$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa File: fb7fc9ef-3af8-374c-966d-6249887babce.roa (raw, json) Hash identifier: B39BucssD6A8YAoo5d5pETFtKHTbsfGva3wvLk9HJ3k= Subject key identifier: 2F:BF:AF:29:76:F1:19:5F:6D:F5:74:C7:D8:8F:B0:48:99:69:00:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E13198FE0884D2B067208D800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa Signing time: Fri 05 Jun 2026 21:00:12 +0000 ROA not before: Fri 05 Jun 2026 21:00:12 +0000 ROA not after: Thu 03 Sep 2026 21:00:12 +0000 asID: 396552 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:13:19:8f:e0:88:4d:2b:06:72:08:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 5 21:00:12 2026 GMT Not After : Sep 3 21:00:12 2026 GMT Subject: CN=1104c5e5-a076-454d-95bf-cb4789a6eb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:1d:97:74:cd:af:86:6e:44:1f:42:42:73: 82:d6:ba:dc:22:c9:a7:97:36:86:64:01:b3:8a:cf: 26:ff:a5:d5:5b:40:3a:cf:26:9e:81:c8:95:22:0a: 77:22:d8:2c:2f:b0:b8:c5:f4:3f:67:94:ad:1e:27: f9:74:bf:86:ee:b2:3d:bc:24:6b:e1:75:ee:09:18: 3b:27:74:56:22:f4:03:47:85:84:af:2c:58:38:d8: 76:46:d6:81:9b:f7:88:9c:34:c5:c3:ba:4f:64:50: c7:fc:5d:d6:63:ee:0e:ee:99:07:8e:ee:f6:62:a6: 3b:86:85:c6:d0:b2:50:ff:48:5c:16:ee:2f:9f:9a: 46:d2:50:65:db:da:78:68:dd:42:78:82:17:76:d3: 3e:f1:58:68:8c:8a:13:d0:03:d1:96:6e:72:9d:f7: bb:84:4e:d5:85:b5:73:58:78:a7:6a:1e:b6:06:01: c3:3a:ee:3f:2f:56:58:b0:3b:c1:a4:0e:f2:45:86: 53:bf:d4:f8:17:f2:ed:07:2c:9d:dd:43:0b:f9:44: 46:7a:e9:68:02:b1:5c:96:f0:8f:70:95:5d:4e:5e: cf:6d:54:84:2b:78:c3:f2:a4:25:67:52:52:13:42: ef:3e:d2:89:c7:3b:f3:24:13:39:0e:32:66:60:4e: ce:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:AF:29:76:F1:19:5F:6D:F5:74:C7:D8:8F:B0:48:99:69:00:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb7fc9ef-3af8-374c-966d-6249887babce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:db:2e:3e:51:59:eb:45:39:59:e6:c0:99:e9:38:e4:62:4f: 16:09:53:79:34:50:4f:53:4f:40:bc:0c:15:cc:4e:49:43:26: 48:22:f2:f7:91:69:cc:59:86:81:6e:ce:d2:40:24:1c:b9:29: f3:da:56:ff:88:16:30:6f:71:58:67:9e:f5:80:66:4e:6b:bb: db:2e:8d:5a:16:18:6a:06:cd:f5:1e:32:e2:76:a3:61:8e:0f: 9e:21:47:64:d1:5c:49:f3:b8:37:1b:81:d9:30:2c:67:7f:73: 15:8c:bf:67:34:20:1f:ba:0c:51:ee:18:99:d8:f5:15:62:0d: e2:c0:c7:f3:08:9a:87:e4:b5:cf:93:d7:19:cd:36:92:6a:92: 06:c0:3b:34:a9:6d:d8:4b:65:97:ec:1b:90:14:6e:94:bb:21: 3b:ec:52:6e:19:02:87:44:09:e9:55:86:bc:8a:0a:91:dd:34: c6:72:06:6d:75:4c:5c:0d:05:ac:39:c6:8d:28:ad:d4:af:de: af:a7:52:c0:96:0a:dc:60:03:7e:ef:51:50:f8:77:f6:70:56: 00:dc:0c:d2:24:7f:e7:60:35:46:79:bd:a6:4c:46:e6:93:fe: 91:5f:5c:14:fc:4c:36:5b:b6:24:22:58:55:64:8e:33:26:9b: d2:3c:64:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4TGY/giE0rBnII2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk MTEwNGM1ZTUtYTA3Ni00NTRkLTk1YmYtY2I0Nzg5YTZlYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9sdl3TNr4ZuRB9CQnOC1rrcIsmnlzaGZAGz is8m/6XVW0A6zyaegciVIgp3ItgsL7C4xfQ/Z5StHif5dL+G7rI9vCRr4XXuCRg7 J3RWIvQDR4WEryxYONh2RtaBm/eInDTFw7pPZFDH/F3WY+4O7pkHju72YqY7hoXG 0LJQ/0hcFu4vn5pG0lBl29p4aN1CeIIXdtM+8VhojIoT0APRlm5ynfe7hE7VhbVz WHinah62BgHDOu4/L1ZYsDvBpA7yRYZTv9T4F/LtByyd3UML+URGeuloArFclvCP cJVdTl7PbVSEK3jD8qQlZ1JSE0LvPtKJxzvzJBM5DjJmYE7OXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC+/ryl28RlfbfV0x9iPsEiZaQBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI3ZmM5ZWYtM2FmOC0z NzRjLTk2NmQtNjI0OTg4N2JhYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITbLj5RWetFOVnmwJnpOORiTxYJU3k0UE9TT0C8DBXMTklDJkgi 8veRacxZhoFuztJAJBy5KfPaVv+IFjBvcVhnnvWAZk5ru9sujVoWGGoGzfUeMuJ2 o2GOD54hR2TRXEnzuDcbgdkwLGd/cxWMv2c0IB+6DFHuGJnY9RViDeLAx/MImofk tc+T1xnNNpJqkgbAOzSpbdhLZZfsG5AUbpS7ITvsUm4ZAodECelVhryKCpHdNMZy Bm11TFwNBaw5xo0ordSv3q+nUsCWCtxgA37vUVD4d/ZwVgDcDNIkf+dgNUZ5vaZM RuaT/pFfXBT8TDZbtiQiWFVkjjMmm9I8ZKc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:03:34 2026 by rpki-client