$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa File: cbf177a7-912c-38c6-9f18-dba4109318b2.roa (raw, json) Hash identifier: q+yNIpGCVkxj7rB0n2lIzPAZV1ivxbB4iIRyw7jwBW4= Subject key identifier: 29:B7:D5:0F:62:50:6F:E2:A2:E4:A4:F1:EE:EF:6E:12:51:1E:C7:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E13198FA2371F62FF6F934780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396589 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:8f:a2:37:1f:62:ff:6f:93:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=e438c387-94b4-4a95-9c46-daf039e93beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:39:7e:0f:30:43:58:7e:1a:f2:1e:4c:98: ba:63:fc:ae:cb:00:74:0a:a0:4a:96:07:ed:88:f3: dd:bd:9a:25:15:10:f6:d4:38:c9:e4:60:1f:9b:81: 84:ce:84:ee:24:0f:69:17:e5:68:a6:d3:66:03:dc: 6e:50:2f:70:54:fd:1e:9e:f1:65:b9:b5:56:ea:9a: 8e:2a:e0:72:fa:85:1f:8f:8d:0b:ae:ec:d9:99:4e: 44:73:b8:58:4a:62:49:e6:17:00:93:22:db:8b:cb: 16:4a:69:b7:c4:de:39:50:b1:98:81:55:2f:7f:44: 42:d2:94:fc:0a:85:3b:93:29:f8:b0:00:10:a7:b2: 0a:f3:78:b5:0d:e9:68:5b:10:81:5b:39:d1:36:02: 43:69:65:85:65:c5:52:b3:f2:db:d8:89:88:b1:21: e5:5a:cb:a1:7b:68:0a:d0:9e:5a:7b:11:8d:7a:ce: f6:9c:66:b2:79:2e:36:9e:2b:fe:ea:fa:d4:ac:ed: 98:4c:aa:ab:06:b8:ee:89:6f:44:95:2d:bd:69:b5: 32:8b:20:38:6d:1c:73:bd:a9:b2:7a:6d:fd:f2:42: a7:26:98:71:e4:9c:0b:3e:8d:43:cd:ee:2a:37:26: 74:d5:27:bf:88:b1:15:14:3c:12:16:44:4e:fa:7e: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:D5:0F:62:50:6F:E2:A2:E4:A4:F1:EE:EF:6E:12:51:1E:C7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbf177a7-912c-38c6-9f18-dba4109318b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:89:d0:c6:57:d7:4c:48:6b:12:cd:89:0c:d7:f3:37:db:51: dd:d8:05:83:5b:f9:14:32:27:e4:53:37:4c:58:68:88:dd:f4: cc:ba:5e:d3:df:59:fd:a3:4a:1d:2f:00:44:54:35:16:88:ed: 73:73:f3:f8:7f:6c:9d:17:d3:30:aa:d9:f2:28:8c:f5:2d:95: ec:88:3b:51:5d:45:79:84:db:bd:77:cf:de:84:b0:20:51:90: 8d:46:50:57:87:80:58:24:00:a6:60:c8:9f:14:6d:c2:82:4e: 51:00:cf:08:7e:95:ac:b5:69:be:9a:47:cb:c4:6f:63:9c:fb: 50:6d:50:0c:ae:4d:b3:1c:c9:e1:0a:db:6c:71:29:ad:d3:6b: 69:4b:77:4b:cf:11:42:90:6e:92:4f:3b:71:16:fc:3f:4c:79: dd:8b:e6:2a:2b:c4:a3:df:23:c8:46:46:f4:31:c1:75:dc:fd: dc:3b:a8:7d:cf:38:5f:5e:4c:b7:08:21:99:f6:ab:2f:79:8d: 75:0f:e0:fc:48:f4:cd:0e:4c:7d:14:b8:0e:49:a9:66:94:08: ba:ac:df:60:c3:af:3a:45:ed:0d:a0:ed:35:a5:5c:c9:ea:80: 4c:e3:c3:d6:58:bd:3e:22:ce:2e:59:4f:1c:78:6c:34:f8:0e: 4a:5a:68:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGY+iNx9i/2+TR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTQzOGMzODctOTRiNC00YTk1LTljNDYtZGFmMDM5ZTkzYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzA5fg8wQ1h+GvIeTJi6Y/yuywB0CqBKlgft iPPdvZolFRD21DjJ5GAfm4GEzoTuJA9pF+VoptNmA9xuUC9wVP0envFlubVW6pqO KuBy+oUfj40LruzZmU5Ec7hYSmJJ5hcAkyLbi8sWSmm3xN45ULGYgVUvf0RC0pT8 CoU7kyn4sAAQp7IK83i1DeloWxCBWznRNgJDaWWFZcVSs/Lb2ImIsSHlWsuhe2gK 0J5aexGNes72nGayeS42niv+6vrUrO2YTKqrBrjuiW9ElS29abUyiyA4bRxzvamy em398kKnJphx5JwLPo1Dze4qNyZ01Se/iLEVFDwSFkRO+n6puwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCm31Q9iUG/iouSk8e7vbhJRHseoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2JmMTc3YTctOTEyYy0z OGM2LTlmMTgtZGJhNDEwOTMxOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqJ0MZX10xIaxLNiQzX8zfbUd3YBYNb+RQyJ+RTN0xYaIjd9My6 XtPfWf2jSh0vAERUNRaI7XNz8/h/bJ0X0zCq2fIojPUtleyIO1FdRXmE2713z96E sCBRkI1GUFeHgFgkAKZgyJ8UbcKCTlEAzwh+lay1ab6aR8vEb2Oc+1BtUAyuTbMc yeEK22xxKa3Ta2lLd0vPEUKQbpJPO3EW/D9Med2L5iorxKPfI8hGRvQxwXXc/dw7 qH3POF9eTLcIIZn2qy95jXUP4PxI9M0OTH0UuA5JqWaUCLqs32DDrzpF7Q2g7TWl XMnqgEzjw9ZYvT4izi5ZTxx4bDT4DkpaaIs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:39:43 2026 by rpki-client