$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8b2872c-7c12-3e89-9be1-bc2d069cb803.roa File: b8b2872c-7c12-3e89-9be1-bc2d069cb803.roa (raw, json) Hash identifier: rDWsABHKzXmifpmLMNJ9bQopUrsrIUJAioXlVGnjvhQ= Subject key identifier: 25:E9:CB:70:53:CD:3E:F8:04:31:FF:C5:7D:9A:E1:A4:D1:68:2C:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B83C4837B474D0E339C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8b2872c-7c12-3e89-9be1-bc2d069cb803.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 396555 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:83:c4:83:7b:47:4d:0e:33:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=25501b54-2b9b-49da-9320-59ba9bdb9179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:f1:7e:eb:b1:7e:e5:86:ef:e1:f9:25:25: b7:4d:08:cb:5a:ea:f5:26:78:b6:a4:28:6d:59:03: c3:1c:43:f9:26:30:29:7b:8e:3c:62:cf:fd:c9:ec: ce:ef:fb:3a:10:90:b8:6d:fe:86:68:f6:68:7c:7c: 00:bb:e3:f5:9a:2b:2e:09:cd:0a:76:29:74:1a:a4: b6:90:e9:2c:d7:eb:5d:1f:a3:57:b3:23:7b:6b:53: de:97:70:a2:62:3b:ee:49:87:a7:87:c6:4f:74:4d: 1d:32:06:94:a2:36:c4:fc:b0:de:41:0a:01:f4:3a: 09:21:64:05:4e:7f:37:25:c3:df:ea:60:98:3b:f1: 0e:17:84:7a:45:24:ca:19:63:64:47:92:34:c6:3d: af:68:54:93:31:1a:d2:34:50:10:5b:02:f5:b9:30: 1b:50:ce:4f:3e:02:72:86:90:20:50:ca:b1:d2:66: 6d:d1:27:16:1d:fe:f9:b1:aa:d0:ca:ec:4c:f5:7c: 75:0a:e7:e1:71:7a:de:af:e7:ac:15:ab:e8:10:74: e8:85:6b:a2:65:8b:29:9e:4c:97:5b:e1:75:33:33: a9:af:b1:46:98:e9:fe:21:ba:9e:9e:23:f2:f0:66: 37:e7:55:35:15:7a:61:66:37:f3:2e:b3:53:45:00: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E9:CB:70:53:CD:3E:F8:04:31:FF:C5:7D:9A:E1:A4:D1:68:2C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8b2872c-7c12-3e89-9be1-bc2d069cb803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:27:42:80:fa:1a:dd:26:0b:78:31:ba:40:54:be:88:94: 1c:f5:00:05:fd:8f:12:33:5c:96:26:33:df:c7:f0:e9:0a:40: 61:cb:be:73:0c:f6:d6:61:20:f8:6f:2b:05:f1:f5:d2:af:79: 13:5c:ec:be:96:1f:89:28:ce:68:d3:d9:f7:41:75:c9:bb:28: d4:61:36:88:2f:bd:32:01:e7:9a:1b:c9:bc:6f:0a:44:22:f7: d7:c6:51:3f:4f:48:35:b7:b0:74:64:18:e4:6b:4a:1e:50:9d: 74:e9:2d:ff:e3:3a:65:05:99:cc:4a:24:df:5f:f6:7a:15:70: 4e:95:67:86:90:a0:8d:65:fa:db:f4:f1:8e:df:a6:39:0f:0d: 45:3f:9f:65:df:40:f7:2e:6c:8e:98:69:1b:74:3b:a6:9b:bf: e5:47:92:4f:9b:57:dc:ae:bb:f3:88:9f:51:70:e3:2a:05:d8: 74:31:bd:9a:01:3e:c8:6f:38:59:62:87:cb:bc:09:35:52:e4: 2c:80:4b:aa:8e:ea:59:52:00:79:f9:42:72:21:f6:0c:26:56: 9a:26:d8:97:7e:7e:92:50:be:96:d5:cd:c6:f8:bb:2d:03:2d: da:4e:f3:a9:06:c7:37:8a:be:60:d6:85:47:98:58:db:cf:b2: 01:58:5a:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IuDxIN7R00OM5wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk MjU1MDFiNTQtMmI5Yi00OWRhLTkzMjAtNTliYTliZGI5MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkLxfuuxfuWG7+H5JSW3TQjLWur1Jni2pCht WQPDHEP5JjApe448Ys/9yezO7/s6EJC4bf6GaPZofHwAu+P1misuCc0Kdil0GqS2 kOks1+tdH6NXsyN7a1Pel3CiYjvuSYenh8ZPdE0dMgaUojbE/LDeQQoB9DoJIWQF Tn83JcPf6mCYO/EOF4R6RSTKGWNkR5I0xj2vaFSTMRrSNFAQWwL1uTAbUM5PPgJy hpAgUMqx0mZt0ScWHf75sarQyuxM9Xx1CufhcXrer+esFavoEHTohWuiZYspnkyX W+F1MzOpr7FGmOn+IbqeniPy8GY351U1FXphZjfzLrNTRQCWXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXpy3BTzT74BDH/xX2a4aTRaCyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhiMjg3MmMtN2MxMi0z ZTg5LTliZTEtYmMyZDA2OWNiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABinJ0KA+hrdJgt4MbpAVL6IlBz1AAX9jxIzXJYmM9/H8OkKQGHL vnMM9tZhIPhvKwXx9dKveRNc7L6WH4kozmjT2fdBdcm7KNRhNogvvTIB55obybxv CkQi99fGUT9PSDW3sHRkGORrSh5QnXTpLf/jOmUFmcxKJN9f9noVcE6VZ4aQoI1l +tv08Y7fpjkPDUU/n2XfQPcubI6YaRt0O6abv+VHkk+bV9yuu/OIn1Fw4yoF2HQx vZoBPshvOFlih8u8CTVS5CyAS6qO6llSAHn5QnIh9gwmVpom2Jd+fpJQvpbVzcb4 uy0DLdpO86kGxzeKvmDWhUeYWNvPsgFYWqc= -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:44 2026 by rpki-client