$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa File: a29e971c-3fed-3379-ad50-027a14d1589b.roa (raw, json) Hash identifier: GztaRhDEcAKfCiKidn1bm9ywgfqwl6h0tMoNQsZ62Do= Subject key identifier: 22:DE:68:E6:FC:1A:2F:99:2B:4F:3C:04:CD:A8:9F:FF:13:8A:56:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E31CF0EE3DD4F6019221666C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 0 IP address blocks: 2620:74:28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:0e:e3:dd:4f:60:19:22:16:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=de5d6646-35af-4f9e-9505-2a802d6f04e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:bc:f9:2d:de:59:22:43:b0:4c:76:73:1b: 81:87:9a:60:05:05:d5:76:bf:61:a6:72:48:f0:3c: 31:94:b5:2e:3f:02:cd:18:bc:86:cd:32:6c:6e:94: 46:e7:e0:18:7b:de:c7:ed:18:dd:8c:a6:69:68:7e: de:66:56:4f:f6:3f:eb:63:00:6d:fa:24:5f:0b:4b: 65:45:3d:f2:b0:d4:7e:df:77:6e:90:ee:a7:54:37: 0c:59:b0:9e:fd:ef:0c:3f:f8:ff:eb:99:ce:a9:0a: 85:8d:69:d2:20:1f:59:84:bc:a9:c6:36:6e:d5:ce: f5:47:bc:91:94:ce:4c:53:21:2d:5d:9a:e4:7d:bf: 85:b0:1a:e9:fb:89:06:47:e2:6a:74:32:7f:06:bf: 99:99:a6:b9:87:02:cd:7a:f4:04:c4:fd:9d:b3:7b: f2:eb:b9:dd:74:73:41:25:99:49:e4:4d:0d:31:dc: bf:7e:fb:90:06:c5:ec:3a:f5:73:98:5c:ef:a9:89: 5e:57:07:4e:18:96:30:e8:d3:9d:84:a4:a9:a9:a1: a2:dc:63:16:eb:0a:b6:b0:6c:29:a5:30:15:71:69: 03:aa:0d:ac:61:1f:45:08:fc:ff:b8:87:6d:5c:23: bb:9f:40:69:56:56:9b:46:76:a7:a7:a2:fe:f7:29: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:68:E6:FC:1A:2F:99:2B:4F:3C:04:CD:A8:9F:FF:13:8A:56:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:84:a9:94:7c:29:e4:dd:48:8b:89:87:98:33:2a:2d:98:80: 38:a4:23:7e:80:7b:f5:23:01:69:75:b3:5c:cb:ea:9b:4e:01: 03:2b:2c:c9:12:a9:66:80:86:52:c7:7a:9a:93:02:be:21:e3: e4:b2:7d:bf:68:c2:21:d0:73:33:4b:17:fe:37:0d:fa:7e:e3: 52:7b:90:c5:e9:0e:d9:80:ec:b4:14:ae:69:1d:3e:dc:10:a9: 70:02:26:47:81:ea:f8:2a:b2:e9:f0:f7:0d:63:50:17:23:7b: 9d:25:b9:ae:6c:bc:ea:3f:bb:dd:63:6f:76:ae:8e:74:e1:4a: 36:c9:7c:0d:04:52:c8:02:78:72:20:dd:90:a9:1e:30:8a:b6: 9b:61:72:5f:6b:17:ec:fb:a7:29:bb:36:ea:dd:84:0b:fb:8a: b6:f3:7d:c4:db:c4:f1:ee:71:dd:1d:35:3e:78:fc:f3:c6:4d: b6:88:06:bf:43:01:a9:2f:94:34:2b:a9:4f:2a:ff:b8:6d:f2: d5:b6:77:11:de:5b:b9:89:ce:dc:42:b3:56:20:a4:0a:7b:88: 72:ac:33:ce:35:fa:dc:ee:cf:5b:be:73:8e:cc:83:51:cb:46: d9:fb:2e:09:1b:04:2d:15:ba:f1:af:fd:f5:0c:c5:a5:cb:42: 27:dc:7e:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4xzw7j3U9gGSIWZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZGU1ZDY2NDYtMzVhZi00ZjllLTk1MDUtMmE4MDJkNmYwNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6q8+S3eWSJDsEx2cxuBh5pgBQXVdr9hpnJI 8DwxlLUuPwLNGLyGzTJsbpRG5+AYe97H7RjdjKZpaH7eZlZP9j/rYwBt+iRfC0tl RT3ysNR+33dukO6nVDcMWbCe/e8MP/j/65nOqQqFjWnSIB9ZhLypxjZu1c71R7yR lM5MUyEtXZrkfb+FsBrp+4kGR+JqdDJ/Br+Zmaa5hwLNevQExP2ds3vy67nddHNB JZlJ5E0NMdy/fvuQBsXsOvVzmFzvqYleVwdOGJYw6NOdhKSpqaGi3GMW6wq2sGwp pTAVcWkDqg2sYR9FCPz/uIdtXCO7n0BpVlabRnanp6L+9ykfAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLeaOb8Gi+ZK088BM2on/8TilaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI5ZTk3MWMtM2ZlZC0z Mzc5LWFkNTAtMDI3YTE0ZDE1ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWEqZR8KeTdSIuJh5gzKi2YgDikI36Ae/UjAWl1s1zL6ptOAQMr LMkSqWaAhlLHepqTAr4h4+Syfb9owiHQczNLF/43Dfp+41J7kMXpDtmA7LQUrmkd PtwQqXACJkeB6vgqsunw9w1jUBcje50lua5svOo/u91jb3aujnThSjbJfA0EUsgC eHIg3ZCpHjCKtpthcl9rF+z7pym7NurdhAv7irbzfcTbxPHucd0dNT54/PPGTbaI Br9DAakvlDQrqU8q/7ht8tW2dxHeW7mJztxCs1YgpAp7iHKsM841+tzuz1u+c47M g1HLRtn7LgkbBC0VuvGv/fUMxaXLQifcfm8= -----END CERTIFICATE-----Generated at Sun Jun 28 17:21:19 2026 by rpki-client