$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa File: d8b10be5-0160-3345-bb0c-c11d19fc0114.roa (raw, json) Hash identifier: EncVf8QEga9V//Gvw8d7R4BwzpykusSLP8RrznGqIa0= Subject key identifier: 53:DB:24:B3:D8:E0:1A:C4:43:27:3B:4B:A2:B9:22:6B:E5:44:A3:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1319904BDDFC6C57D0061DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396597 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:90:4b:dd:fc:6c:57:d0:06:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=ee5005c7-b464-41e6-9158-5fe697e572c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:d9:25:96:d8:33:e3:5f:f8:92:26:f9:12: 74:16:bb:28:32:aa:c2:75:62:2f:ca:2e:09:24:b3: dd:bc:6a:3e:d0:b4:df:41:8b:8f:6c:58:f9:73:e7: 75:91:db:15:f8:26:c0:83:1a:5f:84:1d:e0:ed:ff: a5:24:dd:a0:fc:64:49:72:17:e9:69:cd:3f:05:47: bc:cd:4d:3d:34:52:5e:0d:48:88:94:a8:87:dc:05: 33:77:bd:60:b6:be:17:e6:55:a6:c1:1d:a8:4d:bb: c4:0b:de:58:39:53:97:9d:4d:d8:5f:4d:a4:4d:97: fa:c8:55:5b:a9:d6:f3:d4:56:07:17:d4:d5:75:45: 61:e7:b3:66:6b:66:3a:b7:78:0c:da:be:82:6d:85: b8:5e:b6:60:21:2a:7e:e3:e7:e0:02:b5:73:b9:13: 92:ab:5d:ec:0c:8e:4e:10:63:eb:60:32:9a:10:56: 11:da:fc:02:53:a6:31:b5:ee:50:d1:54:48:21:e0: 1b:cc:ee:8a:4d:bc:b9:7b:4c:80:b3:2e:ca:0c:36: 86:0c:58:21:bc:fb:ea:59:54:2b:2d:1a:64:31:fa: 2d:ba:c7:28:0c:a6:66:02:75:dc:95:60:ed:c9:79: 1f:17:4e:ef:3b:71:bc:43:05:03:5e:d8:f5:ad:53: 68:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DB:24:B3:D8:E0:1A:C4:43:27:3B:4B:A2:B9:22:6B:E5:44:A3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3e:a2:a4:5c:93:c4:66:b1:fd:ec:47:eb:d3:08:54:06:ef: 75:4d:ea:fc:5d:e2:de:4a:47:27:70:2f:0d:40:7e:a5:2f:09: 92:31:27:cc:18:e3:c6:4e:1d:fd:e4:bc:65:99:59:30:98:f8: 83:bb:6a:05:57:8a:a0:d0:cc:b1:18:75:1f:3c:5a:99:e8:f9: 04:88:5f:75:46:f3:7a:75:99:76:62:11:a3:24:98:82:73:b4: 11:00:bc:1b:2a:bf:72:15:7b:81:df:0e:e4:ed:30:7e:52:55: 5f:97:5a:16:f5:8e:0f:d0:67:e8:a1:b2:11:0f:04:7c:8e:1d: 4d:c7:d7:d2:84:9f:0e:a1:2b:ba:d5:b0:80:fe:24:da:40:2e: 84:3c:df:63:f5:66:f1:b4:34:78:29:57:41:ad:5b:81:e1:dc: 3d:22:6d:47:aa:55:d7:3e:ea:af:16:4a:b6:ed:1f:ed:2b:21: 3a:04:b8:10:eb:36:d8:48:de:6d:04:2b:1a:f5:0b:5c:5c:b9: 3b:11:9d:37:36:5d:10:ad:5f:2b:f7:13:62:3f:7c:03:81:c0: 1b:28:80:5b:31:d0:08:f1:31:56:aa:5f:3e:36:b0:5b:55:4b: f2:54:f1:b4:39:b4:f1:d1:d8:23:e9:f0:a3:2c:4b:45:90:c3: e9:10:6b:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZBL3fxsV9AGHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk ZWU1MDA1YzctYjQ2NC00MWU2LTkxNTgtNWZlNjk3ZTU3MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVbZJZbYM+Nf+JIm+RJ0FrsoMqrCdWIvyi4J JLPdvGo+0LTfQYuPbFj5c+d1kdsV+CbAgxpfhB3g7f+lJN2g/GRJchfpac0/BUe8 zU09NFJeDUiIlKiH3AUzd71gtr4X5lWmwR2oTbvEC95YOVOXnU3YX02kTZf6yFVb qdbz1FYHF9TVdUVh57Nma2Y6t3gM2r6CbYW4XrZgISp+4+fgArVzuROSq13sDI5O EGPrYDKaEFYR2vwCU6Yxte5Q0VRIIeAbzO6KTby5e0yAsy7KDDaGDFghvPvqWVQr LRpkMfotuscoDKZmAnXclWDtyXkfF07vO3G8QwUDXtj1rVNo2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPbJLPY4BrEQyc7S6K5ImvlRKNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhiMTBiZTUtMDE2MC0z MzQ1LWJiMGMtYzExZDE5ZmMwMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHE+oqRck8Rmsf3sR+vTCFQG73VN6vxd4t5KRydwLw1AfqUvCZIx J8wY48ZOHf3kvGWZWTCY+IO7agVXiqDQzLEYdR88Wpno+QSIX3VG83p1mXZiEaMk mIJztBEAvBsqv3IVe4HfDuTtMH5SVV+XWhb1jg/QZ+ihshEPBHyOHU3H19KEnw6h K7rVsID+JNpALoQ832P1ZvG0NHgpV0GtW4Hh3D0ibUeqVdc+6q8WSrbtH+0rIToE uBDrNthI3m0EKxr1C1xcuTsRnTc2XRCtXyv3E2I/fAOBwBsogFsx0AjxMVaqXz42 sFtVS/JU8bQ5tPHR2CPp8KMsS0WQw+kQa2E= -----END CERTIFICATE-----Generated at Sat Jun 13 13:59:53 2026 by rpki-client