$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c678c4c2-3736-379c-86ba-bfed611fc29a.roa File: c678c4c2-3736-379c-86ba-bfed611fc29a.roa (raw, json) Hash identifier: /izsWzht5jh2Em+2b28J0II3XUfOjXq7LuS/Hrz0uXA= Subject key identifier: 2C:2F:E2:C7:FE:6B:1F:A3:7A:0C:79:70:98:19:30:5B:4A:29:AF:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D889849C2F0FF6EA1B5280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c678c4c2-3736-379c-86ba-bfed611fc29a.roa Signing time: Tue 19 May 2026 14:10:33 +0000 ROA not before: Tue 19 May 2026 14:10:33 +0000 ROA not after: Mon 17 Aug 2026 14:10:33 +0000 asID: 396544 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:89:84:9c:2f:0f:f6:ea:1b:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:33 2026 GMT Not After : Aug 17 14:10:33 2026 GMT Subject: CN=f0fcf622-da85-4e57-b824-201fb2030f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:67:e7:8a:92:bf:0f:53:13:84:af:66:8b: e8:0e:f2:9d:6b:89:f4:22:11:4f:ee:50:3c:dd:ec: c0:12:0e:c3:7d:48:f1:b2:10:1f:5f:14:b6:97:29: eb:4d:11:7b:ee:1b:aa:54:d6:f1:a6:fc:97:f4:1b: 30:71:d1:f3:98:c0:87:a3:68:a6:58:19:71:d9:5b: eb:96:a2:9d:68:e5:9f:02:e4:67:89:87:08:00:b9: 2e:7e:8d:42:77:81:1f:8f:e9:ad:12:b8:b8:73:06: f8:f7:4b:43:2e:20:5c:3c:fa:e6:6f:35:74:96:19: d3:3e:38:cf:18:0f:ed:92:fc:5a:42:af:71:8b:f5: 58:27:27:ab:c5:d3:84:bc:35:3c:31:3f:02:6e:8d: 8f:97:1b:dc:b5:4b:af:e7:9b:9a:78:23:a5:b1:17: 18:d4:cc:34:3b:60:27:be:a4:ca:75:e2:e1:77:e3: 97:d6:78:8b:5e:ea:a9:a2:a1:00:53:23:9f:97:4e: 8a:e6:62:bd:6f:54:10:19:98:39:c9:eb:25:8d:16: 73:21:fa:67:66:5f:ef:ac:19:8e:cb:54:c9:df:66: 8d:21:d9:f1:34:c9:67:93:bf:70:d2:b3:fc:8f:eb: 04:fc:d2:1f:74:f0:de:68:82:c1:68:6f:d4:4e:d5: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2F:E2:C7:FE:6B:1F:A3:7A:0C:79:70:98:19:30:5B:4A:29:AF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c678c4c2-3736-379c-86ba-bfed611fc29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:30:8c:60:02:b8:e2:bc:5f:51:77:a7:93:72:83:a5:5e:ab: 22:8f:7d:73:0a:88:9a:06:d4:db:ed:a8:d5:f1:62:b1:48:31: f7:83:2e:b2:5f:de:69:14:ce:db:f9:53:a1:3e:ae:7a:01:1a: af:37:e1:ed:c2:2e:19:72:af:ed:13:1d:46:27:b8:7f:b2:56: f4:d7:c6:98:d9:e4:56:dc:22:1c:fa:35:6e:de:42:45:a5:70: fd:1f:13:40:9b:b5:c0:d9:66:dd:c6:26:5a:bf:d8:6d:69:91: c9:eb:f7:b0:f5:14:ea:f2:27:a7:73:dc:f6:8b:bc:8e:61:22: 55:72:e2:63:a2:1f:70:56:7e:88:06:4a:78:81:98:71:07:b1: 19:bb:f5:49:0e:20:3b:fd:87:a2:1e:f4:3f:91:a8:06:24:54: cc:fe:90:26:bc:7a:b5:ce:01:e6:a6:bc:69:28:09:12:e3:55: 46:ed:ec:7f:be:82:c5:65:32:73:e7:83:9b:82:8b:ea:16:c0: 66:cd:cc:d9:c0:41:00:7c:de:56:bb:43:42:f6:1f:ed:c9:ed: d3:8f:37:74:da:80:f6:81:32:25:1f:f2:e6:35:e8:49:04:cc: 4b:65:9a:07:a3:cb:eb:25:91:73:f7:43:cc:7a:fd:64:7c:b5: 10:9d:5e:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2ImEnC8P9uobUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzM1oXDTI2MDgxNzE0MTAzM1owLzEtMCsGA1UEAxMk ZjBmY2Y2MjItZGE4NS00ZTU3LWI4MjQtMjAxZmIyMDMwZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtn54qSvw9TE4SvZovoDvKda4n0IhFP7lA8 3ezAEg7DfUjxshAfXxS2lynrTRF77huqVNbxpvyX9BswcdHzmMCHo2imWBlx2Vvr lqKdaOWfAuRniYcIALkufo1Cd4Efj+mtEri4cwb490tDLiBcPPrmbzV0lhnTPjjP GA/tkvxaQq9xi/VYJyerxdOEvDU8MT8Cbo2PlxvctUuv55uaeCOlsRcY1Mw0O2An vqTKdeLhd+OX1niLXuqpoqEAUyOfl06K5mK9b1QQGZg5yesljRZzIfpnZl/vrBmO y1TJ32aNIdnxNMlnk79w0rP8j+sE/NIfdPDeaILBaG/UTtWcawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCwv4sf+ax+jegx5cJgZMFtKKa99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY3OGM0YzItMzczNi0z NzljLTg2YmEtYmZlZDYxMWZjMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADowjGACuOK8X1F3p5Nyg6VeqyKPfXMKiJoG1NvtqNXxYrFIMfeD LrJf3mkUztv5U6E+rnoBGq834e3CLhlyr+0THUYnuH+yVvTXxpjZ5FbcIhz6NW7e QkWlcP0fE0CbtcDZZt3GJlq/2G1pkcnr97D1FOryJ6dz3PaLvI5hIlVy4mOiH3BW fogGSniBmHEHsRm79UkOIDv9h6Ie9D+RqAYkVMz+kCa8erXOAeamvGkoCRLjVUbt 7H++gsVlMnPng5uCi+oWwGbNzNnAQQB83la7Q0L2H+3J7dOPN3TagPaBMiUf8uY1 6EkEzEtlmgejy+slkXP3Q8x6/WR8tRCdXqg= -----END CERTIFICATE-----Generated at Sat Jun 13 13:40:53 2026 by rpki-client