$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: 8ftLvRcLm3fJrQ1H/nS2t2LH/0L2dYj6uvbzdymjE24= Subject key identifier: B7:3D:98:A2:51:F9:A4:E9:98:1E:CE:9B:9D:25:64:C6:56:24:6F:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F16BA84A13C422BFF0C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:16:ba:84:a1:3c:42:2b:ff:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=54eb7d54-e0f0-4361-8f5e-83175dd0ec81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:8a:6b:a4:4d:9f:83:68:27:3b:c5:64:ae: 59:25:3a:9d:e8:c7:54:a1:ee:0f:2a:13:2e:ee:b4: 4f:e0:26:67:95:99:dd:5d:95:ab:91:4b:fd:e9:bd: 61:d2:d4:14:2e:5a:b4:d9:5a:ea:0c:ba:0f:ab:3b: af:8d:03:58:e9:b8:e8:0e:67:69:65:50:de:99:8e: 39:39:be:d5:e9:6d:ee:03:d1:7f:40:3d:70:86:4a: f0:57:a1:f8:1e:d9:10:bc:17:29:cc:34:8a:4b:54: 8f:af:c3:b3:e8:be:ba:b2:f1:d0:36:82:fd:f7:cc: 21:61:62:96:12:2a:f4:f3:f3:54:33:39:e7:66:db: f1:8a:4f:f5:21:b0:75:55:50:60:c4:ab:37:43:b1: df:d9:05:9f:86:27:f0:90:7a:41:00:3d:2d:af:2d: d4:05:86:55:84:59:7b:d6:8a:81:dd:58:75:ba:a3: de:d3:60:d3:9f:54:66:ff:84:08:0e:94:93:85:a0: c6:c2:b3:03:5c:7d:e0:80:7f:db:05:1e:08:97:0b: 4d:13:1c:75:76:2f:32:8c:b5:b8:a9:06:38:aa:80: 78:46:d6:25:cc:0b:3f:f0:11:0d:55:c6:6d:c9:b8: d5:33:fb:b9:44:dc:de:54:8b:5a:0a:d0:6d:1e:e9: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3D:98:A2:51:F9:A4:E9:98:1E:CE:9B:9D:25:64:C6:56:24:6F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9a:5c:8c:1a:3b:9a:fc:50:0c:c9:57:0b:81:d9:d1:3f:57: 11:10:67:cc:8d:b6:fa:69:d7:3f:9a:a2:7c:65:27:32:bf:51: 36:e7:3b:bb:34:58:78:7c:68:68:0d:3c:e2:ac:89:ab:1a:b0: 1d:61:b4:6a:ce:70:f3:49:e9:f9:56:01:74:b9:68:63:db:81: cb:1c:24:e1:e6:ab:d6:0e:13:c7:4d:5b:e7:a8:65:4d:86:eb: d6:5d:18:19:5e:23:9d:03:4d:a2:7b:52:80:f6:31:58:dd:6c: f5:43:05:cc:3f:7b:99:cf:2d:60:84:29:a8:42:66:30:5b:f7: 97:6d:ac:b6:4d:4e:8d:de:3e:d1:5f:22:6b:d2:c6:82:41:5d: af:cf:5b:91:36:7e:be:65:89:5c:6e:e4:eb:38:56:85:60:dd: b5:50:84:a7:2e:97:c2:37:bd:e8:bd:67:93:da:9d:c5:4f:56: 5d:4c:27:fa:d6:1c:06:da:18:11:f5:2f:6f:7c:34:5e:7a:3e: 64:fa:c8:dd:b7:0b:1f:65:78:23:63:03:38:64:24:b3:ba:1b: eb:e1:ab:d1:f2:23:e2:1c:8d:32:b7:8f:a1:2b:00:34:6f:96: e0:ae:ba:28:20:eb:3e:a2:92:f2:b6:06:7b:76:aa:f5:c7:c0: d1:60:e4:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4lPxa6hKE8Qiv/DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NTRlYjdkNTQtZTBmMC00MzYxLThmNWUtODMxNzVkZDBlYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlaKa6RNn4NoJzvFZK5ZJTqd6MdUoe4PKhMu 7rRP4CZnlZndXZWrkUv96b1h0tQULlq02VrqDLoPqzuvjQNY6bjoDmdpZVDemY45 Ob7V6W3uA9F/QD1whkrwV6H4HtkQvBcpzDSKS1SPr8Oz6L66svHQNoL998whYWKW Eir08/NUMznnZtvxik/1IbB1VVBgxKs3Q7Hf2QWfhifwkHpBAD0try3UBYZVhFl7 1oqB3Vh1uqPe02DTn1Rm/4QIDpSThaDGwrMDXH3ggH/bBR4IlwtNExx1di8yjLW4 qQY4qoB4RtYlzAs/8BENVcZtybjVM/u5RNzeVItaCtBtHukIMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLc9mKJR+aTpmB7Om50lZMZWJG9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4mlyMGjua/FAMyVcLgdnRP1cREGfMjbb6adc/ mqJ8ZScyv1E25zu7NFh4fGhoDTzirImrGrAdYbRqznDzSen5VgF0uWhj24HLHCTh 5qvWDhPHTVvnqGVNhuvWXRgZXiOdA02ie1KA9jFY3Wz1QwXMP3uZzy1ghCmoQmYw W/eXbay2TU6N3j7RXyJr0saCQV2vz1uRNn6+ZYlcbuTrOFaFYN21UISnLpfCN73o vWeT2p3FT1ZdTCf61hwG2hgR9S9vfDReej5k+sjdtwsfZXgjYwM4ZCSzuhvr4avR 8iPiHI0yt4+hKwA0b5bgrrooIOs+opLytgZ7dqr1x8DRYOR8 -----END CERTIFICATE-----Generated at Sat Jun 13 16:00:58 2026 by rpki-client