$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8544c1a-6851-3732-9c6b-c8cd80aad837.roa File: a8544c1a-6851-3732-9c6b-c8cd80aad837.roa (raw, json) Hash identifier: sPXYD6Tehwz2Oa/2QJyl+woqgUcGovCPThZz7DXqoKg= Subject key identifier: B9:67:E0:88:A3:C6:4F:AF:29:C9:09:9E:3E:7D:11:74:67:39:BB:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B271536551F61DA6300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8544c1a-6851-3732-9c6b-c8cd80aad837.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 396603 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:27:15:36:55:1f:61:da:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=f5a6deec-156a-43f4-9f19-fb52755a3763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:37:45:b2:9a:5f:af:fa:69:db:89:9a:2f: 2b:ef:34:82:c0:05:cc:ea:d4:45:e7:f2:61:2f:32: e7:5c:07:ca:8c:86:0e:4d:ce:a8:14:b5:86:0d:31: a5:0b:04:61:c4:d5:04:be:d1:7e:e6:0e:4c:b7:bc: 76:69:d7:e6:48:d8:51:f9:3c:db:f9:f6:6a:71:76: 15:64:cc:d9:a8:99:17:c4:8a:ca:a0:65:15:27:9a: 2e:5f:5c:01:4c:95:31:cc:23:eb:6e:d2:e5:98:48: 25:c1:96:cb:01:36:1e:3a:80:0b:32:3e:09:6c:9d: b6:ba:b4:40:1c:d3:75:6b:8e:0d:54:f3:17:a1:df: db:fc:34:e1:84:3d:28:3c:b4:ef:83:4f:3b:ba:5c: c4:fc:86:88:6a:0b:a9:77:13:33:03:3f:5f:6a:1e: eb:fc:41:f0:88:18:94:9e:e5:76:de:2f:0a:92:04: d6:16:ad:d6:52:70:12:f8:22:dc:eb:62:f0:83:e4: c5:62:11:e4:cb:19:e1:8c:38:79:5b:d1:23:6e:1f: 57:df:42:73:56:91:55:ca:6e:fa:46:fc:ff:d7:e6: 1a:1f:e6:77:fb:bf:37:73:00:82:c5:3d:00:1a:d6: d8:19:91:39:73:df:60:11:3b:7a:e9:38:c7:39:7b: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:E0:88:A3:C6:4F:AF:29:C9:09:9E:3E:7D:11:74:67:39:BB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8544c1a-6851-3732-9c6b-c8cd80aad837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9f:25:c0:61:ef:4e:27:39:a4:16:e6:0f:5c:7a:27:1a:9f: 6b:c6:a2:ec:b1:64:b9:45:e1:5d:bc:9e:45:22:41:25:ad:1e: 8c:2b:b8:95:70:3b:42:55:43:4b:a4:35:a0:16:8c:66:74:4d: de:ce:a9:5f:87:81:31:7b:cf:59:5a:bf:0a:51:a1:a7:50:72: 19:68:10:0f:b8:1a:24:2d:8e:33:76:50:b6:bd:29:93:b6:8a: 6a:85:02:39:52:d5:7a:06:d6:84:24:a0:a2:db:d8:5b:34:67: 99:48:c8:c9:f5:37:9d:ee:af:c6:14:07:f7:d6:c1:30:ec:e8: 84:fb:c3:61:82:ba:0a:c1:00:09:e3:a7:6d:10:59:e5:c8:30: 07:84:bc:75:10:bc:c7:af:cf:c4:8a:77:f8:e6:1f:ee:dc:51: f1:09:0f:5d:92:c7:03:eb:16:2b:0c:7d:ab:29:03:1e:da:6f: 12:9b:f5:a8:fc:86:9c:4f:86:04:88:12:4d:23:33:df:c7:6b: 86:f2:c1:be:3d:c2:06:ef:d9:06:ce:66:49:c6:60:b6:e0:6d: 1f:05:7c:a2:f6:62:33:89:d6:0f:8b:58:28:74:03:1f:8b:97: a4:99:72:af:b4:b9:1c:35:8f:51:7a:24:38:a9:49:ae:2a:99: 8c:b2:3e:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IsnFTZVH2HaYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk ZjVhNmRlZWMtMTU2YS00M2Y0LTlmMTktZmI1Mjc1NWEzNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdI3RbKaX6/6aduJmi8r7zSCwAXM6tRF5/Jh LzLnXAfKjIYOTc6oFLWGDTGlCwRhxNUEvtF+5g5Mt7x2adfmSNhR+Tzb+fZqcXYV ZMzZqJkXxIrKoGUVJ5ouX1wBTJUxzCPrbtLlmEglwZbLATYeOoALMj4JbJ22urRA HNN1a44NVPMXod/b/DThhD0oPLTvg087ulzE/IaIagupdxMzAz9fah7r/EHwiBiU nuV23i8KkgTWFq3WUnAS+CLc62Lwg+TFYhHkyxnhjDh5W9Ejbh9X30JzVpFVym76 Rvz/1+YaH+Z3+783cwCCxT0AGtbYGZE5c99gETt66TjHOXujnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLln4Iijxk+vKckJnj59EXRnObssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg1NDRjMWEtNjg1MS0z NzMyLTljNmItYzhjZDgwYWFkODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADKfJcBh704nOaQW5g9ceican2vGouyxZLlF4V28nkUiQSWtHowr uJVwO0JVQ0ukNaAWjGZ0Td7OqV+HgTF7z1lavwpRoadQchloEA+4GiQtjjN2ULa9 KZO2imqFAjlS1XoG1oQkoKLb2Fs0Z5lIyMn1N53ur8YUB/fWwTDs6IT7w2GCugrB AAnjp20QWeXIMAeEvHUQvMevz8SKd/jmH+7cUfEJD12SxwPrFisMfaspAx7abxKb 9aj8hpxPhgSIEk0jM9/Ha4bywb49wgbv2QbOZknGYLbgbR8FfKL2YjOJ1g+LWCh0 Ax+Ll6SZcq+0uRw1j1F6JDipSa4qmYyyPgU= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:45 2026 by rpki-client