$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa File: fa2641d0-543e-3775-9d82-1fd31c482edb.roa (raw, json) Hash identifier: alwbcgNVkXoeyQ/38sDmU1ZFezzj0uBCDObQeRZ3i1w= Subject key identifier: A7:55:56:F2:9E:6A:A5:72:EC:BF:EA:BE:BE:7B:FF:C8:BF:BF:69:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E043629B52F2434A8B5CE1780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 396550 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:29:b5:2f:24:34:a8:b5:ce:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=7c372217-a161-42e2-a07c-2cfd4f602978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:9a:6b:3d:99:84:5f:44:6d:b6:4e:a0:c8: 75:df:92:94:bd:83:65:c2:f4:41:c7:69:24:cc:64: ea:cd:3d:c5:57:98:3b:05:35:5c:c3:13:88:e1:76: 43:a0:60:08:b7:b4:82:9a:17:0a:33:a6:ce:28:17: 57:1a:84:fe:30:e8:47:bf:06:37:36:fd:77:9d:f1: e5:d9:10:cd:3e:59:6c:a4:44:57:fe:8f:ac:6c:eb: 10:ab:9e:76:92:0a:60:68:17:55:5c:2c:52:d5:69: a1:dd:ec:2d:0a:78:96:f7:9b:fa:d3:0c:77:d0:71: 9f:19:e8:44:dd:c2:c9:d5:5e:72:11:da:cf:64:2b: 24:10:ff:d3:57:9a:92:81:43:53:2f:b9:45:52:31: a5:bb:6b:75:18:56:f4:d3:ec:e0:f5:94:e3:f8:01: 84:4c:84:17:8e:99:cc:49:9a:30:d1:71:34:42:29: 4f:55:78:99:8d:7f:ac:b9:c8:b2:a9:5c:db:9c:44: c7:2f:aa:be:d5:f2:ad:87:cc:09:41:fd:0b:9f:d3: a5:1f:a8:56:42:b9:0b:bb:e6:7b:5d:9e:2c:ac:56: 0d:76:01:87:f6:b3:b5:eb:0c:06:86:72:1c:54:14: 68:0d:5f:f9:5b:c7:fb:56:13:4d:e3:93:94:4c:4e: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:56:F2:9E:6A:A5:72:EC:BF:EA:BE:BE:7B:FF:C8:BF:BF:69:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8e:05:00:37:01:37:ca:3a:56:fe:0c:b8:59:d9:1f:21:86: a3:e7:94:51:d2:9d:6d:9d:fa:51:1b:32:f1:1a:bd:54:3b:72: 8d:26:c3:03:ec:36:90:53:89:05:fb:0d:76:a5:f7:24:c7:18: 3f:3f:c8:85:bc:20:f5:a8:b2:ba:4e:4d:77:4a:e3:78:31:c8: 01:4b:d0:51:7e:72:89:51:80:47:74:ad:1c:74:55:1a:4c:d5: 6a:bd:6c:f8:82:5f:ed:fa:64:02:c0:02:76:d3:d2:23:24:97: 59:f0:22:31:54:08:da:25:4e:a5:4f:5a:24:e3:b5:b7:a8:03: be:ab:3f:c2:60:90:ee:9d:f7:63:aa:2f:a5:94:bf:16:32:38: de:3d:be:c8:2b:b1:bf:01:32:7c:56:66:05:46:17:ee:90:2c: 8b:97:af:d2:ad:f9:c2:6b:00:8d:9a:64:87:d6:a9:04:ef:03: 2a:c0:d2:6b:86:a1:c2:83:a9:c7:01:1f:b1:a4:f2:8a:95:50: 7b:04:3e:72:64:f2:52:c8:b9:7d:90:9c:4f:36:3d:0e:2b:cd: b4:bc:27:e2:5a:99:54:dc:5a:71:33:9f:8f:1a:64:98:05:37: 43:2d:3a:35:d9:c7:48:01:ea:37:00:5c:2e:74:9c:12:80:60: ae:21:19:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENim1LyQ0qLXOF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk N2MzNzIyMTctYTE2MS00MmUyLWEwN2MtMmNmZDRmNjAyOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EKaaz2ZhF9EbbZOoMh135KUvYNlwvRBx2kk zGTqzT3FV5g7BTVcwxOI4XZDoGAIt7SCmhcKM6bOKBdXGoT+MOhHvwY3Nv13nfHl 2RDNPllspERX/o+sbOsQq552kgpgaBdVXCxS1Wmh3ewtCniW95v60wx30HGfGehE 3cLJ1V5yEdrPZCskEP/TV5qSgUNTL7lFUjGlu2t1GFb00+zg9ZTj+AGETIQXjpnM SZow0XE0QilPVXiZjX+suciyqVzbnETHL6q+1fKth8wJQf0Ln9OlH6hWQrkLu+Z7 XZ4srFYNdgGH9rO16wwGhnIcVBRoDV/5W8f7VhNN45OUTE690wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdVVvKeaqVy7L/qvr57/8i/v2lfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmEyNjQxZDAtNTQzZS0z Nzc1LTlkODItMWZkMzFjNDgyZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyOBQA3ATfKOlb+DLhZ2R8hhqPnlFHSnW2d+lEbMvEavVQ7co0m wwPsNpBTiQX7DXal9yTHGD8/yIW8IPWosrpOTXdK43gxyAFL0FF+colRgEd0rRx0 VRpM1Wq9bPiCX+36ZALAAnbT0iMkl1nwIjFUCNolTqVPWiTjtbeoA76rP8JgkO6d 92OqL6WUvxYyON49vsgrsb8BMnxWZgVGF+6QLIuXr9Kt+cJrAI2aZIfWqQTvAyrA 0muGocKDqccBH7Gk8oqVUHsEPnJk8lLIuX2QnE82PQ4rzbS8J+JamVTcWnEzn48a ZJgFN0MtOjXZx0gB6jcAXC50nBKAYK4hGTc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:36:46 2026 by rpki-client