$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa File: 11fd6045-f503-390b-a153-c675ac2df301.roa (raw, json) Hash identifier: 24SrpQA32WlNz4vFjcu+Y7grjFQ8rkuIE14GatECsLI= Subject key identifier: 66:58:F5:49:57:5B:F0:97:34:14:A8:72:52:AA:66:35:51:E3:BA:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFEF256169CC739466700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 20431 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fe:f2:56:16:9c:c7:39:46:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9a22ccc4-030c-4b3d-bead-91ae6bd2897d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:6f:47:01:dc:e4:54:3f:a5:de:7c:33:b6: dd:59:49:90:2e:67:5e:5c:ba:2f:49:cc:27:4a:c4: 41:f4:ce:40:97:fc:4c:97:59:4f:e7:cc:2e:5e:6e: 7b:2e:23:9c:70:b3:79:c4:03:4a:46:b8:c1:e5:6f: a0:c9:6c:cc:ca:01:94:50:eb:71:1b:bf:57:f9:9e: 28:13:71:07:10:fe:89:7a:27:76:92:5a:d7:d9:c6: a5:bf:bf:ca:99:00:62:cd:8b:5e:bc:97:fd:43:83: 6f:bf:e3:ec:0b:db:a1:e9:66:07:58:34:b6:7c:0e: 09:29:b2:91:7a:b9:44:34:85:84:a9:0e:21:b8:93: ab:df:be:4a:ef:9c:50:fa:ae:fe:b7:4e:ed:66:fd: 52:f1:ad:1a:51:46:39:a4:77:e0:aa:10:02:4a:f2: c8:28:7f:4d:8b:76:b2:ff:85:56:72:64:16:36:65: 7f:ab:aa:91:c6:05:bb:b2:6d:23:47:b5:64:66:39: 85:09:a2:0e:59:45:dc:af:36:34:cf:33:8d:c9:e7: a9:8e:68:64:e9:d4:05:e7:65:35:b4:87:06:ab:e9: 94:df:36:0e:72:bb:22:0c:5b:29:d2:bd:1e:e9:8f: c0:30:ca:8a:5e:e0:83:e9:d1:5e:f9:55:07:72:a9: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:F5:49:57:5B:F0:97:34:14:A8:72:52:AA:66:35:51:E3:BA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11fd6045-f503-390b-a153-c675ac2df301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:df:47:71:74:47:0c:c2:5d:b2:3b:58:02:21:28:f3:87:6c: 47:84:d8:ae:a2:31:0c:fc:66:77:cf:a1:ad:85:ad:6f:58:ba: 8a:6b:d0:d3:99:f2:56:c0:ed:4f:41:a7:36:ce:b7:15:df:c7: 14:f6:32:e7:63:d5:7e:02:1e:f2:1a:87:0f:63:cc:b4:df:2e: 98:58:74:a9:a6:24:c1:4e:99:18:c7:8e:2c:56:ff:a7:0c:d7: 7d:97:69:2f:cb:c0:45:1e:2c:9a:8d:c6:61:17:8e:87:ed:ac: f6:23:46:b8:f2:ec:31:3c:3d:55:ab:ae:67:21:95:41:ee:81: 8a:4e:2a:b6:ad:01:a1:56:15:1e:fd:f5:f8:2c:03:b1:c4:3e: 5c:95:50:da:6d:45:6c:d1:c9:38:c5:6b:3f:01:2d:62:56:e0: 5f:d0:c6:67:27:0f:98:1c:a7:16:ab:f4:60:77:8a:14:1e:6d: 67:f7:1c:ed:4f:7c:cc:4f:c3:5a:27:67:a9:26:d6:8e:0d:0e: fd:f6:0e:92:04:38:3b:e2:ad:d1:ee:b8:46:ff:e2:8f:c7:23: a1:5c:79:6e:c7:b6:24:b5:e8:c4:0b:14:4d:c2:c6:99:07:b5: 92:2e:c7:38:35:09:3c:91:32:a1:40:75:97:27:08:bc:99:c4: 1f:58:47:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/7yVhacxzlGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWEyMmNjYzQtMDMwYy00YjNkLWJlYWQtOTFhZTZiZDI4OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIVvRwHc5FQ/pd58M7bdWUmQLmdeXLovScwn SsRB9M5Al/xMl1lP58wuXm57LiOccLN5xANKRrjB5W+gyWzMygGUUOtxG79X+Z4o E3EHEP6Jeid2klrX2calv7/KmQBizYtevJf9Q4Nvv+PsC9uh6WYHWDS2fA4JKbKR erlENIWEqQ4huJOr375K75xQ+q7+t07tZv1S8a0aUUY5pHfgqhACSvLIKH9Ni3ay /4VWcmQWNmV/q6qRxgW7sm0jR7VkZjmFCaIOWUXcrzY0zzONyeepjmhk6dQF52U1 tIcGq+mU3zYOcrsiDFsp0r0e6Y/AMMqKXuCD6dFe+VUHcqn8NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZY9UlXW/CXNBSoclKqZjVR47olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFmZDYwNDUtZjUwMy0z OTBiLWExNTMtYzY3NWFjMmRmMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGffR3F0RwzCXbI7WAIhKPOHbEeE2K6iMQz8ZnfPoa2FrW9Yuopr 0NOZ8lbA7U9BpzbOtxXfxxT2Mudj1X4CHvIahw9jzLTfLphYdKmmJMFOmRjHjixW /6cM132XaS/LwEUeLJqNxmEXjoftrPYjRrjy7DE8PVWrrmchlUHugYpOKratAaFW FR799fgsA7HEPlyVUNptRWzRyTjFaz8BLWJW4F/QxmcnD5gcpxar9GB3ihQebWf3 HO1PfMxPw1onZ6km1o4NDv32DpIEODvirdHuuEb/4o/HI6FceW7HtiS16MQLFE3C xpkHtZIuxzg1CTyRMqFAdZcnCLyZxB9YR24= -----END CERTIFICATE-----Generated at Wed May 13 12:48:26 2026 by rpki-client