$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa File: 3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa (raw, json) Hash identifier: Rtz8FnjNsa9yIKH6QhemK1BRVVJYlsblrmDSR6IVP9E= Subject key identifier: C3:29:DC:79:50:61:8C:25:96:D3:E1:76:34:24:49:53:1F:30:9E:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFAC29358B1D57AB4FAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396561 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fa:c2:93:58:b1:d5:7a:b4:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1caf0516-44eb-42c2-988b-9ed284ac5d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:24:22:a4:e6:46:7b:69:0d:4c:39:1d:53: 3c:be:50:b9:70:ea:8b:4a:77:82:7f:19:10:78:b7: aa:dc:91:0e:d2:45:99:1a:f1:76:8c:78:f2:2f:9a: d9:29:9e:15:8b:70:bf:b5:fe:23:9c:89:49:07:f3: 9d:bd:9f:ab:93:b4:ee:c3:82:c6:36:0c:87:cc:04: 81:f0:61:33:11:66:b6:87:7f:7f:2e:c9:f6:c9:9b: a1:bb:52:a6:a7:b6:51:77:96:68:71:90:48:77:28: 41:a2:ff:56:65:57:5f:23:1f:bd:e8:6b:04:1d:8d: 6a:b4:b2:60:ee:52:50:e1:34:99:37:83:08:1a:84: 91:38:97:1f:a3:5e:b4:d0:53:1f:fe:17:04:f4:e3: 89:59:5f:44:f8:d0:66:f6:e6:48:7c:b4:f3:2e:8c: ca:a7:31:55:b8:e8:89:c1:2f:a0:59:c5:32:0f:29: f3:b3:a3:c6:73:86:e5:c7:62:9a:4c:af:2c:5d:2d: d9:2c:03:60:bc:81:81:b9:1a:b3:4b:a9:f8:69:54: a5:fe:af:df:4f:d9:75:cf:3a:73:c2:99:b7:d4:82: 12:bb:27:59:1a:d0:fb:04:81:bb:80:69:57:7c:07: a6:70:7e:4e:c4:06:8d:81:1a:e4:34:4d:39:cf:8a: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:29:DC:79:50:61:8C:25:96:D3:E1:76:34:24:49:53:1F:30:9E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:08:73:af:f7:e1:f6:1f:f7:57:4b:cf:cc:1d:18:d5:2e:f0: 76:9c:40:70:35:5d:dc:e3:34:ac:18:5e:91:9b:e7:16:f0:2c: ee:98:0e:b9:59:0b:70:4e:6c:4c:e2:8b:ca:a2:76:07:cc:39: 35:3f:e1:76:18:10:e1:cf:d3:3a:d4:16:4a:a5:62:98:5f:7e: 3e:7c:6b:96:c2:91:05:81:a5:7f:d1:24:db:01:9d:dc:cb:f4: a1:2d:2e:1c:e6:96:e5:c8:9c:22:5b:3d:f5:d5:0d:af:da:c3: 7b:cd:75:14:60:86:a2:16:5c:d4:85:39:72:a4:c7:95:88:bf: 93:67:7a:4c:da:2c:6f:3e:ef:3e:bc:39:7e:50:20:96:88:76: e1:ee:f2:7e:89:63:80:3a:eb:4b:fb:71:aa:3b:3c:6d:b2:fa: ed:d4:60:46:e1:43:f2:87:c4:64:7c:bf:74:5f:da:db:ae:70: cb:b7:57:2a:ea:96:cd:be:f3:10:10:a3:25:64:6d:38:ca:85: 4d:d6:18:ce:6c:a0:79:40:06:f5:5c:e3:66:ef:b0:88:73:a7: 3e:9e:de:d5:85:f6:5a:b3:14:73:51:21:98:b2:6c:96:05:bc: ce:d7:1a:75:f7:22:84:77:32:cb:7b:c0:67:0f:51:43:b6:6f: 33:38:09:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/rCk1ix1Xq0+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWNhZjA1MTYtNDRlYi00MmMyLTk4OGItOWVkMjg0YWM1ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06kkIqTmRntpDUw5HVM8vlC5cOqLSneCfxkQ eLeq3JEO0kWZGvF2jHjyL5rZKZ4Vi3C/tf4jnIlJB/OdvZ+rk7Tuw4LGNgyHzASB 8GEzEWa2h39/Lsn2yZuhu1Kmp7ZRd5ZocZBIdyhBov9WZVdfIx+96GsEHY1qtLJg 7lJQ4TSZN4MIGoSROJcfo1600FMf/hcE9OOJWV9E+NBm9uZIfLTzLozKpzFVuOiJ wS+gWcUyDynzs6PGc4blx2KaTK8sXS3ZLANgvIGBuRqzS6n4aVSl/q/fT9l1zzpz wpm31IISuydZGtD7BIG7gGlXfAemcH5OxAaNgRrkNE05z4pqcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMp3HlQYYwlltPhdjQkSVMfMJ45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU2OGUxNmUtNGM5NC0z ZTNiLWJiMzUtNmI5ZjcxM2VjM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMIc6/34fYf91dLz8wdGNUu8HacQHA1XdzjNKwYXpGb5xbwLO6Y DrlZC3BObEzii8qidgfMOTU/4XYYEOHP0zrUFkqlYphffj58a5bCkQWBpX/RJNsB ndzL9KEtLhzmluXInCJbPfXVDa/aw3vNdRRghqIWXNSFOXKkx5WIv5NnekzaLG8+ 7z68OX5QIJaIduHu8n6JY4A660v7cao7PG2y+u3UYEbhQ/KHxGR8v3Rf2tuucMu3 Vyrqls2+8xAQoyVkbTjKhU3WGM5soHlABvVc42bvsIhzpz6e3tWF9lqzFHNRIZiy bJYFvM7XGnX3IoR3Mst7wGcPUUO2bzM4Cbc= -----END CERTIFICATE-----Generated at Wed May 13 06:13:52 2026 by rpki-client