$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa File: 0106a4c9-fff9-3e6b-985d-8a9044052333.roa (raw, json) Hash identifier: BmWf+my++9gD19xpf9NMDGLhVSvlTQf9Ayd373Uyub0= Subject key identifier: 41:10:DD:B8:73:5E:4D:1A:6F:E6:4B:AA:A7:16:1B:51:91:60:8A:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D8AC54BF0905B8F19E829B400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 2620:74:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4b:f0:90:5b:8f:19:e8:29:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=d015dad9-f6ae-4f85-84b8-5f16a01f3082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:74:40:6c:9a:da:d1:a6:59:84:82:a7:3c: c2:c9:1d:90:3b:09:ad:b1:7b:cf:3b:87:6d:b9:34: 18:20:db:d1:b8:74:22:7b:e6:7c:3d:d0:93:00:6d: df:75:93:01:a3:4d:f1:28:2c:f3:6e:77:7c:73:50: 27:7b:b5:8a:ce:66:1a:7b:79:bb:47:a7:86:98:00: b8:5a:07:6a:9d:e7:b1:44:af:36:f9:ec:5f:d5:f1: ff:7d:e5:c9:c1:03:8d:4c:85:cf:ce:3b:ac:b8:74: a9:a2:6c:34:73:3e:f4:02:69:81:86:f6:ab:e0:4f: fb:9f:fe:f2:da:0d:88:86:e4:72:81:a7:9f:37:bf: 38:d0:37:24:07:83:33:f5:03:21:30:a6:e8:bf:f4: 34:44:6d:02:74:c3:df:e0:fa:14:bc:14:95:f1:5b: af:53:ea:47:c0:a2:be:58:76:ff:e5:85:7b:2e:97: 9a:79:c9:1f:18:21:ed:76:5a:13:ad:91:0b:21:78: c0:ad:76:b8:0b:b7:43:29:b4:69:0c:6a:ca:f0:c3: 80:73:56:ec:f6:c5:66:37:41:0a:65:ae:83:8a:f7: 38:d2:d5:39:6e:e6:0f:e1:3d:30:81:63:42:87:c7: b5:7c:f1:c6:24:db:46:b6:b5:c6:bd:9f:91:d0:4a: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:DD:B8:73:5E:4D:1A:6F:E6:4B:AA:A7:16:1B:51:91:60:8A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0106a4c9-fff9-3e6b-985d-8a9044052333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:69:da:4d:8c:8d:3e:24:69:f5:59:6c:b3:5a:37:0a:43:c4: 5d:7c:1b:a9:50:58:ae:45:09:0f:70:9f:10:3c:57:6b:7d:24: a0:49:e6:c3:52:bf:c9:d4:cc:d3:b8:2d:e6:95:7f:0b:34:4f: 0e:42:97:c2:78:16:d3:56:eb:dd:5e:23:f8:3f:e6:dd:40:07: be:26:23:28:ac:70:8d:56:80:4a:e1:74:ae:ef:c2:59:d0:6c: 94:5a:5b:51:4d:66:41:26:ec:84:b8:2f:fa:91:f9:4e:ed:bb: db:cb:9a:d7:43:99:72:72:29:00:8a:05:be:b7:d2:17:bb:cf: 43:7f:55:b0:e2:36:be:f5:b8:eb:60:db:dc:da:bf:f5:12:b3: 7c:a9:23:14:ca:d0:8f:e0:a3:a7:c3:4b:1c:53:82:8e:65:ad: 3a:59:d0:3a:8a:e5:cd:81:8b:cd:14:e6:ec:27:84:3b:37:eb: ef:1f:1c:92:f6:82:59:ad:16:3b:a9:ea:65:eb:83:e6:d7:c7: b2:4b:f8:b2:a9:21:e1:86:70:3b:ca:12:19:6a:34:8e:f1:d9: 73:2b:bc:de:ca:27:12:12:4b:00:f5:83:ee:10:4d:43:f8:3b: 5f:91:32:a4:11:55:7f:87:4a:30:a2:ae:93:98:73:d6:8c:42: 6b:1e:67:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2KxUvwkFuPGegptAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDAxNWRhZDktZjZhZS00Zjg1LTg0YjgtNWYxNmEwMWYzMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT10QGya2tGmWYSCpzzCyR2QOwmtsXvPO4dt uTQYINvRuHQie+Z8PdCTAG3fdZMBo03xKCzzbnd8c1Ane7WKzmYae3m7R6eGmAC4 WgdqneexRK82+exf1fH/feXJwQONTIXPzjusuHSpomw0cz70AmmBhvar4E/7n/7y 2g2IhuRygaefN7840DckB4Mz9QMhMKbov/Q0RG0CdMPf4PoUvBSV8VuvU+pHwKK+ WHb/5YV7LpeaeckfGCHtdloTrZELIXjArXa4C7dDKbRpDGrK8MOAc1bs9sVmN0EK Za6Divc40tU5buYP4T0wgWNCh8e1fPHGJNtGtrXGvZ+R0EpvMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEQ3bhzXk0ab+ZLqqcWG1GRYIolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDEwNmE0YzktZmZmOS0z ZTZiLTk4NWQtOGE5MDQ0MDUyMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBp2k2MjT4kafVZbLNaNwpDxF18G6lQWK5FCQ9wnxA8V2t9JKBJ 5sNSv8nUzNO4LeaVfws0Tw5Cl8J4FtNW691eI/g/5t1AB74mIyiscI1WgErhdK7v wlnQbJRaW1FNZkEm7IS4L/qR+U7tu9vLmtdDmXJyKQCKBb630he7z0N/VbDiNr71 uOtg29zav/USs3ypIxTK0I/go6fDSxxTgo5lrTpZ0DqK5c2Bi80U5uwnhDs36+8f HJL2glmtFjup6mXrg+bXx7JL+LKpIeGGcDvKEhlqNI7x2XMrvN7KJxISSwD1g+4Q TUP4O1+RMqQRVX+HSjCirpOYc9aMQmseZ9s= -----END CERTIFICATE-----Generated at Wed May 13 07:26:11 2026 by rpki-client