$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: eCxTPAEgbMFD51BDuZA1/QGTcLcwu/f3IwCH3IjRnoc= Subject key identifier: 0A:00:6D:0D:D4:CB:CE:D9:A2:CA:EC:42:F3:F8:98:BB:A5:D7:03:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0436171FAB74674735C71400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:17:1f:ab:74:67:47:35:c7:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=0c72b28b-4d05-4fd6-b8f1-1bba38ca6d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:35:74:b5:d9:e7:fa:55:7e:3c:88:74:4a: 61:60:94:5c:74:de:48:6c:f9:a7:0f:c8:ef:60:73: 07:53:04:48:c2:45:34:6a:d4:e0:8c:d1:4e:de:8c: b6:80:6f:82:b9:77:61:c7:89:c8:b6:b1:1d:43:ba: 44:0e:4d:e4:d9:91:dc:6e:49:9b:64:6c:a7:9c:66: 99:64:3b:1f:6c:00:4c:71:47:4c:5f:bd:2d:34:d9: 78:ab:8a:e6:64:7e:af:08:f8:a8:0d:04:1a:80:99: 99:c5:fb:d8:c9:5a:f9:27:75:2e:f5:73:d1:16:a8: ad:93:b5:6c:e0:e4:dd:2b:c5:3c:e5:0d:97:0f:9a: 1d:30:b9:f4:ac:0d:c2:d3:28:b3:57:11:0e:74:8c: 0f:0f:4a:cc:0d:7d:1a:25:be:38:33:42:a7:a7:24: ba:74:20:2e:de:87:d7:a2:63:1d:d2:d9:ee:2c:23: 6e:e0:f3:29:6a:0d:6f:f8:03:1b:f6:cb:16:a9:38: 7c:b9:8a:fa:95:84:dd:88:6b:c4:b9:af:50:09:82: 70:39:08:3b:55:e9:b8:09:72:90:b8:31:78:27:ed: 8f:52:99:b6:7f:28:58:34:a7:f4:42:fe:d1:25:71: e6:a0:71:56:cf:f8:65:73:91:8c:cc:82:55:93:21: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:6D:0D:D4:CB:CE:D9:A2:CA:EC:42:F3:F8:98:BB:A5:D7:03:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:93:37:5a:10:68:d4:2f:a3:88:6f:25:99:90:13:1a:0e:ab: b8:af:60:17:01:13:e0:48:74:0f:41:ea:cb:5b:be:3e:0d:f4: 41:80:f6:5b:5a:47:f8:70:5f:e5:20:dc:0c:f1:d7:4c:95:27: fc:10:c9:41:c0:6f:09:d4:46:b4:6c:1f:69:da:70:9b:4b:2e: 61:be:12:54:67:e7:aa:de:4c:54:a9:6b:da:a0:10:b8:71:16: 98:89:3c:0c:36:0c:c9:ed:e1:f9:85:02:f1:20:7c:54:eb:a7: 4d:f9:8d:35:b3:4d:35:28:bc:2c:34:ce:b3:48:36:62:67:dd: 81:e4:3d:d8:3b:25:1f:7f:07:08:0b:76:52:fa:1e:a4:e1:31: 6e:96:77:e3:85:d3:13:49:d9:21:4b:a8:92:4d:7a:6e:0e:f8: 0d:33:a3:b9:80:00:21:04:08:4c:92:bc:e5:4a:a1:3d:95:c0: c5:a0:f5:16:cd:d1:d5:67:85:ce:b1:59:84:19:ca:cc:37:19: 62:c7:2c:37:bb:0a:fb:dd:86:1c:3c:68:11:45:64:51:bc:aa: 7c:54:fa:69:84:d0:f5:e1:5c:10:a3:12:bf:ec:98:21:c8:92: aa:16:5b:e9:73:6c:85:f2:50:dd:a0:41:78:74:8f:ca:2c:12: 02:09:7c:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENhcfq3RnRzXHFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MGM3MmIyOGItNGQwNS00ZmQ2LWI4ZjEtMWJiYTM4Y2E2ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FQ1dLXZ5/pVfjyIdEphYJRcdN5IbPmnD8jv YHMHUwRIwkU0atTgjNFO3oy2gG+CuXdhx4nItrEdQ7pEDk3k2ZHcbkmbZGynnGaZ ZDsfbABMcUdMX70tNNl4q4rmZH6vCPioDQQagJmZxfvYyVr5J3Uu9XPRFqitk7Vs 4OTdK8U85Q2XD5odMLn0rA3C0yizVxEOdIwPD0rMDX0aJb44M0KnpyS6dCAu3ofX omMd0tnuLCNu4PMpag1v+AMb9ssWqTh8uYr6lYTdiGvEua9QCYJwOQg7Vem4CXKQ uDF4J+2PUpm2fyhYNKf0Qv7RJXHmoHFWz/hlc5GMzIJVkyHszwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAoAbQ3Uy87ZosrsQvP4mLul1wNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSTN1oQaNQvo4hvJZmQExoOq7ivYBcBE+BIdA9B6stbvj4N9EGA 9ltaR/hwX+Ug3Azx10yVJ/wQyUHAbwnURrRsH2nacJtLLmG+ElRn56reTFSpa9qg ELhxFpiJPAw2DMnt4fmFAvEgfFTrp035jTWzTTUovCw0zrNINmJn3YHkPdg7JR9/ BwgLdlL6HqThMW6Wd+OF0xNJ2SFLqJJNem4O+A0zo7mAACEECEySvOVKoT2VwMWg 9RbN0dVnhc6xWYQZysw3GWLHLDe7Cvvdhhw8aBFFZFG8qnxU+mmE0PXhXBCjEr/s mCHIkqoWW+lzbIXyUN2gQXh0j8osEgIJfOo= -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:22 2026 by rpki-client