$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa File: 3673f064-7948-38e5-92a3-2922376a7bb7.roa (raw, json) Hash identifier: TXR1cigcWmkl/ciSRvm2ZLqRe3sYI6CXBQe7HAZY8jg= Subject key identifier: 80:E2:31:F1:98:64:B4:29:0C:0D:1C:1F:A2:F5:67:93:72:4B:E5:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01F200FCA47868861C9D2 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36619 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1f:20:0f:ca:47:86:88:61:c9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=bf194d6b-a6a8-49c8-ade1-78e9bcfcd09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:04:39:80:92:0e:87:5d:a1:30:3f:c4:b7: 08:59:92:93:0d:da:54:1b:ba:21:bb:0d:40:25:63: 50:2c:b9:35:c1:91:80:77:b3:95:ff:ac:ab:ce:c1: 9f:27:c4:4a:df:c2:4f:e0:d0:aa:2c:c8:71:b6:6f: ad:37:a6:34:a0:4c:d9:0d:c0:53:47:a6:b6:e4:c0: c1:8b:59:7c:63:d1:86:d4:06:de:6c:4c:c0:5c:71: eb:43:b3:84:29:51:58:a5:37:fc:9f:9f:3a:f1:9f: 11:c8:5b:ef:b1:4b:97:4f:22:31:d1:ac:54:77:04: 30:4b:5f:db:ea:0f:89:a8:4f:f2:61:8f:ed:e0:d8: fb:bd:65:59:74:4d:b6:14:44:e3:0a:43:0f:38:5f: 81:d4:59:ad:e8:5c:57:92:d1:74:98:0b:49:e9:eb: c3:aa:bb:c2:bf:bd:49:94:4b:84:c9:87:da:28:70: 2d:74:3e:83:f8:f5:d7:83:c0:5d:e7:9a:18:75:9d: 42:00:db:d3:b4:9e:b5:95:37:dc:fe:93:06:bd:8d: b0:c8:e3:6c:26:cd:85:e0:c7:80:0f:13:8c:ec:22: fc:47:b0:b0:de:8a:55:3e:08:d8:fb:da:1f:2c:8e: 6c:05:99:8e:b2:84:05:a8:b2:5d:b2:24:19:8b:85: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:31:F1:98:64:B4:29:0C:0D:1C:1F:A2:F5:67:93:72:4B:E5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:42:1b:37:37:b8:c2:64:35:da:b0:3b:8b:08:93:7a:8b:8f: 7a:41:cc:77:c6:2f:93:6f:af:bd:d3:46:79:0b:a0:3a:d6:75: ab:d8:78:3b:d0:c4:81:13:aa:ac:5b:45:06:93:3a:2c:8d:58: 93:54:c7:d9:e5:4c:fd:0d:f8:5d:69:72:ec:cd:2f:9b:f2:3c: d8:5e:fe:5b:bf:77:d6:9f:24:6c:87:34:e5:92:59:81:e9:c8: 26:93:fa:c8:76:48:1d:c6:6a:de:ac:7a:cc:6d:4a:04:76:e7: a1:0d:2f:60:f5:e0:44:0e:a6:5f:17:2a:6c:26:b6:3b:11:1b: 55:d2:85:f3:f5:00:d4:03:94:f3:37:d9:a4:62:49:2e:88:2b: f3:38:95:68:15:a6:ca:3c:59:04:3b:16:c9:49:a2:50:59:11: 3a:f3:95:46:a0:02:d1:79:50:5f:41:8d:14:cb:76:bf:4d:12: 1f:d5:46:b0:bb:aa:ee:30:18:e5:56:b3:ae:14:0a:ee:60:e2: 68:6f:f5:73:83:a5:b5:0c:6e:9c:95:3c:4e:c5:42:a1:ce:ec: f5:c5:04:34:b3:5f:0c:58:33:83:ea:b3:1c:40:2d:28:f1:d9: 41:30:7f:bd:51:43:26:53:a1:ad:8d:ad:50:fb:2d:ab:43:5e: fe:9a:47:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwB8gD8pHhohhydIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YmYxOTRkNmItYTZhOC00OWM4LWFkZTEtNzhlOWJjZmNkMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMEOYCSDoddoTA/xLcIWZKTDdpUG7ohuw1A JWNQLLk1wZGAd7OV/6yrzsGfJ8RK38JP4NCqLMhxtm+tN6Y0oEzZDcBTR6a25MDB i1l8Y9GG1AbebEzAXHHrQ7OEKVFYpTf8n5868Z8RyFvvsUuXTyIx0axUdwQwS1/b 6g+JqE/yYY/t4Nj7vWVZdE22FETjCkMPOF+B1Fmt6FxXktF0mAtJ6evDqrvCv71J lEuEyYfaKHAtdD6D+PXXg8Bd55oYdZ1CANvTtJ61lTfc/pMGvY2wyONsJs2F4MeA DxOM7CL8R7Cw3opVPgjY+9ofLI5sBZmOsoQFqLJdsiQZi4XF9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDiMfGYZLQpDA0cH6L1Z5NyS+VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY3M2YwNjQtNzk0OC0z OGU1LTkyYTMtMjkyMjM3NmE3YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApCGzc3uMJkNdqwO4sIk3qLj3pBzHfGL5Nvr73TRnkLoDrWdavY eDvQxIETqqxbRQaTOiyNWJNUx9nlTP0N+F1pcuzNL5vyPNhe/lu/d9afJGyHNOWS WYHpyCaT+sh2SB3Gat6sesxtSgR256ENL2D14EQOpl8XKmwmtjsRG1XShfP1ANQD lPM32aRiSS6IK/M4lWgVpso8WQQ7FslJolBZETrzlUagAtF5UF9BjRTLdr9NEh/V RrC7qu4wGOVWs64UCu5g4mhv9XODpbUMbpyVPE7FQqHO7PXFBDSzXwxYM4PqsxxA LSjx2UEwf71RQyZToa2NrVD7LatDXv6aR9I= -----END CERTIFICATE-----Generated at Wed May 13 06:22:56 2026 by rpki-client