MGMwM2ItMDNkMS00NzcxLWE2ZDEtOTZiZmFlNDcyMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5VWg1tBYAvcdDqguIUVly/ZvAryx/mQV1Qu oajcV8H6mTj7lm31AcktUGNPUBBxiTc5Q4Pb1G0dKvugvX6YMxDOVdTWdAw64GBI LSl7XRuTSYJDYsKWzzi1BGTcz6i/KesxGduElX5ArScYuSCwcCpDPVrHx9ixrznX HE4wBQJLujNyei6mKLZ4yaI9jSS+VndJpbgqJS24YpJXS2hcquMHRNkcyyVT5fcs cQYkNkWAFeEwZM3DVFMX7gWDKFb7qDZ5vf+uHP4BLdXI/7vGjyhJK2956lzJDASl nDKFFb08zSsk6GpFq3jjiuascwodCV5k7xcYJ9zdcVQNBrbnSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJjgABQBkVHB1QuoviAHkN7eKe+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTAwZjQ4YjYtNjIyMS0z ODM1LTg4MjMtMGIzMjFlMGE1MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhIHeVsOkGafsAWQVnwxQ9jZ212fZ2TT6eoaQsqzV3WYJ7mk2gR tmZa3HXEd1Z2cLiVX7Fa7eDHZup0NnhneNivG/IwYuDcQB1yAgQy8I3T7o95n4Fw XZsH8jhj//I1bzFaMJAeALh24epI1sNLbKnBtCj08AUpNseGXNQfMrNA085+5dPG LqSLYol6xxTTKbKoQqgYeG+EIzrqxhZKWl5+gNpikLg+9T5NhbdMJxXs9hT7kXOy Sv2v67J/fUu5DK4qn7IkNdhhEj5LxA1j9XFAxeQC9cfSi6J0tO8oH99zuxgTrO7F RDDmA0vRJcuunudoPAn9D/9xjOdFP4n3CUA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:52:18 2026 by rpki-client