$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa File: a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa (raw, json) Hash identifier: qRsC1K9wlwk0Wm/7krR7qfLvMJjP55VYmiB5NU/GvPI= Subject key identifier: 06:CC:87:09:AB:09:5D:80:51:A2:6D:C1:10:59:EC:7D:09:84:2B:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0435FF1E6859A9B9D949E920 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 25485 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:ff:1e:68:59:a9:b9:d9:49:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=bb40844c-ff7b-43df-bf81-05239501737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:ef:bb:32:8f:ec:c1:45:48:a6:8b:1c:e4: c8:f2:16:6d:9b:45:29:10:68:34:29:12:ec:93:9b: a8:75:0e:99:00:9c:5c:13:e3:00:40:28:d6:25:4d: 5e:14:cb:af:ff:65:7d:a3:a2:10:7e:74:53:b0:a5: fe:22:71:fc:39:13:1a:83:eb:bd:e0:fe:93:3e:aa: 93:5f:20:87:45:f5:ae:4a:c5:56:d2:27:f9:d1:79: c7:10:9a:8d:c1:5c:de:1f:76:4f:d9:9e:06:a1:f1: 19:0e:ed:bd:bf:ea:a2:94:ca:64:89:cd:fa:75:02: f6:13:db:cf:b7:64:8d:e3:8f:fc:1e:6f:bf:10:95: a9:ab:0e:59:30:a0:8c:d1:b0:c8:a1:33:95:73:66: 19:12:f7:9d:06:eb:33:a4:1a:52:55:b2:5a:fe:7d: 54:98:d9:2e:03:58:cc:c1:5b:f3:15:e3:95:40:69: 33:ee:db:1f:d3:fd:31:20:7a:9c:05:41:1f:0c:20: 02:a9:5c:a9:59:d3:b0:98:e7:44:ea:1e:c7:ae:b3: 9c:8a:83:82:54:54:4e:65:44:7d:e6:85:22:3e:d7: 35:66:23:f8:65:e7:c5:f6:7f:0f:68:74:51:64:05: ea:40:09:c8:df:d6:d7:7c:0e:51:14:d6:8f:53:30: 07:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:87:09:AB:09:5D:80:51:A2:6D:C1:10:59:EC:7D:09:84:2B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9f:68:d7:73:67:8e:5c:38:b4:5f:b1:e2:0d:2f:49:19:91: 39:65:a3:07:ea:c4:26:21:09:56:87:f8:ae:ec:45:81:a7:80: 11:24:fb:50:35:ab:44:6c:6e:32:0d:81:ca:d1:fe:2b:60:f4: a9:65:ce:f8:69:4f:15:8c:98:26:3f:a8:2a:5c:28:fd:c2:4e: e3:f5:4e:2e:a1:10:34:31:49:b5:96:e8:2f:d0:2e:b9:ac:4f: 71:e8:91:35:6f:27:55:fd:a7:b4:7d:19:84:ac:54:17:47:68: 61:60:46:d1:a7:2a:c9:62:3e:78:db:14:92:a0:75:f9:59:0b: 9b:6a:8d:cb:b1:7b:aa:e0:e9:18:f1:e8:df:a2:a1:88:6b:c5: be:f0:9f:df:91:6f:ba:2b:5f:b3:5e:5d:e5:2b:c6:9e:e6:be: fa:de:8b:f9:c8:4a:b3:c0:51:5f:f4:4d:f6:5d:3f:a1:43:06: 94:53:17:25:55:ed:57:c2:be:66:5d:48:22:bf:c1:31:49:a6: bc:af:b0:83:4a:b3:ba:a2:2f:f3:21:e3:71:64:f9:9a:ea:0d: 8a:b1:66:5f:03:04:d1:87:e8:14:83:1b:f0:75:40:1b:07:eb: 38:9a:3f:f5:ad:31:36:81:96:54:cd:0b:5e:16:22:79:47:cc: d4:91:34:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENf8eaFmpudlJ6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YmI0MDg0NGMtZmY3Yi00M2RmLWJmODEtMDUyMzk1MDE3MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxTvuzKP7MFFSKaLHOTI8hZtm0UpEGg0KRLs k5uodQ6ZAJxcE+MAQCjWJU1eFMuv/2V9o6IQfnRTsKX+InH8ORMag+u94P6TPqqT XyCHRfWuSsVW0if50XnHEJqNwVzeH3ZP2Z4GofEZDu29v+qilMpkic36dQL2E9vP t2SN44/8Hm+/EJWpqw5ZMKCM0bDIoTOVc2YZEvedBuszpBpSVbJa/n1UmNkuA1jM wVvzFeOVQGkz7tsf0/0xIHqcBUEfDCACqVypWdOwmOdE6h7HrrOcioOCVFROZUR9 5oUiPtc1ZiP4ZefF9n8PaHRRZAXqQAnI39bXfA5RFNaPUzAHWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAbMhwmrCV2AUaJtwRBZ7H0JhCu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBlMzZiZGUtMWFlZS0z ZmIzLThjMDMtNWY0MTMxYTQ3MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGfaNdzZ45cOLRfseINL0kZkTllowfqxCYhCVaH+K7sRYGngBEk +1A1q0RsbjINgcrR/itg9KllzvhpTxWMmCY/qCpcKP3CTuP1Ti6hEDQxSbWW6C/Q LrmsT3HokTVvJ1X9p7R9GYSsVBdHaGFgRtGnKsliPnjbFJKgdflZC5tqjcuxe6rg 6Rjx6N+ioYhrxb7wn9+Rb7orX7NeXeUrxp7mvvrei/nISrPAUV/0TfZdP6FDBpRT FyVV7VfCvmZdSCK/wTFJpryvsINKs7qiL/Mh43Fk+ZrqDYqxZl8DBNGH6BSDG/B1 QBsH6ziaP/WtMTaBllTNC14WInlHzNSRNA4= -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:26 2026 by rpki-client