$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa File: fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa (raw, json) Hash identifier: +Cd/98JZJPJTAiQqAYzY7opWE3XMzLH07z/eUelwNOI= Subject key identifier: 4B:52:1D:9B:31:F4:30:A3:1D:F0:CB:13:B3:6B:0F:B6:5C:AB:F4:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0436227842C68B87F22B6B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 36623 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:22:78:42:c6:8b:87:f2:2b:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=8918c6e0-928d-4872-9e07-d4fcaf0fd287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:66:60:00:b6:f2:dc:eb:92:34:78:e1:c2: 6b:4c:16:83:8a:9c:7e:14:b4:24:8f:0f:08:f9:b1: 96:79:e8:40:fe:8b:35:c4:d4:12:1d:76:cd:19:da: 1f:d6:1a:ae:40:48:c8:4b:16:95:73:90:15:6a:cd: 50:99:c7:39:54:72:62:d3:ac:98:3c:b6:31:56:f2: 73:71:d1:9f:42:24:ae:0c:af:74:a6:5c:7f:c9:1d: 9e:3a:e6:49:f6:d4:a0:f4:e2:4b:ce:38:b3:ee:2a: 8b:be:d6:bb:ef:e5:13:e7:ff:93:37:d6:a0:06:75: dc:ea:15:c1:55:ef:05:a4:45:ee:1d:21:40:87:97: 25:2b:f6:20:19:56:94:78:b4:0c:05:ad:83:cb:9f: c8:e3:07:0a:f1:85:45:df:ef:ac:29:7c:51:6b:d9: 92:6f:5f:b1:39:93:00:f2:01:7a:f0:63:9c:72:fe: f4:b2:14:27:f7:c4:a8:59:ba:21:99:03:5f:ec:5f: 4e:9d:c1:bc:e6:77:35:66:99:88:56:c6:b4:3e:fd: 95:9e:10:c9:9d:09:a0:52:b7:fa:a0:0a:e3:dc:8f: 6c:c9:8f:72:bf:a4:70:81:29:02:72:d5:73:5f:ef: d5:dc:5d:08:75:c9:9a:c0:1a:dc:80:2b:e0:8a:0d: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:52:1D:9B:31:F4:30:A3:1D:F0:CB:13:B3:6B:0F:B6:5C:AB:F4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7e:a3:cd:bc:f4:4e:7f:ae:1c:2d:9c:1a:16:c0:1f:40:25: 43:66:95:33:a2:1d:94:96:83:0c:39:3a:41:65:63:09:c4:5c: e7:da:72:75:dc:7d:a3:55:0a:d4:b1:51:cb:77:77:d4:4b:71: 36:93:68:67:5f:15:00:c3:1b:bf:a2:38:82:4d:2f:54:fe:b2: 38:42:f1:ab:65:63:f6:0b:00:02:25:ee:28:06:3c:84:25:b6: 82:db:2d:58:6f:9d:3a:12:1f:f1:ca:3a:6f:2e:2c:aa:14:87: d2:45:ff:7f:f5:26:13:0c:b9:e1:e9:ee:93:21:1a:28:4c:43: ea:a4:b4:65:60:91:ec:bc:5d:2c:1a:01:47:b8:5a:41:9e:bc: 83:94:48:db:68:1a:b5:c0:a0:67:2c:08:e9:a4:f2:9d:26:af: dc:bc:78:d9:00:b1:2e:ac:d8:e9:b3:69:6b:a9:70:b8:2d:fa: 72:77:a5:55:84:af:3d:9c:e5:be:f0:39:8f:60:9a:b4:88:9e: a4:fd:e3:3f:cf:2f:84:44:5b:29:d4:53:62:25:4e:2a:8a:76: 1b:3d:16:89:f3:f7:30:3b:b3:6c:26:ba:9d:a4:e7:c1:5e:a0: 4d:38:f5:f3:d5:d5:b2:af:1e:67:b1:ca:76:02:a0:7d:c3:ae: e2:75:a4:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ENiJ4QsaLh/Ira4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ODkxOGM2ZTAtOTI4ZC00ODcyLTllMDctZDRmY2FmMGZkMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiahmYAC28tzrkjR44cJrTBaDipx+FLQkjw8I +bGWeehA/os1xNQSHXbNGdof1hquQEjISxaVc5AVas1Qmcc5VHJi06yYPLYxVvJz cdGfQiSuDK90plx/yR2eOuZJ9tSg9OJLzjiz7iqLvta77+UT5/+TN9agBnXc6hXB Ve8FpEXuHSFAh5clK/YgGVaUeLQMBa2Dy5/I4wcK8YVF3++sKXxRa9mSb1+xOZMA 8gF68GOccv70shQn98SoWbohmQNf7F9OncG85nc1ZpmIVsa0Pv2VnhDJnQmgUrf6 oArj3I9syY9yv6RwgSkCctVzX+/V3F0IdcmawBrcgCvgig3Z6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEtSHZsx9DCjHfDLE7NrD7Zcq/RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTY0Y2QtOGJkMC0z YmVlLThkMWEtYTQwOGE2NmMyODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACN+o8289E5/rhwtnBoWwB9AJUNmlTOiHZSWgww5OkFlYwnEXOfa cnXcfaNVCtSxUct3d9RLcTaTaGdfFQDDG7+iOIJNL1T+sjhC8atlY/YLAAIl7igG PIQltoLbLVhvnToSH/HKOm8uLKoUh9JF/3/1JhMMueHp7pMhGihMQ+qktGVgkey8 XSwaAUe4WkGevIOUSNtoGrXAoGcsCOmk8p0mr9y8eNkAsS6s2OmzaWupcLgt+nJ3 pVWErz2c5b7wOY9gmrSInqT94z/PL4REWynUU2IlTiqKdhs9Fonz9zA7s2wmup2k 58FeoE049fPV1bKvHmexynYCoH3DruJ1pHU= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:26 2026 by rpki-client