$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa File: def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa (raw, json) Hash identifier: E8YQXEE7GpaEsTgoKKPGLw3DU0cf5DGf/hvSi2hHb/o= Subject key identifier: B5:0F:8E:BB:37:75:F5:49:4F:CA:59:E2:87:77:29:D3:65:C4:8E:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE9B0BE28587BD4959A1FA920 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 396616 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:be:28:58:7b:d4:95:9a:1f:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=653f9939-464c-4fa0-b581-7f4f6f43d57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:a9:c6:0f:c7:62:da:c4:72:03:8f:09:6d: c5:43:3b:ac:66:05:e6:1d:e5:bb:2e:1a:48:d0:ee: 6b:87:31:c7:6b:72:28:f8:0c:be:f5:98:ad:c0:2f: 06:84:c6:c1:0b:5f:ac:44:ee:54:23:46:d8:4d:08: e5:d3:4c:05:6f:ab:25:d2:9f:97:11:ac:b9:48:ac: 6d:0d:0a:ed:25:88:25:a6:03:00:99:63:60:e6:7e: 76:5f:ef:c9:77:a1:44:68:a3:8c:8d:04:be:3c:40: 2c:69:40:a2:8f:9b:1c:e1:62:c2:a2:ce:7e:9f:24: aa:73:7f:86:cc:38:48:28:76:13:87:87:34:ee:1c: 93:02:85:35:11:ad:bc:a0:b7:73:d9:fd:e1:14:b0: f0:29:73:27:b8:d9:e6:26:52:21:9c:00:6d:88:cd: 6e:6a:a0:62:29:06:a3:b7:7e:67:5e:dc:de:b0:6d: 73:93:c3:5e:02:11:20:7b:98:bd:8e:7d:ce:9e:a5: bb:fa:64:72:02:2d:26:92:33:ed:85:4a:68:15:3a: 1e:43:9a:6b:39:12:f5:40:53:c4:2f:56:e1:5d:0c: de:be:08:9e:73:6a:7e:17:fd:79:fe:47:5e:68:07: e6:7b:2e:7e:da:8e:2b:f0:bb:84:e9:5a:54:92:1d: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0F:8E:BB:37:75:F5:49:4F:CA:59:E2:87:77:29:D3:65:C4:8E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:90:9e:fc:a1:a4:19:3b:a7:41:b1:a0:82:ab:d5:64:a1:be: 5c:24:9b:a7:f7:42:9a:9b:d2:ed:27:e5:3f:57:10:6f:94:62: a2:09:33:78:20:f8:c8:35:c7:fe:8a:b1:c8:97:6e:e2:ea:1f: 68:a0:21:07:64:63:5a:e5:fd:34:c8:08:f1:d3:b5:b0:e9:d4: e8:5f:0c:44:bc:9f:2e:9a:a7:87:bc:60:67:15:42:a4:23:ef: 46:18:31:8f:e4:36:7a:2c:27:72:b7:de:a5:58:73:a0:fb:c2: 61:bc:13:f7:70:be:66:7f:95:a7:a2:8d:55:99:38:39:1c:83: 3d:30:16:6f:bc:50:36:8a:62:8c:55:d4:a7:6c:6f:aa:18:06: bf:28:33:0d:01:ff:37:f2:9c:48:d6:c8:cf:e2:84:cf:9f:01: 0d:0d:38:5b:a5:05:6e:e5:8a:34:4d:70:d9:cc:ff:09:ee:e6: a6:2f:91:29:e1:2f:2e:7a:e9:0f:df:a8:11:85:b6:77:48:bf: 6e:fd:24:9e:33:f2:a2:6f:c5:bf:97:2c:ee:ef:f6:6e:49:31: 96:87:b2:7f:ac:99:f2:94:70:81:87:6d:76:2f:07:6c:49:86: a0:f3:39:ec:a7:a7:62:18:3f:50:60:7d:a1:ba:02:fc:31:02: d7:c0:b0:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psL4oWHvUlZofqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjUzZjk5MzktNDY0Yy00ZmEwLWI1ODEtN2Y0ZjZmNDNkNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSmpxg/HYtrEcgOPCW3FQzusZgXmHeW7LhpI 0O5rhzHHa3Io+Ay+9ZitwC8GhMbBC1+sRO5UI0bYTQjl00wFb6sl0p+XEay5SKxt DQrtJYglpgMAmWNg5n52X+/Jd6FEaKOMjQS+PEAsaUCij5sc4WLCos5+nySqc3+G zDhIKHYTh4c07hyTAoU1Ea28oLdz2f3hFLDwKXMnuNnmJlIhnABtiM1uaqBiKQaj t35nXtzesG1zk8NeAhEge5i9jn3OnqW7+mRyAi0mkjPthUpoFToeQ5prORL1QFPE L1bhXQzevgiec2p+F/15/kdeaAfmey5+2o4r8LuE6VpUkh0v1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUPjrs3dfVJT8pZ4od3KdNlxI4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVmMmU5NmYtNTU4OC0z NGViLWJiN2QtYjRhMGZkY2VlNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyQnvyhpBk7p0GxoIKr1WShvlwkm6f3Qpqb0u0n5T9XEG+UYqIJ M3gg+Mg1x/6KsciXbuLqH2igIQdkY1rl/TTICPHTtbDp1OhfDES8ny6ap4e8YGcV QqQj70YYMY/kNnosJ3K33qVYc6D7wmG8E/dwvmZ/laeijVWZODkcgz0wFm+8UDaK YoxV1Kdsb6oYBr8oMw0B/zfynEjWyM/ihM+fAQ0NOFulBW7lijRNcNnM/wnu5qYv kSnhLy566Q/fqBGFtndIv279JJ4z8qJvxb+XLO7v9m5JMZaHsn+smfKUcIGHbXYv B2xJhqDzOeynp2IYP1BgfaG6AvwxAtfAsPg= -----END CERTIFICATE-----Generated at Sat Jun 13 13:05:16 2026 by rpki-client