$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a9fb978-7d9a-3809-baa8-8821577f2b36.roa File: 3a9fb978-7d9a-3809-baa8-8821577f2b36.roa (raw, json) Hash identifier: jP8mbQDzCrmpGGg7s007F+3dxWYXTuPEkH0ZpXZ19Ew= Subject key identifier: 86:B2:44:61:67:5E:D3:13:AC:1C:24:23:86:A4:B7:9B:87:F6:4A:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E4A2A6C21EDBC3FC5CAD1F180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a9fb978-7d9a-3809-baa8-8821577f2b36.roa Signing time: Thu 25 Jun 2026 14:23:48 +0000 ROA not before: Thu 25 Jun 2026 14:23:48 +0000 ROA not after: Wed 23 Sep 2026 14:23:48 +0000 asID: 26134 IP address blocks: 2620:74:8a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:2a:6c:21:ed:bc:3f:c5:ca:d1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 25 14:23:48 2026 GMT Not After : Sep 23 14:23:48 2026 GMT Subject: CN=7d513936-d263-4b05-879c-78c6bc1e22e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:92:a2:64:c1:6b:e5:0f:0e:ab:4a:d5:44: 35:59:42:cd:85:b1:a2:ff:6c:f5:19:b2:83:bb:69: 1c:dd:a7:67:ad:14:bb:d2:69:24:d5:91:56:a5:ac: e8:1f:78:7a:0a:3e:84:8b:e8:81:06:9d:bf:c8:61: 57:ec:35:95:93:95:80:d9:e2:3d:04:2e:22:24:f3: fa:3f:fc:e0:03:2b:04:9d:65:34:fa:47:dd:ce:09: 3e:d1:87:d4:18:55:83:32:4f:8b:c5:17:cb:e2:2c: e1:9d:ed:06:b8:c2:cb:9d:24:2c:b6:43:84:96:6a: 7b:8f:39:49:2d:ba:83:72:fb:15:f3:aa:48:6d:32: 9d:47:84:81:95:08:f8:9f:f2:2e:f2:b1:af:e9:57: 9e:8c:6a:69:00:27:40:b8:73:dd:d0:e2:da:cc:8f: 32:86:31:c9:b7:d4:97:d7:54:ae:74:e4:f2:bd:4f: 60:54:95:28:69:27:5c:ec:b9:99:f1:8b:5f:d5:9c: 7e:33:ea:8a:68:8b:ca:f2:31:a9:d5:d4:25:24:18: 8d:95:5a:3b:b3:66:30:63:9a:2a:eb:c3:0f:a9:9e: 86:df:fd:8f:82:45:7d:0d:c7:5a:b4:19:24:1e:4e: cd:90:b3:14:29:0b:59:0a:03:80:ee:29:1d:91:10: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B2:44:61:67:5E:D3:13:AC:1C:24:23:86:A4:B7:9B:87:F6:4A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a9fb978-7d9a-3809-baa8-8821577f2b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:8a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:30:90:c9:71:a2:02:2e:ea:87:39:b2:05:ef:53:00:c8:09: d7:d5:79:f6:6b:a9:25:3f:1c:f7:40:dc:fe:1c:36:64:71:08: ba:11:4a:5f:e9:e1:35:5d:67:31:ee:db:9e:e0:74:c6:9b:14: c8:b1:5f:fa:c5:35:36:b1:7a:9f:6f:23:19:71:22:0c:ae:94: 8d:97:1f:3e:52:6c:d2:33:3c:b4:2b:0b:34:48:1e:8e:26:1d: a7:06:bb:97:54:c3:77:2a:51:cc:8f:35:85:20:e1:8e:06:8b: b4:06:cd:e9:59:f5:e4:3d:b6:36:4d:43:e8:b9:67:2a:9b:1f: 4e:66:9e:44:ec:fc:3f:fc:5a:94:be:09:13:7e:c4:25:6e:09: ce:ef:65:7f:d0:6e:9a:26:69:14:94:86:cb:51:62:ad:be:ec: 5c:ae:fe:7a:01:09:47:b5:09:38:7e:16:5a:bb:7a:fc:3e:34: 5c:3c:a5:12:af:82:c0:a7:3e:ce:00:1d:3e:5b:9c:ee:0d:8b: a9:0f:98:13:2e:10:f2:22:56:a5:d1:0e:98:14:e3:ad:99:ac: e2:f8:b5:09:f6:1a:fb:a1:1f:d0:26:e0:f5:e3:ae:97:6e:e0: 07:59:8e:15:cb:e8:35:a9:0e:00:0c:69:59:00:3c:8b:45:e7: 32:a5:85:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5KKmwh7bw/xcrR8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYyNTE0MjM0OFoXDTI2MDkyMzE0MjM0OFowLzEtMCsGA1UEAxMk N2Q1MTM5MzYtZDI2My00YjA1LTg3OWMtNzhjNmJjMWUyMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF2SomTBa+UPDqtK1UQ1WULNhbGi/2z1GbKD u2kc3adnrRS70mkk1ZFWpazoH3h6Cj6Ei+iBBp2/yGFX7DWVk5WA2eI9BC4iJPP6 P/zgAysEnWU0+kfdzgk+0YfUGFWDMk+LxRfL4izhne0GuMLLnSQstkOElmp7jzlJ LbqDcvsV86pIbTKdR4SBlQj4n/Iu8rGv6VeejGppACdAuHPd0OLazI8yhjHJt9SX 11SudOTyvU9gVJUoaSdc7LmZ8Ytf1Zx+M+qKaIvK8jGp1dQlJBiNlVo7s2YwY5oq 68MPqZ6G3/2PgkV9DcdatBkkHk7NkLMUKQtZCgOA7ikdkRB1YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIayRGFnXtMTrBwkI4akt5uH9kpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E5ZmI5NzgtN2Q5YS0z ODA5LWJhYTgtODgyMTU3N2YyYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4wkMlxogIu6oc5sgXvUwDICdfVefZrqSU/HPdA3P4cNmRxCLoR Sl/p4TVdZzHu257gdMabFMixX/rFNTaxep9vIxlxIgyulI2XHz5SbNIzPLQrCzRI Ho4mHacGu5dUw3cqUcyPNYUg4Y4Gi7QGzelZ9eQ9tjZNQ+i5ZyqbH05mnkTs/D/8 WpS+CRN+xCVuCc7vZX/QbpomaRSUhstRYq2+7Fyu/noBCUe1CTh+Flq7evw+NFw8 pRKvgsCnPs4AHT5bnO4Ni6kPmBMuEPIiVqXRDpgU462ZrOL4tQn2GvuhH9Am4PXj rpdu4AdZjhXL6DWpDgAMaVkAPItF5zKlhb4= -----END CERTIFICATE-----Generated at Sun Jun 28 17:16:13 2026 by rpki-client