$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa File: 9b5a120c-3378-33d4-89e7-f09910e1d642.roa (raw, json) Hash identifier: c6fMXL7O5KFy7W+3e1sgiYM/BUirVRnqsi88S7b4EYo= Subject key identifier: 01:0B:0A:BD:DB:EF:CE:29:AD:3E:12:DD:B2:60:95:18:7D:A5:77:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E104F1036A7A6F4D8F7671880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 36627 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:10:36:a7:a6:f4:d8:f7:67:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=27c0c5aa-976c-432b-8b81-aedfd0d15aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:89:06:c3:3d:2d:79:26:24:b9:8b:4a:ae: 80:5a:9a:0a:8b:e7:36:b5:4b:d5:58:14:e0:dc:83: 94:85:36:30:45:5c:3a:6e:de:1a:cb:eb:e9:15:68: fe:30:c5:96:70:11:39:da:6a:d9:81:30:ad:d9:3e: 9b:eb:27:71:31:bc:38:f0:f9:53:98:50:44:84:ab: d2:59:f7:41:7f:da:ab:5a:00:fc:59:cf:f7:4c:68: 92:2c:f2:4d:32:a6:45:77:9d:83:54:93:b7:9c:a2: 61:81:ae:cf:2c:9a:f5:f6:55:73:53:1f:d1:fe:ae: 71:c1:65:20:27:2d:e7:e1:24:8d:89:9f:a8:7f:1e: 8b:36:32:a6:ec:c0:1c:d6:fa:3e:7d:76:48:49:b6: cb:5c:7d:7b:1b:3a:85:c1:d9:b6:eb:6b:1d:3c:13: 00:cc:ec:f6:da:ac:12:bd:e7:88:c4:ea:32:9a:e9: 25:1e:cb:90:c9:c6:ab:8d:91:69:48:fd:63:2a:92: 4e:c2:51:bf:97:a9:bc:07:88:d1:96:a2:30:0a:bf: 0a:32:7a:43:fb:a2:f8:f2:81:44:b5:a8:33:6f:bf: 3b:cf:cb:52:eb:3e:a4:4d:39:54:8a:a9:aa:f8:c1: 52:a9:48:32:f0:e5:7b:c7:2a:52:a8:31:4e:24:8d: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0B:0A:BD:DB:EF:CE:29:AD:3E:12:DD:B2:60:95:18:7D:A5:77:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5a120c-3378-33d4-89e7-f09910e1d642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:02:42:96:c0:ba:c4:9b:9b:91:54:41:4c:e6:18:0c:16:7f: 71:7a:a8:93:10:bf:fa:2b:d2:5f:7d:52:92:71:fc:cf:16:ea: 2e:81:f8:2e:55:28:d4:ab:be:01:fc:ce:f8:95:d4:db:29:21: e5:85:ec:1b:31:cf:50:b8:d1:22:3f:3f:97:37:b5:c5:9d:a5: df:01:c7:27:fa:52:7a:18:83:e0:f0:48:8b:c2:12:f2:5d:97: 9b:fe:95:fb:ac:f2:fe:f6:4e:5a:fc:7f:18:6c:5f:2c:a7:d0: fa:19:1f:8d:9f:04:2d:4a:d4:a9:fb:ae:5a:d5:03:57:77:7d: a1:e1:57:57:f5:93:cd:9e:e6:c8:77:5e:f9:c4:66:ce:b0:c9: 21:ca:6f:32:39:4a:d2:0f:35:ff:d3:9e:ad:1d:56:eb:fc:c9: 86:31:b4:bc:a7:f4:8f:6f:cf:e2:77:a1:13:ca:1c:c5:28:52: 8b:f9:6e:95:2a:fb:1d:bf:d6:66:74:4a:3f:e0:87:c5:db:5e: 95:9d:26:fc:92:75:62:1d:36:ab:a8:3a:df:e4:52:9f:fc:b2: 1b:4a:2a:a9:07:5f:ca:92:98:5f:90:b4:c8:54:35:dd:5e:5b: 63:1a:13:13:87:4f:15:a8:8f:44:3f:51:7c:1e:d7:9e:50:d3: be:69:2b:52 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4QTxA2p6b02PdnGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MjdjMGM1YWEtOTc2Yy00MzJiLThiODEtYWVkZmQwZDE1YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pWJBsM9LXkmJLmLSq6AWpoKi+c2tUvVWBTg 3IOUhTYwRVw6bt4ay+vpFWj+MMWWcBE52mrZgTCt2T6b6ydxMbw48PlTmFBEhKvS WfdBf9qrWgD8Wc/3TGiSLPJNMqZFd52DVJO3nKJhga7PLJr19lVzUx/R/q5xwWUg Jy3n4SSNiZ+ofx6LNjKm7MAc1vo+fXZISbbLXH17GzqFwdm262sdPBMAzOz22qwS veeIxOoymuklHsuQycarjZFpSP1jKpJOwlG/l6m8B4jRlqIwCr8KMnpD+6L48oFE tagzb787z8tS6z6kTTlUiqmq+MFSqUgy8OV7xypSqDFOJI0QAQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAELCr3b784prT4S3bJglRh9pXcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI1YTEyMGMtMzM3OC0z M2Q0LTg5ZTctZjA5OTEwZTFkNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbAkKWwLrEm5uRVEFM5hgMFn9xeqiTEL/6K9Jf fVKScfzPFuougfguVSjUq74B/M74ldTbKSHlhewbMc9QuNEiPz+XN7XFnaXfAccn +lJ6GIPg8EiLwhLyXZeb/pX7rPL+9k5a/H8YbF8sp9D6GR+NnwQtStSp+65a1QNX d32h4VdX9ZPNnubId175xGbOsMkhym8yOUrSDzX/056tHVbr/MmGMbS8p/SPb8/i d6ETyhzFKFKL+W6VKvsdv9ZmdEo/4IfF216VnSb8knViHTarqDrf5FKf/LIbSiqp B1/KkphfkLTIVDXdXltjGhMTh08VqI9EP1F8HteeUNO+aStS -----END CERTIFICATE-----Generated at Sat Jun 13 19:32:19 2026 by rpki-client