$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json) Hash identifier: Pb+CNDuLYa/g7ggoIavaru/RdnIFIe4nO4KATJX61gE= Subject key identifier: 30:98:E7:72:61:51:50:FD:AE:58:68:90:E9:E0:AF:B8:26:97:79:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E2D9F32A5B030DA15B845D200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 0 IP address blocks: 2620:74:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:32:a5:b0:30:da:15:b8:45:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=8b545963-027c-4658-8ecd-cb1226483feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:43:ca:60:dd:e2:36:bd:85:ad:35:c5:16: 63:63:e9:0e:9a:87:c9:ab:db:e5:50:f5:f5:e5:82: e5:05:c4:26:31:9b:fa:74:d9:e7:d7:8c:6d:d6:4b: 87:81:f2:1f:21:73:7a:f4:c9:ca:fb:00:5a:28:86: 38:98:85:0e:a6:89:cf:d8:4e:da:b2:ae:c2:90:26: ee:6c:0a:44:b9:7f:23:02:85:3e:fb:ae:42:1e:3d: 4b:35:30:6f:43:fa:19:7a:81:59:c2:2b:b9:b1:6d: ed:69:91:0f:af:2d:72:6c:1c:dc:dc:be:41:ad:48: b9:1d:c2:9b:7f:1c:a9:dc:d9:36:da:21:f4:27:ff: 34:86:95:22:2b:f3:cf:00:ec:c0:ff:21:eb:a6:24: 7c:b5:3c:59:12:64:e0:38:f2:cd:54:12:b6:75:e9: f8:55:12:a0:98:d4:81:09:c1:24:09:43:ba:22:ae: 42:cb:06:a6:0e:2f:83:e8:91:83:ac:c1:7a:5a:24: 0e:7b:c2:bc:8e:a3:a9:6e:95:f6:31:c2:03:b8:d9: 1e:f3:b6:aa:48:46:ca:8b:3a:f4:03:04:38:ab:3c: 0d:d3:e9:e0:c0:ec:0e:47:29:e7:14:20:98:94:62: 5f:39:00:40:cb:53:61:ff:1a:bd:17:45:6b:98:18: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:98:E7:72:61:51:50:FD:AE:58:68:90:E9:E0:AF:B8:26:97:79:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:06:be:e9:e1:1a:ed:17:c7:13:07:6d:c8:d2:05:c7:1d:78: 6c:14:4f:bd:56:63:68:1c:9c:7a:f5:7e:29:2b:df:86:ae:59: d3:e3:96:5f:ad:86:e7:4e:e1:8e:63:3d:f1:51:4d:4e:1b:05: a6:5f:66:e5:99:eb:53:49:67:3f:c2:85:d9:15:89:c9:e1:b5: 64:60:4b:7c:39:52:93:dc:60:dd:6d:6a:16:08:2e:41:8f:82: 0a:c7:de:78:12:33:fc:59:ba:8f:8a:38:b7:ef:58:f0:31:4e: d5:ee:c4:4a:09:e1:c6:82:80:26:eb:31:df:43:af:54:7c:1e: 3c:12:17:5f:c5:1c:b7:4e:3d:73:55:18:0b:b8:46:b5:56:24: 4b:dc:49:37:1f:d9:ec:ce:62:54:e6:ae:b0:bf:f8:6b:a5:90: e6:d9:bd:b1:06:2f:40:f9:55:f8:af:ae:c7:77:6f:59:7f:e4: a6:d7:0c:48:6c:82:a7:5f:bb:0c:cc:75:49:36:f1:38:39:58: 3d:db:9e:72:a9:af:89:2c:6e:e8:37:14:15:40:17:41:9a:16: fc:e9:08:ab:29:da:a0:22:fc:59:6d:6c:8e:89:53:1f:9b:74: 8a:dd:13:b6:a1:8c:88:02:c9:86:81:f2:9a:1e:a9:d9:d0:69: 99:80:e1:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4tnzKlsDDaFbhF0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk OGI1NDU5NjMtMDI3Yy00NjU4LThlY2QtY2IxMjI2NDgzZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X1DymDd4ja9ha01xRZjY+kOmofJq9vlUPX1 5YLlBcQmMZv6dNnn14xt1kuHgfIfIXN69MnK+wBaKIY4mIUOponP2E7asq7CkCbu bApEuX8jAoU++65CHj1LNTBvQ/oZeoFZwiu5sW3taZEPry1ybBzc3L5BrUi5HcKb fxyp3Nk22iH0J/80hpUiK/PPAOzA/yHrpiR8tTxZEmTgOPLNVBK2den4VRKgmNSB CcEkCUO6Iq5CywamDi+D6JGDrMF6WiQOe8K8jqOpbpX2McIDuNke87aqSEbKizr0 AwQ4qzwN0+ngwOwORynnFCCYlGJfOQBAy1Nh/xq9F0VrmBg9YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDCY53JhUVD9rlhokOngr7gml3nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY4YTQyYjEtYmUzZi0z M2I1LWE0MjQtMDM3YjQzMjhhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD4GvunhGu0XxxMHbcjSBccdeGwUT71WY2gcnHr1fikr34auWdPj ll+thudO4Y5jPfFRTU4bBaZfZuWZ61NJZz/ChdkVicnhtWRgS3w5UpPcYN1tahYI LkGPggrH3ngSM/xZuo+KOLfvWPAxTtXuxEoJ4caCgCbrMd9Dr1R8HjwSF1/FHLdO PXNVGAu4RrVWJEvcSTcf2ezOYlTmrrC/+GulkObZvbEGL0D5Vfivrsd3b1l/5KbX DEhsgqdfuwzMdUk28Tg5WD3bnnKpr4ksbug3FBVAF0GaFvzpCKsp2qAi/FltbI6J Ux+bdIrdE7ahjIgCyYaB8poeqdnQaZmA4eM= -----END CERTIFICATE-----Generated at Sun Jun 28 17:20:42 2026 by rpki-client