$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa File: ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa (raw, json) Hash identifier: mglOmFH1k7CX25VCfOlSqMQVGpug5surEsUjVnOXubo= Subject key identifier: E0:9A:3C:33:B7:B4:15:04:79:A3:4C:B6:BE:15:DD:68:96:D6:0E:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E13198F342A02892698630280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396542 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:8f:34:2a:02:89:26:98:63:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=7d5d1d98-6b5a-4a55-9e9c-aa7a3bb19d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:67:6e:ab:cb:36:7c:d5:2b:16:2c:f5:2a: 29:4f:91:4a:ef:23:c4:8b:9d:4f:02:38:6f:91:c3: a3:df:5b:3d:e8:3c:80:3d:ac:9d:f1:b9:59:fd:ed: 94:3c:f8:2c:fc:d8:f9:a8:9f:2f:2e:0b:51:cc:1d: 4a:c5:72:d5:cb:83:32:c1:47:57:5f:94:da:55:ea: a8:d0:f8:d0:02:46:e2:a1:1d:92:13:44:f0:4d:5d: 14:d5:8a:d5:3f:4e:af:d6:9c:fe:73:78:40:62:03: 3e:a4:4a:ea:7a:ed:e3:2a:8b:ca:0c:5c:13:b5:ab: d1:39:af:83:aa:fb:0a:83:ed:71:ae:02:59:b4:23: 89:c0:04:5e:d3:29:80:31:8d:70:8b:32:c1:27:44: 45:01:2c:c9:a4:f6:da:95:11:46:cb:79:b6:3a:e8: be:4a:6f:aa:83:e0:74:5f:51:76:3b:2f:5e:a8:87: 93:f2:b0:a9:d9:3d:ba:09:69:ec:b6:0f:87:35:db: b7:8c:70:18:fb:d2:fa:12:cb:35:86:8b:55:f9:b8: 88:c1:29:56:1a:43:bb:b4:3e:f7:8e:1a:ac:9f:75: 38:77:06:8c:3a:70:49:d4:51:f8:cf:29:2d:ee:ce: 7d:01:b3:ea:10:98:92:97:f6:7f:40:95:88:5d:27: d2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:3C:33:B7:B4:15:04:79:A3:4C:B6:BE:15:DD:68:96:D6:0E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:93:aa:c4:c7:b8:44:e4:6a:10:d4:8a:b4:4c:85:bf:be:4b: 93:fc:aa:75:6e:0b:b9:73:68:74:fa:c5:44:4e:c6:00:b5:f0: ad:52:6e:64:82:70:7f:30:98:3e:78:4e:e8:14:ec:7c:c5:2f: 06:45:81:b3:d0:d9:40:c5:9c:50:d1:a5:6c:8c:ce:85:ef:ab: a4:ab:cc:9c:40:cd:0d:2e:4f:16:fe:e6:20:d6:03:da:05:5f: 3c:f3:39:f4:3b:43:1c:ec:1a:28:58:8c:39:cd:43:79:ac:c7: a5:5a:d1:10:5a:df:ec:f3:2a:87:34:be:c4:b3:70:d2:fe:2e: e9:e5:82:75:a0:3e:bc:2c:a7:99:68:ad:d8:d3:8d:5e:3b:ce: e6:80:17:f9:19:6f:a4:8b:e2:25:38:75:4a:6a:ce:b9:2c:8f: dc:46:00:f2:9c:37:0d:1c:8d:12:89:1f:4e:61:cd:6b:47:51: 2d:a9:1c:af:4e:82:57:2d:42:62:fc:4d:46:34:f2:f6:fe:1c: d9:7a:e1:92:05:cd:bb:31:f9:37:92:92:af:79:26:a4:48:6b: f1:6f:c0:d6:6b:9d:37:dd:74:f9:27:69:05:6e:ce:08:4f:64: bb:6b:d6:98:de:06:52:eb:b9:dd:77:65:de:f4:3c:be:9a:e9: 43:e3:9b:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGY80KgKJJphjAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk N2Q1ZDFkOTgtNmI1YS00YTU1LTllOWMtYWE3YTNiYjE5ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+JnbqvLNnzVKxYs9SopT5FK7yPEi51PAjhv kcOj31s96DyAPayd8blZ/e2UPPgs/Nj5qJ8vLgtRzB1KxXLVy4MywUdXX5TaVeqo 0PjQAkbioR2SE0TwTV0U1YrVP06v1pz+c3hAYgM+pErqeu3jKovKDFwTtavROa+D qvsKg+1xrgJZtCOJwARe0ymAMY1wizLBJ0RFASzJpPbalRFGy3m2Oui+Sm+qg+B0 X1F2Oy9eqIeT8rCp2T26CWnstg+HNdu3jHAY+9L6Ess1hotV+biIwSlWGkO7tD73 jhqsn3U4dwaMOnBJ1FH4zykt7s59AbPqEJiSl/Z/QJWIXSfSmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCaPDO3tBUEeaNMtr4V3WiW1g75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE2MDRlMzctMmNlNy0z ZjgzLThjZjUtMWNlMzVhNWM0OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCTqsTHuETkahDUirRMhb++S5P8qnVuC7lzaHT6xUROxgC18K1S bmSCcH8wmD54TugU7HzFLwZFgbPQ2UDFnFDRpWyMzoXvq6SrzJxAzQ0uTxb+5iDW A9oFXzzzOfQ7QxzsGihYjDnNQ3msx6Va0RBa3+zzKoc0vsSzcNL+LunlgnWgPrws p5lordjTjV47zuaAF/kZb6SL4iU4dUpqzrksj9xGAPKcNw0cjRKJH05hzWtHUS2p HK9OglctQmL8TUY08vb+HNl64ZIFzbsx+TeSkq95JqRIa/FvwNZrnTfddPknaQVu zghPZLtr1pjeBlLrud13Zd70PL6a6UPjmxs= -----END CERTIFICATE-----Generated at Sat Jun 13 13:48:24 2026 by rpki-client