$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb3baecd-54f1-33ec-9c56-e91d6a794d68.roa File: eb3baecd-54f1-33ec-9c56-e91d6a794d68.roa (raw, json) Hash identifier: jpbpjPAZaC5ogejuCaQTrTHMXAUw92ZZsfXYXl2PJHs= Subject key identifier: 69:39:D2:9A:2B:9D:21:9B:CF:81:C2:36:23:42:3D:82:4A:89:9E:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1319928DC624119E6AA44680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb3baecd-54f1-33ec-9c56-e91d6a794d68.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 397204 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:92:8d:c6:24:11:9e:6a:a4:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=37b5cc33-aaf9-45b7-a348-cd6015198de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:dc:45:b5:80:b7:00:7b:01:0b:d2:c6:df: 50:f7:b3:85:6c:5f:1f:a5:54:20:31:89:85:42:c7: ea:04:1d:3e:d5:11:0f:cc:67:a8:88:8b:c7:3e:20: 15:25:d7:13:4c:3c:4c:78:0b:15:f2:c1:ca:44:cc: 67:37:0d:9c:4d:86:e5:f7:f8:23:a0:26:8d:64:f2: d8:41:a5:c1:2d:ff:70:4c:47:ec:ab:e5:18:a7:db: d1:9a:c5:4f:40:0b:6e:75:d8:d0:f8:14:20:d9:4f: 19:0b:e5:cb:e3:dc:14:ed:65:9d:52:31:93:bb:8d: eb:3f:10:51:95:38:9a:0b:ed:ca:bb:e8:dc:82:90: ff:44:1d:75:4f:18:31:63:96:48:9a:bd:50:b7:4c: af:ce:d5:6c:6c:1c:8c:76:d0:23:2b:4e:26:f4:72: b0:bf:d1:df:57:1c:12:75:4e:19:0a:62:7b:8b:ef: 72:7a:90:07:ee:f1:92:5c:4a:1e:b5:3b:de:fd:08: c5:ff:6c:a1:f3:4b:f9:6b:24:57:ab:3d:94:b9:28: 1c:6b:43:9b:a2:a7:23:4b:4b:37:7e:0d:34:70:a3: ed:37:b2:10:8b:d8:27:11:06:06:35:9b:f2:45:38: 49:45:48:a3:aa:4c:9c:c2:2a:5a:e6:46:c7:c9:66: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:39:D2:9A:2B:9D:21:9B:CF:81:C2:36:23:42:3D:82:4A:89:9E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb3baecd-54f1-33ec-9c56-e91d6a794d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2e:df:e6:a9:9b:0f:7e:a1:b3:f4:0a:92:d7:73:eb:d1:c8: f5:1d:b7:0d:0a:bd:a3:9b:e1:28:26:ee:9c:ad:53:bd:86:1f: 99:6f:11:c0:06:31:db:3d:d5:cc:28:ad:dd:f7:5f:24:f0:ac: 02:f3:91:ec:5f:ae:f6:c5:3f:0d:89:e6:93:64:e2:68:f1:6c: b4:99:96:81:c0:9a:01:2c:b9:e7:e0:de:4c:8e:b5:98:98:0a: 8d:2e:d8:f7:e2:a9:f2:87:c7:b7:71:8a:d7:00:95:d0:f1:38: 64:0b:7b:37:41:d2:a2:86:5e:03:bd:c9:90:fa:75:8c:4a:61: ce:0c:8d:a8:47:df:52:f2:50:9b:ae:dc:3a:cf:14:84:50:9f: 47:27:61:2e:43:9c:d8:85:79:d1:d8:64:e7:e0:03:a1:af:5f: bd:d1:b9:5e:e5:9f:7a:e4:5c:38:bc:62:2c:26:ab:6c:1a:98: f6:a5:23:66:09:ee:49:68:dd:90:9d:2d:5b:95:db:3c:44:fb: 8d:0d:3f:3b:54:a8:6a:79:28:ea:22:df:19:88:9a:85:20:b0: 6b:d3:64:56:a8:de:ec:6e:e6:80:33:85:2d:95:d7:1b:69:d5: ec:d6:85:2d:d2:d4:f6:58:2e:b3:43:ab:c5:57:f6:00:eb:6a: 28:13:68:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGZKNxiQRnmqkRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk MzdiNWNjMzMtYWFmOS00NWI3LWEzNDgtY2Q2MDE1MTk4ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva3cRbWAtwB7AQvSxt9Q97OFbF8fpVQgMYmF QsfqBB0+1REPzGeoiIvHPiAVJdcTTDxMeAsV8sHKRMxnNw2cTYbl9/gjoCaNZPLY QaXBLf9wTEfsq+UYp9vRmsVPQAtuddjQ+BQg2U8ZC+XL49wU7WWdUjGTu43rPxBR lTiaC+3Ku+jcgpD/RB11TxgxY5ZImr1Qt0yvztVsbByMdtAjK04m9HKwv9HfVxwS dU4ZCmJ7i+9yepAH7vGSXEoetTve/QjF/2yh80v5ayRXqz2UuSgca0OboqcjS0s3 fg00cKPtN7IQi9gnEQYGNZvyRThJRUijqkycwipa5kbHyWb2owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGk50pornSGbz4HCNiNCPYJKiZ65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWIzYmFlY2QtNTRmMS0z M2VjLTljNTYtZTkxZDZhNzk0ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEu3+apmw9+obP0CpLXc+vRyPUdtw0KvaOb4Sgm7pytU72GH5lv EcAGMds91cword33XyTwrALzkexfrvbFPw2J5pNk4mjxbLSZloHAmgEsuefg3kyO tZiYCo0u2PfiqfKHx7dxitcAldDxOGQLezdB0qKGXgO9yZD6dYxKYc4MjahH31Ly UJuu3DrPFIRQn0cnYS5DnNiFedHYZOfgA6GvX73RuV7ln3rkXDi8Yiwmq2wamPal I2YJ7klo3ZCdLVuV2zxE+40NPztUqGp5KOoi3xmImoUgsGvTZFao3uxu5oAzhS2V 1xtp1ezWhS3S1PZYLrNDq8VX9gDraigTaII= -----END CERTIFICATE-----Generated at Sat Jun 13 17:08:04 2026 by rpki-client