$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa File: caafc2fd-7716-33b7-a35f-b935ac356738.roa (raw, json) Hash identifier: hs4reXWyTj8SBm6uk9JIVvmPSNlmRezwqYZswxDk83c= Subject key identifier: 06:36:67:88:29:5B:72:E6:2C:4E:04:98:B0:73:A1:8A:5B:99:7B:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88BD1DC2DC8FF204FEF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa Signing time: Tue 19 May 2026 14:10:35 +0000 ROA not before: Tue 19 May 2026 14:10:35 +0000 ROA not after: Mon 17 Aug 2026 14:10:35 +0000 asID: 396615 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:d1:dc:2d:c8:ff:20:4f:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:35 2026 GMT Not After : Aug 17 14:10:35 2026 GMT Subject: CN=68e36294-1057-416b-80ae-5b5f1860f8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:19:41:11:72:ea:6c:ac:b0:dc:fc:82:61: d6:d5:5f:86:0e:96:15:81:22:9b:c3:14:ab:3a:47: 1c:30:12:4b:4b:ec:03:49:36:71:5a:50:a8:44:c2: 33:a8:9a:7f:6a:11:3c:a0:a6:07:43:e7:81:79:ae: e1:d0:57:e2:8f:28:bf:b6:9a:70:4e:6b:27:44:88: b0:f2:e1:e7:da:41:7b:e8:42:9e:52:7b:02:18:4b: 8e:fe:94:74:98:de:cf:e6:43:45:a0:5e:d2:02:7e: b6:c0:5f:8c:29:1b:ca:eb:2b:c3:d3:5b:6b:db:61: ff:02:4c:33:7e:e4:e5:25:c8:8f:5c:57:5a:e7:0f: 5b:54:03:14:e7:7e:a4:8a:d3:91:85:d2:89:0f:2f: 1d:08:74:f2:a4:ed:d1:43:57:1c:88:d5:46:9a:6f: 6f:31:1f:b3:e3:45:05:39:7d:52:97:24:25:f4:91: 65:8b:cb:ff:59:93:ee:40:cf:6c:97:65:eb:fb:5c: 8a:c4:ed:22:ef:36:ad:27:e9:bb:3d:d3:84:41:45: 70:66:71:33:3d:d9:95:e6:f5:25:3f:62:be:db:3b: 44:74:b9:40:69:7c:b2:6a:d8:7f:95:a7:3c:96:32: 40:e3:21:76:da:7b:62:82:83:28:90:8e:32:d2:42: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:67:88:29:5B:72:E6:2C:4E:04:98:B0:73:A1:8A:5B:99:7B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f5:de:ab:ec:7e:05:85:d6:9c:9e:41:0b:09:da:00:24:76: 61:c0:8c:ae:e5:9b:7a:9e:1f:b9:ed:b7:d6:29:95:3f:d0:bc: 9f:05:0b:a1:1c:e2:dc:d6:55:f9:6d:c1:e1:aa:4e:36:00:55: 69:25:d0:39:31:bd:c9:63:12:5e:d1:e3:05:3e:22:01:fc:6a: b5:0d:33:c1:82:94:f2:4c:2c:0f:fb:8c:60:7b:a6:3e:9b:62: 73:be:95:c6:6b:d8:ce:75:58:67:1a:73:97:8c:f1:d9:ae:b1: 17:25:d4:90:ab:c0:b4:33:b3:94:6d:a8:1d:1e:72:ea:fd:d0: 59:d5:72:7e:8e:18:24:08:e2:ff:2b:63:97:c0:b6:b6:27:90: 62:42:5e:d2:e1:6e:73:79:49:a3:e3:18:8d:0e:a4:e6:08:5a: a9:7d:23:17:bd:12:c7:1a:08:dc:ce:44:84:42:92:3e:9e:e8: 0b:82:70:9a:2a:67:b8:47:4b:ee:6f:cf:5b:46:e1:ac:95:f8: ec:bb:65:11:43:3e:e0:55:87:a5:7e:50:cc:d7:81:63:91:cf: a3:59:3a:90:90:88:3f:c1:be:c7:ad:71:16:d1:49:c3:00:ea: f3:42:eb:9c:b8:0a:16:42:0e:6a:15:48:5c:4b:3b:f2:72:85: 8f:b0:a4:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IvR3C3I/yBP74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk NjhlMzYyOTQtMTA1Ny00MTZiLTgwYWUtNWI1ZjE4NjBmOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYkZQRFy6myssNz8gmHW1V+GDpYVgSKbwxSr OkccMBJLS+wDSTZxWlCoRMIzqJp/ahE8oKYHQ+eBea7h0Ffijyi/tppwTmsnRIiw 8uHn2kF76EKeUnsCGEuO/pR0mN7P5kNFoF7SAn62wF+MKRvK6yvD01tr22H/Akwz fuTlJciPXFda5w9bVAMU536kitORhdKJDy8dCHTypO3RQ1cciNVGmm9vMR+z40UF OX1SlyQl9JFli8v/WZPuQM9sl2Xr+1yKxO0i7zatJ+m7PdOEQUVwZnEzPdmV5vUl P2K+2ztEdLlAaXyyath/lac8ljJA4yF22ntigoMokI4y0kIVzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAY2Z4gpW3LmLE4EmLBzoYpbmXvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FhZmMyZmQtNzcxNi0z M2I3LWEzNWYtYjkzNWFjMzU2NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF313qvsfgWF1pyeQQsJ2gAkdmHAjK7lm3qeH7ntt9YplT/QvJ8F C6Ec4tzWVfltweGqTjYAVWkl0DkxvcljEl7R4wU+IgH8arUNM8GClPJMLA/7jGB7 pj6bYnO+lcZr2M51WGcac5eM8dmusRcl1JCrwLQzs5RtqB0ecur90FnVcn6OGCQI 4v8rY5fAtrYnkGJCXtLhbnN5SaPjGI0OpOYIWql9Ixe9EscaCNzORIRCkj6e6AuC cJoqZ7hHS+5vz1tG4ayV+Oy7ZRFDPuBVh6V+UMzXgWORz6NZOpCQiD/BvsetcRbR ScMA6vNC65y4ChZCDmoVSFxLO/JyhY+wpEs= -----END CERTIFICATE-----Generated at Sat Jun 13 13:11:23 2026 by rpki-client