$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa File: a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa (raw, json) Hash identifier: njbMYdvSLL950gk0pQB/0SCc/B/7Sr6p4ngKJYY8ags= Subject key identifier: 92:EC:2B:7E:8E:8A:04:63:95:4B:E2:09:57:45:51:2D:17:E0:BD:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D888E75C8365C30C1523F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 36621 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:88:e7:5c:83:65:c3:0c:15:23:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=ccd0305a-0995-4b0f-999f-3da4cf5c13ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:75:bb:2d:00:0e:9b:40:e8:25:ba:dc:b5: 37:6d:76:28:b6:60:0c:0f:5b:cb:6a:7c:97:04:93: 69:85:f3:c7:c0:f2:3a:00:d0:b2:10:36:7d:68:00: 5c:0e:95:32:9c:75:a5:29:b3:c9:41:cb:04:5c:ae: b8:83:10:0e:a6:f7:78:d8:02:79:32:dc:2e:69:3b: 0c:ae:8b:f8:e5:cc:45:c6:1b:22:78:eb:fd:93:d7: d3:fa:01:df:e2:d8:92:82:34:e1:13:bd:42:9d:09: 45:94:e1:60:17:9a:a7:be:12:1a:85:0e:65:fc:e6: e5:46:10:3d:9d:bc:de:43:db:61:41:3f:f8:bb:0e: 6c:e7:34:08:2d:5e:77:ef:03:2e:9c:7a:0a:85:7a: 2b:a0:eb:f4:1a:43:15:2a:75:91:7a:a0:8f:69:78: 2d:81:05:24:69:17:3c:4c:ca:da:59:eb:06:c5:ce: 03:57:d1:a9:cf:fe:3f:b8:78:fc:9f:6d:58:92:39: 1b:48:a3:73:52:d8:7a:97:a0:2e:a3:7a:9d:f6:3d: bd:25:58:1a:a1:6e:91:25:8d:80:e2:00:5b:07:57: 4d:6b:a5:09:ad:b8:8d:15:ba:35:a9:b5:7c:0b:58: ea:40:6d:ba:8f:93:49:d7:b2:f5:81:ee:df:d3:91: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:2B:7E:8E:8A:04:63:95:4B:E2:09:57:45:51:2D:17:E0:BD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1f:76:4e:5d:f6:63:ba:0d:bd:09:9d:3e:e7:11:40:3b:95: 41:34:40:91:3d:2a:92:bb:f9:95:08:31:13:d9:b2:5d:83:a1: 7a:dc:f3:60:c1:b8:23:4d:c4:2e:be:1e:ee:f5:82:df:7e:05: d0:ab:29:40:84:c1:bb:ab:cd:bc:ba:82:0b:29:b1:7c:45:ec: 75:f8:27:e8:65:e8:43:c6:50:1e:0d:96:f4:32:31:0e:c9:b0: 3b:05:ab:ff:f1:95:1f:9a:6a:7d:85:81:94:57:db:b0:65:42: c1:34:35:63:33:10:1c:78:40:e1:41:d1:85:49:25:de:ab:f4: aa:4f:8b:50:56:0a:d0:aa:39:c4:8c:25:e0:6f:24:d8:57:eb: 1d:a1:05:63:08:64:8c:bd:12:1a:16:bf:16:b0:55:6b:cc:dc: 20:8e:c5:50:24:48:d1:a7:e7:c3:80:c3:c2:81:cb:05:1a:85: 06:45:84:a8:d6:03:82:3c:61:2f:91:8e:ed:22:30:95:6e:8b: 41:0c:52:2b:1c:98:b3:b9:f1:16:fa:a0:7c:91:5f:c8:6e:5f: 80:7d:c2:86:e7:54:ac:38:fb:40:44:2d:53:db:1d:4c:f4:58: b9:3f:bd:a3:9f:a0:90:9f:37:aa:b6:0b:d9:bf:d9:9c:9f:37: 65:20:cb:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IjnXINlwwwVI/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk Y2NkMDMwNWEtMDk5NS00YjBmLTk5OWYtM2RhNGNmNWMxM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLp1uy0ADptA6CW63LU3bXYotmAMD1vLanyX BJNphfPHwPI6ANCyEDZ9aABcDpUynHWlKbPJQcsEXK64gxAOpvd42AJ5MtwuaTsM rov45cxFxhsieOv9k9fT+gHf4tiSgjThE71CnQlFlOFgF5qnvhIahQ5l/OblRhA9 nbzeQ9thQT/4uw5s5zQILV537wMunHoKhXoroOv0GkMVKnWReqCPaXgtgQUkaRc8 TMraWesGxc4DV9Gpz/4/uHj8n21YkjkbSKNzUth6l6Auo3qd9j29JVgaoW6RJY2A 4gBbB1dNa6UJrbiNFbo1qbV8C1jqQG26j5NJ17L1ge7f05F+JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLsK36OigRjlUviCVdFUS0X4L2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg1MGQ4ZWItZTdmMS0z ZGY1LTk1ZDUtZDgyZmMwOWQzNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgfdk5d9mO6Db0JnT7nEUA7lUE0QJE9KpK7+ZUIMRPZsl2DoXrc 82DBuCNNxC6+Hu71gt9+BdCrKUCEwburzby6ggspsXxF7HX4J+hl6EPGUB4NlvQy MQ7JsDsFq//xlR+aan2FgZRX27BlQsE0NWMzEBx4QOFB0YVJJd6r9KpPi1BWCtCq OcSMJeBvJNhX6x2hBWMIZIy9EhoWvxawVWvM3CCOxVAkSNGn58OAw8KBywUahQZF hKjWA4I8YS+Rju0iMJVui0EMUiscmLO58Rb6oHyRX8huX4B9wobnVKw4+0BELVPb HUz0WLk/vaOfoJCfN6q2C9m/2ZyfN2Ugy60= -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:49 2026 by rpki-client