$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa File: 21812b5d-b2b3-398c-afb7-221a71c32c32.roa (raw, json) Hash identifier: /9ai28mL440ZrBgcJRvkq6ZrkhwwXJ/sOzCJwteKG1I= Subject key identifier: A2:52:1E:27:36:36:C9:B7:BA:03:BE:81:11:CC:06:5A:4A:3C:FD:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E3A2F5E99CA44F639B75402C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 396575 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:5e:99:ca:44:f6:39:b7:54:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=66adb43d-85d8-48c2-8ef5-e5640b94b7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:d9:76:15:6b:63:52:d3:57:7b:03:df:37: 95:78:70:66:ec:6b:2d:32:84:7f:a0:6f:2f:c2:aa: 91:c0:dd:bd:4d:6a:a2:13:6f:4b:a0:9f:54:45:82: 6b:fb:e2:77:01:6e:25:fc:07:84:75:ab:e5:fe:df: 0c:f1:37:01:a3:e3:4f:f3:79:6d:ea:34:db:6a:56: cc:4b:57:84:a7:cd:00:7f:51:c3:a8:3c:3a:63:51: 9a:a8:bf:3f:cd:5b:7a:70:0c:62:22:7e:bf:e7:6e: cf:cc:8e:31:4a:93:1e:f1:b7:22:77:b2:ba:85:11: db:ac:f3:06:a3:cc:a4:34:8a:cb:ab:46:6d:ae:8f: e4:4b:d7:e4:2f:17:1d:6d:5c:34:a5:bf:04:50:52: 6e:c2:fd:08:cb:59:ed:bc:68:2b:7a:32:2f:37:dd: ac:51:87:0d:d9:96:d6:52:e8:92:73:01:33:87:91: 2f:83:7a:77:83:7d:10:35:c0:8e:d2:a1:d7:33:9c: 0b:a5:0d:af:ef:e9:63:23:d4:be:40:32:04:73:dd: a8:c2:5f:06:8f:a5:1c:47:da:90:89:ac:e3:af:59: f0:5a:7f:73:79:ca:61:ad:ea:2e:84:96:b8:af:38: 1d:a1:ef:b9:fd:16:68:20:92:4e:60:f5:a9:fc:0b: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:52:1E:27:36:36:C9:B7:BA:03:BE:81:11:CC:06:5A:4A:3C:FD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:b8:6d:71:65:d9:61:c8:1f:df:73:fc:18:ec:07:e0:5f: c5:5f:34:c2:53:4f:cf:25:99:72:8d:21:d3:4f:0e:57:2a:a2: af:92:a6:fe:e9:42:6d:53:78:e1:fa:26:47:17:99:07:9f:55: 60:d0:8e:a0:1d:02:a9:a6:19:47:0c:5a:bd:cf:0b:50:16:75: bb:a3:16:f3:a6:45:50:32:9b:7c:90:41:d2:ac:97:51:8a:48: b6:70:83:95:31:d8:1b:02:44:3f:9c:b4:34:fb:29:9b:06:da: 4f:90:02:83:ed:60:85:08:27:ec:61:9c:84:72:16:1d:43:27: 71:2e:a5:fe:d8:28:e4:18:33:f8:40:a2:6b:d2:e4:2f:8b:c6: aa:06:b8:cc:eb:75:57:2d:86:d7:bc:d0:d1:37:a9:d6:a4:a4: 01:2f:a2:21:dd:70:84:37:25:2c:ec:d6:e5:a3:a9:55:9c:bb: 45:b8:bc:f2:c5:f6:a1:6b:99:61:de:50:40:b0:60:e3:97:54: d7:89:ff:29:d2:ff:1d:d6:4c:8f:eb:a4:c4:37:c1:39:6a:19: 1d:77:ff:68:0f:8a:96:41:a6:98:9c:3f:67:34:83:a7:14:9f: a9:29:56:bc:95:40:c9:2d:36:ac:8e:5c:3f:f6:77:6e:3e:f9: d2:95:b9:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE46L16ZykT2ObdUAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NjZhZGI0M2QtODVkOC00OGMyLThlZjUtZTU2NDBiOTRiN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdbZdhVrY1LTV3sD3zeVeHBm7GstMoR/oG8v wqqRwN29TWqiE29LoJ9URYJr++J3AW4l/AeEdavl/t8M8TcBo+NP83lt6jTbalbM S1eEp80Af1HDqDw6Y1GaqL8/zVt6cAxiIn6/527PzI4xSpMe8bcid7K6hRHbrPMG o8ykNIrLq0Ztro/kS9fkLxcdbVw0pb8EUFJuwv0Iy1ntvGgrejIvN92sUYcN2ZbW UuiScwEzh5Evg3p3g30QNcCO0qHXM5wLpQ2v7+ljI9S+QDIEc92owl8Gj6UcR9qQ iazjr1nwWn9zecphreouhJa4rzgdoe+5/RZoIJJOYPWp/At6FQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKJSHic2Nsm3ugO+gRHMBlpKPP3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjE4MTJiNWQtYjJiMy0z OThjLWFmYjctMjIxYTcxYzMyYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGhLhtcWXZYcgf33P8GOwH4F/FXzTCU0/PJZly jSHTTw5XKqKvkqb+6UJtU3jh+iZHF5kHn1Vg0I6gHQKpphlHDFq9zwtQFnW7oxbz pkVQMpt8kEHSrJdRiki2cIOVMdgbAkQ/nLQ0+ymbBtpPkAKD7WCFCCfsYZyEchYd QydxLqX+2CjkGDP4QKJr0uQvi8aqBrjM63VXLYbXvNDRN6nWpKQBL6Ih3XCENyUs 7Nblo6lVnLtFuLzyxfaha5lh3lBAsGDjl1TXif8p0v8d1kyP66TEN8E5ahkdd/9o D4qWQaaYnD9nNIOnFJ+pKVa8lUDJLTasjlw/9nduPvnSlbkL -----END CERTIFICATE-----Generated at Sun Jun 28 17:20:12 2026 by rpki-client