$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa File: 08f7ded7-570b-3012-a7ef-01d7da7930d3.roa (raw, json) Hash identifier: kqIQcFq76Ey2VjlLD7z+pcSNqKMFKxvd/rDFkfK5dBA= Subject key identifier: 59:CD:29:19:51:DD:6F:D8:A6:16:CC:D7:28:BD:BB:2A:16:2F:9B:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFBDA510720C2ACEC7A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397193 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fb:da:51:07:20:c2:ac:ec:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=b195be7c-7355-4680-9009-b51fd1c11afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:40:d3:22:4e:04:af:5e:4c:b4:45:24:60: 0e:e9:9d:30:34:c7:6b:79:f5:ac:b3:e4:05:dc:8b: 63:f9:9a:2b:c0:cd:45:f8:b4:76:52:29:18:a7:52: f7:d4:33:3b:92:66:08:04:5d:11:1d:25:7f:6f:9e: 21:1b:7e:43:79:76:7c:cf:15:55:9a:a5:3e:9e:c9: 7f:71:63:4e:23:e2:e7:13:16:b2:27:08:40:f8:ea: 0a:2a:eb:59:c3:0d:d2:2e:00:93:e3:ba:75:67:24: 15:b3:de:c8:24:7e:1a:df:38:18:61:e6:f9:a2:67: b5:b8:f4:c0:ee:36:d5:03:13:5a:66:44:a9:65:f6: d0:a6:60:c3:82:68:71:eb:55:93:e1:40:f2:24:49: 5a:99:15:4a:df:c2:bc:af:b2:3c:0d:7b:23:1a:7b: 7a:9b:7e:cc:32:bb:41:4d:12:41:a8:24:dd:b6:51: 7e:a9:69:ad:fd:c1:dd:45:ac:c3:ad:a4:55:c0:de: c8:57:78:ac:90:f9:31:2a:04:16:9c:be:cf:2f:fc: 84:54:b5:f1:8c:3f:9f:16:b2:bb:d9:ab:c0:18:6c: a2:5d:12:1c:04:41:6d:36:10:f5:b2:28:53:34:9f: 54:c9:3c:09:6c:3e:a7:ff:7d:df:3e:22:6e:f0:91: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:29:19:51:DD:6F:D8:A6:16:CC:D7:28:BD:BB:2A:16:2F:9B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a5:45:52:5f:66:5b:cd:04:2c:64:75:88:b3:54:0b:80:ad: b7:a9:55:42:bb:cb:6a:48:3d:66:0d:a0:64:5a:ce:75:92:1f: 3c:01:38:72:ce:26:c3:b1:28:2f:96:c6:39:da:26:34:20:73: a9:0a:75:74:94:d3:5f:95:a5:87:3e:6e:01:82:20:93:1e:dd: ac:82:a0:c8:dd:62:97:2f:10:7c:92:50:01:9b:1c:2c:c9:f6: 17:7b:a2:a0:d1:38:52:f0:90:1d:ed:71:3b:a8:11:c9:dd:69: 53:66:30:25:67:02:4d:0c:0f:00:93:c4:58:f6:6c:c0:fa:9f: 05:c1:29:93:03:36:64:96:6f:4f:10:6f:fc:d1:f6:e2:fc:a2: 92:ae:63:da:c5:6e:fe:60:63:b2:ad:b8:e9:e8:3d:c5:6a:64: 24:96:d4:fe:18:31:ca:1f:de:a1:b4:b3:3e:dc:b1:94:ec:4e: db:75:30:7d:a3:db:29:5c:90:32:39:35:0e:0e:74:2d:dc:28: 42:26:1c:83:0f:da:08:ff:14:8a:cf:96:de:5c:60:0c:57:41: 96:f2:63:80:24:46:48:64:b2:bd:1b:45:07:d0:b3:fb:12:a1: 71:83:a7:f4:5a:00:79:8c:cd:95:aa:c9:fa:ca:bb:a5:29:c8: bd:3a:2e:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/vaUQcgwqzseoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YjE5NWJlN2MtNzM1NS00NjgwLTkwMDktYjUxZmQxYzExYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vVA0yJOBK9eTLRFJGAO6Z0wNMdrefWss+QF 3Itj+ZorwM1F+LR2UikYp1L31DM7kmYIBF0RHSV/b54hG35DeXZ8zxVVmqU+nsl/ cWNOI+LnExayJwhA+OoKKutZww3SLgCT47p1ZyQVs97IJH4a3zgYYeb5ome1uPTA 7jbVAxNaZkSpZfbQpmDDgmhx61WT4UDyJElamRVK38K8r7I8DXsjGnt6m37MMrtB TRJBqCTdtlF+qWmt/cHdRazDraRVwN7IV3iskPkxKgQWnL7PL/yEVLXxjD+fFrK7 2avAGGyiXRIcBEFtNhD1sihTNJ9UyTwJbD6n/33fPiJu8JGCZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFnNKRlR3W/YphbM1yi9uyoWL5teMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDhmN2RlZDctNTcwYi0z MDEyLWE3ZWYtMDFkN2RhNzkzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGlRVJfZlvNBCxkdYizVAuArbepVUK7y2pIPWYNoGRaznWSHzwB OHLOJsOxKC+WxjnaJjQgc6kKdXSU01+VpYc+bgGCIJMe3ayCoMjdYpcvEHySUAGb HCzJ9hd7oqDROFLwkB3tcTuoEcndaVNmMCVnAk0MDwCTxFj2bMD6nwXBKZMDNmSW b08Qb/zR9uL8opKuY9rFbv5gY7KtuOnoPcVqZCSW1P4YMcof3qG0sz7csZTsTtt1 MH2j2ylckDI5NQ4OdC3cKEImHIMP2gj/FIrPlt5cYAxXQZbyY4AkRkhksr0bRQfQ s/sSoXGDp/RaAHmMzZWqyfrKu6UpyL06Lp8= -----END CERTIFICATE-----Generated at Wed May 13 05:07:11 2026 by rpki-client