$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa File: f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa (raw, json) Hash identifier: 2iQwPaH4Mw+ITSIPSTPwfFmgC/6HkXiMPFSc0OONOHE= Subject key identifier: 67:0C:D0:F9:5D:EA:6A:60:5D:7D:4C:8B:35:C0:7B:82:A8:46:E5:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2D88C71356C01885576BC10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa Signing time: Tue 19 May 2026 14:10:35 +0000 ROA not before: Tue 19 May 2026 14:10:35 +0000 ROA not after: Mon 17 Aug 2026 14:10:35 +0000 asID: 25485 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:d8:8c:71:35:6c:01:88:55:76:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 14:10:35 2026 GMT Not After : Aug 17 14:10:35 2026 GMT Subject: CN=56a832ba-0f05-446f-9e33-77025ce76761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:5d:7b:71:2b:15:24:5a:93:b5:1a:d9:dc: 4c:06:f9:1c:69:26:80:47:a3:01:35:98:ad:65:ac: 10:37:b8:83:54:ea:06:16:55:44:5b:a7:1c:ae:b7: ef:9f:76:9c:7b:d9:8a:27:eb:01:dc:24:f2:dc:12: ce:d6:65:1e:80:d6:f0:cd:e4:63:c8:bd:2b:b7:02: a9:24:e3:3f:20:03:72:9a:4f:68:51:62:0a:17:52: a5:7d:a6:73:ed:ab:73:f9:2a:0c:5f:d7:b8:ac:7a: d3:a7:46:d6:7f:c6:df:a9:74:67:86:5e:a9:7e:6a: 8d:74:da:5c:9d:68:41:e2:f6:61:af:86:d9:49:01: d7:62:b1:58:07:9a:cc:3b:db:14:f9:38:fe:fe:7d: ba:d9:b4:51:cd:0a:18:8b:51:27:63:87:de:7f:81: 53:6c:bb:c5:57:e7:3e:1e:90:28:53:98:15:4f:cd: a5:1e:19:09:dd:9f:e9:16:8a:8c:ad:87:df:6c:90: ca:68:ba:65:03:8f:a6:63:85:ee:7f:0c:f3:1d:18: b5:48:8c:10:4b:3f:4e:37:6a:0a:c1:36:8b:05:56: d7:ba:b1:70:0b:cd:b0:1a:e4:c5:55:43:b2:c3:68: 6a:69:5f:18:17:90:4e:47:15:c2:9b:62:6d:a5:0d: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:D0:F9:5D:EA:6A:60:5D:7D:4C:8B:35:C0:7B:82:A8:46:E5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:24:a0:89:bf:d7:d3:50:39:35:68:47:23:9f:b2:f0:b3:e5: f3:1e:35:10:88:05:c9:3e:95:ac:77:c1:43:59:83:aa:1d:7e: ee:ad:19:e7:8e:f2:ec:07:a7:91:29:5b:e2:b5:3b:03:09:a2: a3:f6:c5:9a:70:33:81:71:e2:80:9b:f3:f2:43:85:8e:3b:83: 7c:89:f5:cb:78:f4:d9:45:cf:21:c0:ff:27:9b:7a:38:66:60: 22:5c:48:d1:9c:6d:78:a0:83:cb:ae:ab:72:37:b1:3a:12:2e: 7c:63:d3:d6:2d:51:ea:ef:fe:e0:1b:a5:30:35:d1:28:15:61: 79:76:b3:60:39:d0:48:18:d6:b3:c0:9c:13:64:15:06:b5:09: da:d2:de:c7:91:e2:35:36:81:6c:18:bb:77:42:bd:14:8b:6f: f0:66:de:a9:ba:0c:d1:71:c6:71:f9:dd:3b:00:15:73:f1:0c: 57:f1:59:fd:a5:8c:6b:b5:da:6d:26:64:1f:bb:59:38:c6:3f: 60:0b:69:15:45:86:0d:56:4f:7e:fe:ac:ea:d9:40:bb:45:9e: fb:21:52:95:7d:eb:5d:43:9c:cd:2d:3c:10:f0:40:39:14:9e: 47:b9:2d:cd:39:77:59:ec:92:70:b0:08:63:62:7c:06:d6:d8: d4:59:28:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3i2IxxNWwBiFV2vBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTE0MTAzNVoXDTI2MDgxNzE0MTAzNVowLzEtMCsGA1UEAxMk NTZhODMyYmEtMGYwNS00NDZmLTllMzMtNzcwMjVjZTc2NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxNde3ErFSRak7Ua2dxMBvkcaSaAR6MBNZit ZawQN7iDVOoGFlVEW6ccrrfvn3ace9mKJ+sB3CTy3BLO1mUegNbwzeRjyL0rtwKp JOM/IANymk9oUWIKF1KlfaZz7atz+SoMX9e4rHrTp0bWf8bfqXRnhl6pfmqNdNpc nWhB4vZhr4bZSQHXYrFYB5rMO9sU+Tj+/n262bRRzQoYi1EnY4fef4FTbLvFV+c+ HpAoU5gVT82lHhkJ3Z/pFoqMrYffbJDKaLplA4+mY4XufwzzHRi1SIwQSz9ON2oK wTaLBVbXurFwC82wGuTFVUOyw2hqaV8YF5BORxXCm2JtpQ06YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcM0Pld6mpgXX1MizXAe4KoRuUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjQzYWZmMzAtM2ZiZi0z NjA3LThmMzgtZTRlNWYzODNjNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4koIm/19NQOTVoRyOfsvCz5fMeNRCIBck+lax3wUNZg6odfu6t GeeO8uwHp5EpW+K1OwMJoqP2xZpwM4Fx4oCb8/JDhY47g3yJ9ct49NlFzyHA/yeb ejhmYCJcSNGcbXigg8uuq3I3sToSLnxj09YtUerv/uAbpTA10SgVYXl2s2A50EgY 1rPAnBNkFQa1CdrS3seR4jU2gWwYu3dCvRSLb/Bm3qm6DNFxxnH53TsAFXPxDFfx Wf2ljGu12m0mZB+7WTjGP2ALaRVFhg1WT37+rOrZQLtFnvshUpV9611DnM0tPBDw QDkUnke5Lc05d1nsknCwCGNifAbW2NRZKAE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:36:46 2026 by rpki-client