$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa File: c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa (raw, json) Hash identifier: PWeGH+EFcd8BW+X+hL59uurIZO6CU2h3vNZlEyRkiAk= Subject key identifier: 89:8B:38:E8:DA:38:26:33:9D:82:85:A0:77:DF:2A:FC:C9:89:87:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E18AF04C6535B9B7BF997F130 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 0 IP address blocks: 2620:74:d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:af:04:c6:53:5b:9b:7b:f9:97:f1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=8ea8ae2c-6178-431a-8d71-57631aa23daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3d:1a:14:c5:a3:1c:aa:14:83:da:2f:66:c6: 45:2a:28:0e:22:ab:55:27:cb:af:55:bf:4f:cb:e0: 37:d5:6b:11:4b:b7:e5:f2:9a:a7:1b:38:84:f3:ca: b0:c7:18:d3:c6:cd:23:6d:50:a0:f3:ae:7b:c9:a0: 8f:3b:d0:34:16:61:2d:a9:f0:0d:ae:0d:88:10:34: e2:b6:5f:ca:a7:69:51:76:5a:7a:8a:9b:a7:e7:5f: 05:ab:75:77:05:07:ac:f0:e8:32:28:76:26:a7:0f: 5b:74:03:65:71:87:0d:7b:c3:d8:52:b8:5d:81:54: 3f:fa:1c:20:6f:df:88:18:ff:2e:4f:59:8b:e4:4b: 37:0a:03:36:74:d6:be:79:75:42:b1:63:be:10:e5: 97:a7:3a:c1:bb:44:20:99:38:82:b5:20:58:51:5e: c9:ae:68:cc:16:31:4a:a1:8f:ab:fb:77:ec:82:d6: 15:06:62:63:8e:70:4c:a3:25:a1:d1:40:08:90:8b: 3e:bf:35:b5:c6:d1:ce:c9:5f:d2:e2:ce:83:ae:fd: aa:b7:a8:7e:ce:55:c3:90:88:f5:eb:1c:eb:6c:4d: 70:d1:06:43:ad:50:f2:a8:0c:9d:53:8e:6b:23:fd: 45:7b:f5:7f:66:f6:68:00:b2:dc:4b:ab:be:ae:50: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8B:38:E8:DA:38:26:33:9D:82:85:A0:77:DF:2A:FC:C9:89:87:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:18:7d:0a:63:6a:d8:4f:7c:7e:54:58:81:02:76:0c:a8:87: 3f:43:d8:4b:67:da:96:40:bd:23:d7:d3:0e:bb:d3:ff:cf:83: 13:cd:f0:ac:3d:c8:41:76:30:df:9b:0b:7f:52:f5:fe:12:6b: d0:26:21:9f:51:5c:10:2c:5d:f0:16:4a:c8:d1:45:a8:e4:73: 2a:65:33:ef:55:85:18:df:80:4d:0a:3f:52:a5:4c:b8:16:88: e3:dc:b0:83:f6:a4:ec:5b:a3:83:ed:15:42:db:80:a5:c4:38: c7:a9:5f:96:27:c0:c3:45:3f:3f:17:70:d4:82:49:2d:ef:f8: 4b:b4:f6:d7:14:18:81:a5:59:2d:8e:ff:3b:ab:e7:5a:9b:b2: 1f:55:8f:71:8a:c7:13:67:06:9f:a3:93:32:a1:6d:4e:5f:08: 7c:59:65:f3:82:03:50:86:ba:a7:55:8e:ee:46:d5:b2:11:4c: 2e:b5:95:23:ea:88:8c:86:29:c7:d6:7b:1c:81:2d:ba:ce:99: 93:a5:b0:54:eb:68:15:05:aa:72:50:e3:62:68:1e:e2:17:55: e4:6b:c7:96:f5:5d:52:b9:c0:98:03:77:ab:92:de:c7:9f:b9: c0:ac:44:96:ba:23:fb:3a:99:c3:2c:5b:1b:59:ce:f5:2b:9e: ae:36:71:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YrwTGU1ube/mX8TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk OGVhOGFlMmMtNjE3OC00MzFhLThkNzEtNTc2MzFhYTIzZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD0aFMWjHKoUg9ovZsZFKigOIqtVJ8uvVb9P y+A31WsRS7fl8pqnGziE88qwxxjTxs0jbVCg8657yaCPO9A0FmEtqfANrg2IEDTi tl/Kp2lRdlp6ipun518Fq3V3BQes8OgyKHYmpw9bdANlcYcNe8PYUrhdgVQ/+hwg b9+IGP8uT1mL5Es3CgM2dNa+eXVCsWO+EOWXpzrBu0QgmTiCtSBYUV7JrmjMFjFK oY+r+3fsgtYVBmJjjnBMoyWh0UAIkIs+vzW1xtHOyV/S4s6Drv2qt6h+zlXDkIj1 6xzrbE1w0QZDrVDyqAydU45rI/1Fe/V/ZvZoALLcS6u+rlAxSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImLOOjaOCYznYKFoHffKvzJiYcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJkYzU5MWMtNmFlNS0z N2MxLWEyY2UtNTAxNWI4MzI3ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4YfQpjathPfH5UWIECdgyohz9D2Etn2pZAvSPX0w670//PgxPN 8Kw9yEF2MN+bC39S9f4Sa9AmIZ9RXBAsXfAWSsjRRajkcyplM+9VhRjfgE0KP1Kl TLgWiOPcsIP2pOxbo4PtFULbgKXEOMepX5YnwMNFPz8XcNSCSS3v+Eu09tcUGIGl WS2O/zur51qbsh9Vj3GKxxNnBp+jkzKhbU5fCHxZZfOCA1CGuqdVju5G1bIRTC61 lSPqiIyGKcfWexyBLbrOmZOlsFTraBUFqnJQ42JoHuIXVeRrx5b1XVK5wJgDd6uS 3sefucCsRJa6I/s6mcMsWxtZzvUrnq42cao= -----END CERTIFICATE-----Generated at Sat Jun 13 14:02:25 2026 by rpki-client