$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa File: a3e480c9-7065-379a-a7a0-3741030cb8a7.roa (raw, json) Hash identifier: rT6Q+gO0vGcLYiGIjVNZshR0hQ/yHae+V9JPwJtnwVs= Subject key identifier: 91:0E:5F:96:26:49:09:45:FB:E0:09:28:09:6A:59:BC:EB:9D:46:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E3A2F59B474A8F86E1B931900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 396596 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:59:b4:74:a8:f8:6e:1b:93:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=5e08ad03-93fc-4d91-87cf-5fc0a20589a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:9b:54:2f:40:83:db:4b:a3:77:1f:37:5f: 6a:f5:2e:a1:48:d7:a9:6f:9d:6d:af:55:98:3f:dc: 5b:6c:b2:ea:0a:29:2a:af:85:6a:b8:6f:49:d8:31: 71:3d:c4:af:10:9f:12:57:40:d2:2b:40:11:fd:b7: 67:84:25:51:0b:04:77:65:67:8b:db:01:af:77:c5: 02:74:6f:a3:d7:14:ff:5d:1b:40:12:01:f4:d0:0a: 56:9f:6a:ed:1d:72:a2:2d:75:e8:e3:df:18:a0:d4: d9:15:04:2b:d5:ea:d3:13:f3:d3:97:5f:c7:d4:ea: 13:c6:d2:61:a5:31:7d:8a:32:d6:dc:9b:6c:3a:e0: a6:7d:83:d5:36:71:7f:82:4d:3a:47:d8:dd:b2:e4: a3:6e:88:7d:ea:6c:94:4c:a4:82:60:13:ab:5f:09: 7e:eb:52:e9:2b:ee:47:21:c7:c4:33:70:a2:5d:a9: 46:fd:a4:97:72:d9:53:b6:c6:56:81:e0:1b:b9:57: 6b:ac:28:a5:d8:e9:73:cd:ca:4a:07:e7:da:dc:07: d7:e8:b9:39:06:de:59:da:9f:dd:91:7d:37:b1:d5: fb:b3:21:fd:77:22:54:91:d6:01:f4:a5:20:0d:f6: 56:35:5e:01:89:74:d0:01:c0:0b:5d:73:57:77:c4: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0E:5F:96:26:49:09:45:FB:E0:09:28:09:6A:59:BC:EB:9D:46:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:09:f2:cd:2c:ab:a1:02:06:27:ea:00:8e:d6:ea:31:e1:8d: fa:16:c2:15:c7:7a:1b:05:23:20:b8:bb:a7:69:f9:8f:66:d1: 99:5b:6e:7a:10:fb:b0:23:b4:58:0d:84:67:74:e5:52:17:4a: 0f:7e:bb:41:69:09:d1:cf:a6:25:bc:46:b8:36:3e:0a:1e:0c: 99:b5:60:8c:36:82:88:48:23:21:c8:64:8c:9b:68:80:e3:98: 4d:00:7b:9e:b8:c9:b3:f4:fc:48:8c:ae:22:bf:7d:ae:c9:76: f6:6e:bd:17:e1:da:88:c4:db:67:13:ff:47:f6:f1:20:a6:a0: af:78:16:76:6b:c8:11:e1:14:c9:02:e2:61:f5:f1:17:78:e4: f6:22:3d:ce:8c:d9:ba:38:e7:26:b7:7d:70:05:45:99:9a:b1: 8c:4a:ee:13:ae:ca:ea:2b:15:91:8c:ec:26:40:75:7b:1d:04: d5:b2:fd:d2:d9:90:5c:a8:72:9b:c0:ff:3b:5e:17:3d:f8:26: 3c:7d:05:33:b0:1b:50:9c:00:36:a9:2c:87:04:61:77:f0:1a: 3d:20:c8:f2:8d:ee:93:c0:49:60:ba:85:2a:c3:b9:4c:bb:ea: 07:45:89:dc:c4:eb:4a:1d:41:b5:7d:e4:de:c1:48:cf:f3:f6: 27:be:75:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE46L1m0dKj4bhuTGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NWUwOGFkMDMtOTNmYy00ZDkxLTg3Y2YtNWZjMGEyMDU4OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKabVC9Ag9tLo3cfN19q9S6hSNepb51tr1WY P9xbbLLqCikqr4VquG9J2DFxPcSvEJ8SV0DSK0AR/bdnhCVRCwR3ZWeL2wGvd8UC dG+j1xT/XRtAEgH00ApWn2rtHXKiLXXo498YoNTZFQQr1erTE/PTl1/H1OoTxtJh pTF9ijLW3JtsOuCmfYPVNnF/gk06R9jdsuSjboh96myUTKSCYBOrXwl+61LpK+5H IcfEM3CiXalG/aSXctlTtsZWgeAbuVdrrCil2OlzzcpKB+fa3AfX6Lk5Bt5Z2p/d kX03sdX7syH9dyJUkdYB9KUgDfZWNV4BiXTQAcALXXNXd8SraQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJEOX5YmSQlF++AJKAlqWbzrnUaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNlNDgwYzktNzA2NS0z NzlhLWE3YTAtMzc0MTAzMGNiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCICfLNLKuhAgYn6gCO1uox4Y36FsIVx3obBSMg uLunafmPZtGZW256EPuwI7RYDYRndOVSF0oPfrtBaQnRz6YlvEa4Nj4KHgyZtWCM NoKISCMhyGSMm2iA45hNAHueuMmz9PxIjK4iv32uyXb2br0X4dqIxNtnE/9H9vEg pqCveBZ2a8gR4RTJAuJh9fEXeOT2Ij3OjNm6OOcmt31wBUWZmrGMSu4TrsrqKxWR jOwmQHV7HQTVsv3S2ZBcqHKbwP87Xhc9+CY8fQUzsBtQnAA2qSyHBGF38Bo9IMjy je6TwElguoUqw7lMu+oHRYncxOtKHUG1feTewUjP8/YnvnVg -----END CERTIFICATE-----Generated at Sun Jun 28 17:20:45 2026 by rpki-client