$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa File: d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa (raw, json) Hash identifier: XbfON0T7G3PRfsJRHtKpQgc873iT47MuylEFeqEe+qA= Subject key identifier: 0C:CC:13:20:7C:38:A7:14:48:71:4E:5E:C0:13:50:4C:64:C9:0D:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88B0D9825EF8162F9B520 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa Signing time: Tue 19 May 2026 14:10:34 +0000 ROA not before: Tue 19 May 2026 14:10:34 +0000 ROA not after: Mon 17 Aug 2026 14:10:34 +0000 asID: 396608 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8b:0d:98:25:ef:81:62:f9:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:34 2026 GMT Not After : Aug 17 14:10:34 2026 GMT Subject: CN=e1e79a37-12e3-4602-8211-fa1e2e221599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:1f:5e:31:48:65:73:2d:d6:48:9c:8e:e3: 44:32:a6:71:fe:48:58:20:bb:40:76:10:0f:3b:0a: 40:ac:9c:c0:c5:21:38:18:5e:b9:02:af:26:ac:21: 93:d4:73:41:08:32:36:2c:f5:3f:30:4f:f7:25:77: ae:0c:a7:f4:6f:22:b8:27:4c:c3:27:6e:3c:d5:17: a2:15:fa:65:89:45:a8:92:71:76:a7:8d:e3:f9:43: 8a:8c:4c:a7:a3:ae:42:bb:06:93:0c:a4:1b:e8:63: a6:50:1c:98:8b:c2:4d:23:0f:a2:2b:e2:a5:1a:ab: 93:23:b7:96:59:b9:85:18:15:0b:8c:b9:eb:54:82: e7:ec:56:40:ac:c8:df:4b:ee:36:2d:eb:45:f7:c1: ed:d5:68:73:69:eb:a5:9e:e1:c5:61:f5:c3:30:41: 51:1a:13:c2:c5:6b:4d:1a:9f:ce:56:65:4f:c0:50: 09:01:48:30:ba:66:c7:e9:eb:23:0a:2c:70:57:27: 61:5a:67:29:9a:0c:7a:5e:1a:0e:42:fc:da:ec:f5: 1c:ca:5a:83:96:54:97:61:96:3c:e4:57:ef:54:0b: 90:54:74:9a:82:c2:e8:5f:7d:21:f4:b5:e7:9b:e5: a2:50:46:f0:ba:a3:52:60:64:7e:3d:8f:d9:b4:6c: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CC:13:20:7C:38:A7:14:48:71:4E:5E:C0:13:50:4C:64:C9:0D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1adb6c0-7119-3e94-b02c-9a151fa8e791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:51:f6:a0:b6:9a:c6:28:0b:54:46:86:a2:8f:87:b5:fa:8c: cc:1f:75:52:17:11:68:71:e0:a7:1b:76:d5:00:bd:01:94:c5: 79:0b:7a:3f:2e:68:cc:43:e7:be:92:a7:e0:8f:60:7b:16:5b: b8:00:80:16:7e:fe:ca:14:7e:cf:98:96:26:bd:8f:10:6c:cf: ba:11:f1:2e:06:2d:56:12:cb:43:41:5d:cb:68:e5:01:35:ef: 10:14:3b:aa:34:f6:af:f9:36:86:01:71:1a:44:5c:af:3e:79: e3:4b:50:e8:8a:8a:53:c6:cf:80:8e:99:d6:72:3e:3e:fa:8c: 81:5a:91:a2:40:ff:27:01:82:4d:fe:f3:a7:41:32:e9:e3:e5: 39:93:e4:5f:ac:30:d0:07:16:b5:5d:05:98:b4:93:f8:f6:c4: 9d:9a:9d:fe:a7:02:f1:d0:6a:fc:2c:da:ab:14:bd:4e:eb:f5: 02:7c:93:d4:fe:48:8f:c7:7b:04:54:e6:6b:a0:67:51:88:29: 4e:e6:f9:95:7e:da:a4:fb:af:42:aa:5f:2b:7a:9b:e1:45:5e: 69:e9:fd:bc:b7:78:da:57:20:61:98:3b:44:cd:ce:19:50:ba: 83:a3:06:1f:d1:da:39:7e:03:94:58:4c:6d:19:28:cc:34:c6: 0f:06:54:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IsNmCXvgWL5tSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNFoXDTI2MDgxNzE0MTAzNFowLzEtMCsGA1UEAxMk ZTFlNzlhMzctMTJlMy00NjAyLTgyMTEtZmExZTJlMjIxNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0YfXjFIZXMt1kicjuNEMqZx/khYILtAdhAP OwpArJzAxSE4GF65Aq8mrCGT1HNBCDI2LPU/ME/3JXeuDKf0byK4J0zDJ2481Rei FfpliUWoknF2p43j+UOKjEyno65CuwaTDKQb6GOmUByYi8JNIw+iK+KlGquTI7eW WbmFGBULjLnrVILn7FZArMjfS+42LetF98Ht1WhzaeulnuHFYfXDMEFRGhPCxWtN Gp/OVmVPwFAJAUgwumbH6esjCixwVydhWmcpmgx6XhoOQvza7PUcylqDllSXYZY8 5FfvVAuQVHSagsLoX30h9LXnm+WiUEbwuqNSYGR+PY/ZtGxaCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzMEyB8OKcUSHFOXsATUExkyQ0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFhZGI2YzAtNzExOS0z ZTk0LWIwMmMtOWExNTFmYThlNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhR9qC2msYoC1RGhqKPh7X6jMwfdVIXEWhx4KcbdtUAvQGUxXkL ej8uaMxD576Sp+CPYHsWW7gAgBZ+/soUfs+Ylia9jxBsz7oR8S4GLVYSy0NBXcto 5QE17xAUO6o09q/5NoYBcRpEXK8+eeNLUOiKilPGz4COmdZyPj76jIFakaJA/ycB gk3+86dBMunj5TmT5F+sMNAHFrVdBZi0k/j2xJ2anf6nAvHQavws2qsUvU7r9QJ8 k9T+SI/HewRU5mugZ1GIKU7m+ZV+2qT7r0KqXyt6m+FFXmnp/by3eNpXIGGYO0TN zhlQuoOjBh/R2jl+A5RYTG0ZKMw0xg8GVJE= -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:48 2026 by rpki-client