$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa File: a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa (raw, json) Hash identifier: /ColkRqxAieWrCfI9Yxg27HzV8S1nj00bxj7HvUNko0= Subject key identifier: C8:4A:5F:A1:8A:2C:86:B5:F2:9D:68:77:1E:BD:47:AA:9B:2B:B0:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88D719F666C28BE5DA990 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa Signing time: Tue 19 May 2026 14:10:35 +0000 ROA not before: Tue 19 May 2026 14:10:35 +0000 ROA not after: Mon 17 Aug 2026 14:10:35 +0000 asID: 36616 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8d:71:9f:66:6c:28:be:5d:a9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:35 2026 GMT Not After : Aug 17 14:10:35 2026 GMT Subject: CN=fe1c11fa-abf6-4749-bf60-44b3c0131491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:87:60:81:7f:75:ba:df:2f:92:9b:66:5b: 14:10:74:23:25:f9:f0:4c:52:2a:c9:40:c3:74:26: fb:90:bc:92:81:1e:7d:fd:df:73:f9:78:de:c6:b2: 67:da:6a:c0:11:7f:23:ac:36:8d:88:8f:f8:11:99: 1d:36:70:44:4c:34:88:75:c6:f0:73:3f:8a:af:98: 40:c6:95:53:f5:f5:7c:d7:59:ff:3f:bf:e5:00:7d: 69:67:c3:15:cf:dc:5e:34:db:65:27:32:d6:ba:ff: d4:12:9a:1d:f4:e3:9e:6c:d8:c5:33:f0:a2:33:c0: 40:a8:c2:4a:4e:13:10:a8:57:16:6a:08:88:35:08: f4:1a:57:58:78:b8:55:a0:27:b2:4c:a0:f9:46:c0: 1f:f4:d3:4d:f3:67:96:a2:6a:82:5b:2e:ac:cd:5b: 25:98:ba:dc:3f:24:7d:2f:a2:3f:2e:ca:80:f4:b4: a0:51:75:7d:2c:12:61:5a:27:c2:35:c1:f5:7a:42: 56:2c:1c:78:1d:19:6b:de:d2:22:32:30:f8:2f:13: e0:ee:26:cc:97:5e:27:c0:3e:3f:b6:bc:f7:c4:6d: e8:25:38:ad:88:a4:92:16:e3:70:8c:b7:29:39:c2: 91:c1:5b:84:ee:88:5e:df:3b:f4:c3:91:cf:ea:ab: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:5F:A1:8A:2C:86:B5:F2:9D:68:77:1E:BD:47:AA:9B:2B:B0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2b:cc:ad:ab:06:f3:64:d1:fd:ea:ff:d4:cc:f0:8f:66:c0: 7e:b5:83:08:5f:f1:02:39:70:80:4d:96:1b:24:d5:ba:e7:76: 45:5d:43:81:16:8c:f4:ad:f9:e4:45:c9:70:5b:22:a0:0d:7d: 03:95:c9:d5:d5:4f:89:7f:96:8a:9e:d5:39:9b:a8:b8:c2:24: 11:ab:98:bc:a5:dc:ab:51:a0:94:70:28:bd:76:cf:5a:72:99: d4:4a:88:c2:55:a6:ae:49:d0:b3:e1:09:99:32:c4:c7:91:e4: 89:34:bb:44:16:02:f1:4d:34:88:b3:3f:3e:c7:d9:4f:c5:bd: 10:b9:49:d6:dd:24:5e:7f:8a:59:1f:2b:ea:e1:e6:e0:29:63: 84:a3:0b:db:62:09:de:3d:b3:0e:48:39:fd:84:74:5e:a8:10: e0:60:81:c9:14:69:0c:1c:5e:f5:43:c9:e9:90:af:fa:f1:9d: 9f:f5:08:d1:02:1a:ef:38:94:55:ea:c3:82:0c:93:32:1f:46: 98:15:c5:5f:96:23:c8:a7:c5:04:1f:6a:5b:ec:ae:90:4a:43: 10:0a:3f:14:c2:87:f5:19:11:01:28:af:69:9a:9d:30:01:b4: 14:10:af:ab:c1:4a:38:99:ec:c0:5c:40:4c:90:1b:27:30:29: 4d:bd:c1:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2I1xn2ZsKL5dqZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk ZmUxYzExZmEtYWJmNi00NzQ5LWJmNjAtNDRiM2MwMTMxNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZGHYIF/dbrfL5KbZlsUEHQjJfnwTFIqyUDD dCb7kLySgR59/d9z+XjexrJn2mrAEX8jrDaNiI/4EZkdNnBETDSIdcbwcz+Kr5hA xpVT9fV811n/P7/lAH1pZ8MVz9xeNNtlJzLWuv/UEpod9OOebNjFM/CiM8BAqMJK ThMQqFcWagiINQj0GldYeLhVoCeyTKD5RsAf9NNN82eWomqCWy6szVslmLrcPyR9 L6I/LsqA9LSgUXV9LBJhWifCNcH1ekJWLBx4HRlr3tIiMjD4LxPg7ibMl14nwD4/ trz3xG3oJTitiKSSFuNwjLcpOcKRwVuE7ohe3zv0w5HP6qu89QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhKX6GKLIa18p1odx69R6qbK7BgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlkODcyNmUtN2U3YS0z YjE4LThlNDItNDQzNzFkZWIxNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMrzK2rBvNk0f3q/9TM8I9mwH61gwhf8QI5cIBNlhsk1brndkVd Q4EWjPSt+eRFyXBbIqANfQOVydXVT4l/loqe1TmbqLjCJBGrmLyl3KtRoJRwKL12 z1pymdRKiMJVpq5J0LPhCZkyxMeR5Ik0u0QWAvFNNIizPz7H2U/FvRC5SdbdJF5/ ilkfK+rh5uApY4SjC9tiCd49sw5IOf2EdF6oEOBggckUaQwcXvVDyemQr/rxnZ/1 CNECGu84lFXqw4IMkzIfRpgVxV+WI8inxQQfalvsrpBKQxAKPxTCh/UZEQEor2ma nTABtBQQr6vBSjiZ7MBcQEyQGycwKU29wWo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:53:22 2026 by rpki-client