$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa File: 158f952f-8b95-3141-87e9-41026ec3bc42.roa (raw, json) Hash identifier: lCIdVelfkD5AlMWnxsuioaVKPS2HybX+kc01QYUYKCk= Subject key identifier: B8:2D:36:05:0C:C1:30:B8:06:66:62:0F:6D:EA:41:05:BE:08:7D:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFB24B6B908DE19FC6280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397201 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fb:24:b6:b9:08:de:19:fc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=eab3553d-9781-475c-9235-00454fe066ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:29:e9:f8:1d:91:7f:92:07:70:74:f5:b5: b8:9f:85:da:b3:d8:fb:ed:8c:54:df:be:bd:ed:5f: bc:25:d8:ff:7a:b7:2b:03:1c:82:dd:a1:94:f3:51: 4f:92:a5:82:a7:19:a7:e5:ad:07:d8:48:25:bd:9d: 1a:72:0c:ab:b1:13:e6:48:12:fe:4a:18:10:75:3a: c0:18:f1:bc:b6:de:f7:b1:fc:4a:c6:38:62:38:f3: be:fc:c6:bb:1e:c3:45:e8:35:9a:fe:df:c6:9d:a0: e9:b8:58:83:05:f1:fc:8a:f7:ce:0e:90:21:3c:06: 6c:5b:1a:c9:3f:14:35:b4:fe:90:59:55:1c:02:40: f3:f3:dc:c3:69:f0:14:dc:92:2f:1d:12:31:93:6f: b3:bf:3d:4e:f6:95:62:7e:95:4c:87:b9:d0:32:49: d2:7b:59:31:5c:40:2d:7d:ba:7e:a1:2e:7e:db:e2: 0e:b3:e9:a4:a7:ba:8c:bc:8d:99:d7:a8:f7:3a:10: e8:30:37:c0:a5:b1:9e:d2:72:0a:ca:cd:71:27:84: d6:a9:3e:52:a4:38:6c:8b:78:1f:01:6b:f4:cd:47: 8b:fd:f8:5c:10:aa:99:e5:ee:ed:33:ef:87:90:c0: 7c:63:70:ee:96:6a:50:0b:a0:23:d3:6f:8f:f0:62: 36:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:36:05:0C:C1:30:B8:06:66:62:0F:6D:EA:41:05:BE:08:7D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:91:9c:16:33:ad:9e:93:1e:11:fe:2b:db:77:37:6e:6d:2e: 7a:74:f7:7f:2d:de:b5:fd:df:65:c9:7c:0e:75:24:34:d9:34: 0d:a3:a6:cb:2a:5b:8a:75:6a:50:a6:8c:c9:26:da:85:13:67: 9d:b1:e7:e4:75:d1:7e:2b:e1:4b:90:7e:3d:0e:f0:49:1a:22: ca:77:25:5b:f6:19:c7:be:69:47:be:5c:a8:fc:3a:b1:78:e8: d9:2d:0a:ac:bd:22:b8:de:c3:d6:c6:d2:d9:1b:3c:1e:9d:80: 98:53:9d:ea:93:34:e0:b4:1e:c4:9d:50:23:5b:7c:df:3f:cb: d2:28:e4:3c:35:32:68:66:f9:b0:20:cb:b5:a4:fa:3b:8f:31: f1:bb:e8:81:ed:41:77:97:87:33:a9:34:a9:02:af:90:0b:9e: ab:6e:74:b0:13:6c:c8:fe:a9:b1:86:19:e4:44:27:1f:4c:04: e9:f4:2d:75:9d:e6:d8:84:de:ac:9c:6d:2e:fc:25:ce:3a:5e: 85:ca:50:2e:6c:63:ae:0b:d7:c2:3e:d5:8f:59:f0:b2:1a:1e: fb:af:b8:b3:82:3a:ad:f8:42:b6:32:4b:db:6e:31:24:18:ff: 98:8d:a3:22:85:51:72:17:35:2d:61:0f:42:c3:cc:8f:dd:fd: d1:e9:81:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/sktrkI3hn8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZWFiMzU1M2QtOTc4MS00NzVjLTkyMzUtMDA0NTRmZTA2NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7op6fgdkX+SB3B09bW4n4Xas9j77YxU3769 7V+8Jdj/ercrAxyC3aGU81FPkqWCpxmn5a0H2EglvZ0acgyrsRPmSBL+ShgQdTrA GPG8tt73sfxKxjhiOPO+/Ma7HsNF6DWa/t/GnaDpuFiDBfH8ivfODpAhPAZsWxrJ PxQ1tP6QWVUcAkDz89zDafAU3JIvHRIxk2+zvz1O9pVifpVMh7nQMknSe1kxXEAt fbp+oS5+2+IOs+mkp7qMvI2Z16j3OhDoMDfApbGe0nIKys1xJ4TWqT5SpDhsi3gf AWv0zUeL/fhcEKqZ5e7tM++HkMB8Y3DulmpQC6Aj02+P8GI27wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgtNgUMwTC4BmZiD23qQQW+CH1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU4Zjk1MmYtOGI5NS0z MTQxLTg3ZTktNDEwMjZlYzNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6RnBYzrZ6THhH+K9t3N25tLnp0938t3rX932XJfA51JDTZNA2j pssqW4p1alCmjMkm2oUTZ52x5+R10X4r4UuQfj0O8EkaIsp3JVv2Gce+aUe+XKj8 OrF46NktCqy9Irjew9bG0tkbPB6dgJhTneqTNOC0HsSdUCNbfN8/y9Io5Dw1Mmhm +bAgy7Wk+juPMfG76IHtQXeXhzOpNKkCr5ALnqtudLATbMj+qbGGGeREJx9MBOn0 LXWd5tiE3qycbS78Jc46XoXKUC5sY64L18I+1Y9Z8LIaHvuvuLOCOq34QrYyS9tu MSQY/5iNoyKFUXIXNS1hD0LDzI/d/dHpgT4= -----END CERTIFICATE-----Generated at Wed May 13 08:18:14 2026 by rpki-client