$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa File: 9fa7604e-6116-387d-b30a-5905d9aea60c.roa (raw, json) Hash identifier: Ko+NysDrq5RfNQLDf6KbvS6a+NSv/OOL6kBlkJo3Alo= Subject key identifier: D0:D8:DE:D7:8B:1B:9A:71:0F:CD:24:04:79:0E:A9:0E:BE:A5:38:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F0E9509D02B0D9DA51CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 397197 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:0e:95:09:d0:2b:0d:9d:a5:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=35d02467-0027-4f69-aae0-4057ddf85a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:fd:67:4a:1e:7f:f1:b7:cb:fb:ef:41:2d: e1:72:36:18:e6:0c:41:c6:6a:6b:08:67:d3:4c:b1: 34:ac:61:2a:8e:33:91:0c:8b:e6:3e:3d:2a:a7:3c: e6:24:f5:b9:a6:c5:d0:2d:fd:b3:32:4a:35:79:32: 25:27:9d:f8:62:c6:9d:07:36:30:2d:c5:81:8e:27: 55:23:25:65:f8:68:53:bb:5b:96:ad:5b:f1:a3:ca: 30:9b:5f:76:bd:c3:8e:03:51:45:d6:c9:0d:dc:3e: e4:9c:b1:5d:99:34:cd:a0:56:f4:de:b9:cc:42:a0: 38:ce:83:5a:0e:f0:3a:f5:27:df:67:c5:96:d0:1b: 9e:08:0d:3e:5b:e1:ec:b8:56:e3:e3:94:df:67:f3: da:60:f2:66:8b:f0:a6:9d:c2:10:a2:35:32:74:29: db:fe:2e:6a:10:bc:fe:c3:91:24:47:0f:d2:b2:d1: 27:5c:aa:06:cd:6b:c8:81:b7:7d:eb:b8:67:c2:15: 89:1e:44:88:ac:7c:28:aa:e3:63:be:34:1b:2a:18: af:5c:e8:75:d4:6a:5d:39:62:84:25:ab:98:94:01: ca:2f:79:53:f5:08:12:00:4b:45:8b:74:2e:a4:45: ba:a1:e2:87:fb:14:94:b6:ac:07:75:89:7b:09:55: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:DE:D7:8B:1B:9A:71:0F:CD:24:04:79:0E:A9:0E:BE:A5:38:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7c:6d:c3:08:83:38:8c:c7:81:e9:2e:ce:c4:42:07:2a:31: e9:54:96:56:03:fd:1e:c6:7d:c1:2b:9f:97:7a:b5:32:66:be: ce:03:f3:1d:f4:95:c7:09:2d:17:35:cd:f0:47:db:a3:fa:a8: 8b:25:d7:47:f7:d0:db:6f:f7:26:46:15:4c:a3:49:45:3d:4d: 1c:f2:5f:ff:48:0f:49:4f:ea:5e:c4:9d:6f:15:fb:d2:86:88: fb:f3:50:95:38:fd:b0:66:8f:9a:21:f6:a6:f6:d7:f2:8b:b0: 48:f7:29:13:e5:09:f3:7c:75:66:d1:70:f9:29:59:c1:1b:b1: 85:43:3d:bd:de:a5:28:a0:62:8b:e9:87:b3:11:be:cd:20:88: 83:ba:c9:dd:83:89:18:0d:24:44:4d:e0:72:a6:ee:c8:8f:07: cd:c5:c0:29:e8:3a:8e:2d:1d:47:3d:d2:c3:b4:dc:5c:5a:c5: 3f:8d:48:aa:85:28:2e:d4:32:28:5a:f2:8f:87:e2:56:3b:c2: 2d:d8:65:2f:10:fe:9f:55:55:98:5b:48:f6:c4:d7:2d:73:49: 1e:44:c3:5a:50:f5:97:f6:1c:0c:f0:89:55:b3:9c:a5:ee:01: a5:3e:bd:8d:d5:e9:41:b1:c5:49:9b:eb:11:59:bd:b2:35:3b: 4c:f2:b8:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPw6VCdArDZ2lHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk MzVkMDI0NjctMDAyNy00ZjY5LWFhZTAtNDA1N2RkZjg1YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiD9Z0oef/G3y/vvQS3hcjYY5gxBxmprCGfT TLE0rGEqjjORDIvmPj0qpzzmJPW5psXQLf2zMko1eTIlJ534YsadBzYwLcWBjidV IyVl+GhTu1uWrVvxo8owm192vcOOA1FF1skN3D7knLFdmTTNoFb03rnMQqA4zoNa DvA69SffZ8WW0BueCA0+W+HsuFbj45TfZ/PaYPJmi/CmncIQojUydCnb/i5qELz+ w5EkRw/SstEnXKoGzWvIgbd967hnwhWJHkSIrHwoquNjvjQbKhivXOh11GpdOWKE JauYlAHKL3lT9QgSAEtFi3QupEW6oeKH+xSUtqwHdYl7CVXRNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNDY3teLG5pxD80kBHkOqQ6+pTggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZhNzYwNGUtNjExNi0z ODdkLWIzMGEtNTkwNWQ5YWVhNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyfG3DCIM4jMeB6S7OxEIHKjHpVJZWA/0exn3B K5+XerUyZr7OA/Md9JXHCS0XNc3wR9uj+qiLJddH99Dbb/cmRhVMo0lFPU0c8l// SA9JT+pexJ1vFfvShoj781CVOP2wZo+aIfam9tfyi7BI9ykT5QnzfHVm0XD5KVnB G7GFQz293qUooGKL6YezEb7NIIiDusndg4kYDSRETeBypu7IjwfNxcAp6DqOLR1H PdLDtNxcWsU/jUiqhSgu1DIoWvKPh+JWO8It2GUvEP6fVVWYW0j2xNctc0keRMNa UPWX9hwM8IlVs5yl7gGlPr2N1elBscVJm+sRWb2yNTtM8rjG -----END CERTIFICATE-----Generated at Sat Jun 13 18:26:29 2026 by rpki-client