$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3837eaee-177e-361a-b4af-fbfd1eff0b76.roa File: 3837eaee-177e-361a-b4af-fbfd1eff0b76.roa (raw, json) Hash identifier: kgOKLrUnsvxpqhMb46Jc1pzb9w4tMTaZQyDemMDCnJw= Subject key identifier: D5:03:C0:A5:66:5D:CB:07:D1:68:48:CF:B2:C0:9D:04:A1:5C:12:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFC8DBF93A19793168640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3837eaee-177e-361a-b4af-fbfd1eff0b76.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397206 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fc:8d:bf:93:a1:97:93:16:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=cc7f10bc-2a2e-40a3-8214-00eb94169c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:3c:c5:87:f6:1b:c7:de:81:57:ba:1b:86: a3:88:43:83:a4:1d:33:07:75:c7:e1:26:69:3f:73: 16:02:e3:63:c8:d9:86:19:44:a2:4a:22:0a:a2:66: 54:64:d2:93:c7:ba:2b:23:ba:5c:e4:9b:8a:25:0c: dd:d1:bd:fc:a9:35:19:10:d0:25:a4:ec:17:a0:fa: cc:fe:55:5f:14:01:6e:68:67:1e:7a:21:d6:79:de: 9b:50:76:54:7c:f4:9d:db:ea:8b:3f:59:c0:23:04: f5:5a:8c:b1:aa:7d:f4:fb:d5:5f:df:2a:17:3d:49: 4e:00:7f:9b:e6:e0:a3:02:cb:1a:e1:3b:7d:1c:31: 5c:d8:a2:d7:14:6f:78:07:38:06:73:02:5a:8c:73: 4a:18:7b:b9:3f:9d:6a:ec:cd:45:9b:43:ba:ed:7c: 66:3f:a3:29:bd:e2:00:91:5c:89:2d:24:6d:e0:1c: 27:b8:52:16:ac:17:e6:7d:3e:90:43:6f:62:5f:aa: ee:46:82:48:73:4a:b7:68:b2:7e:e6:17:f8:cc:d7: e1:fa:a2:2d:a7:23:98:00:5b:20:33:b4:57:64:63: d6:0d:a9:b4:68:3d:c8:f2:02:e5:c9:5f:6c:ad:04: ee:05:44:e2:67:bd:64:02:6c:fc:ea:e5:18:fd:eb: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:03:C0:A5:66:5D:CB:07:D1:68:48:CF:B2:C0:9D:04:A1:5C:12:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3837eaee-177e-361a-b4af-fbfd1eff0b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d2:b2:78:e9:98:bd:45:41:8a:3f:19:48:84:36:c5:6f:fb: 66:0b:7f:05:ca:40:a7:15:4d:91:76:6d:1c:44:c1:64:1b:06: 6f:30:e5:93:9e:ec:8a:00:0a:e8:7c:c5:2d:8a:8e:d4:92:17: ed:fc:cb:53:ce:99:cd:74:b6:e9:77:45:27:ae:a2:26:d6:61: c2:bd:29:5b:d0:6d:f9:e0:c5:92:43:25:90:ee:42:fd:26:31: 0a:c0:95:f8:c8:87:d8:aa:d2:36:fa:bc:14:9d:c3:d9:a2:c1: ed:c6:e9:52:78:2d:1c:7d:cf:87:e5:dc:68:76:70:2d:df:69: d5:3a:3b:47:6e:33:93:73:31:88:c3:4a:63:28:a5:43:ab:76: 61:74:b5:bb:0f:48:94:09:6b:00:e2:28:d7:fe:a1:7e:fb:36: 73:aa:0d:94:f0:2d:47:0b:92:2c:5b:a1:8c:8c:2e:98:e2:22: 77:c3:0f:d7:88:de:90:8d:17:af:f9:f7:69:74:ac:94:e3:29: 8c:b8:6a:47:51:88:2f:79:99:27:56:5d:1d:e9:3e:d5:21:83: 0b:4e:ef:34:6c:68:9b:95:59:4e:53:06:0f:cb:e6:90:2a:df: af:e9:6c:ff:b5:b5:73:71:13:8d:41:bc:ea:89:26:81:ec:4b: 0e:f0:f1:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/yNv5Ohl5MWhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Y2M3ZjEwYmMtMmEyZS00MGEzLTgyMTQtMDBlYjk0MTY5YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvM8xYf2G8fegVe6G4ajiEODpB0zB3XH4SZp P3MWAuNjyNmGGUSiSiIKomZUZNKTx7orI7pc5JuKJQzd0b38qTUZENAlpOwXoPrM /lVfFAFuaGceeiHWed6bUHZUfPSd2+qLP1nAIwT1Woyxqn30+9Vf3yoXPUlOAH+b 5uCjAssa4Tt9HDFc2KLXFG94BzgGcwJajHNKGHu5P51q7M1Fm0O67XxmP6MpveIA kVyJLSRt4BwnuFIWrBfmfT6QQ29iX6ruRoJIc0q3aLJ+5hf4zNfh+qItpyOYAFsg M7RXZGPWDam0aD3I8gLlyV9srQTuBUTiZ71kAmz86uUY/etd+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUDwKVmXcsH0WhIz7LAnQShXBLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzgzN2VhZWUtMTc3ZS0z NjFhLWI0YWYtZmJmZDFlZmYwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnSsnjpmL1FQYo/GUiENsVv+2YLfwXKQKcVTZF2bRxEwWQbBm8w 5ZOe7IoACuh8xS2KjtSSF+38y1POmc10tul3RSeuoibWYcK9KVvQbfngxZJDJZDu Qv0mMQrAlfjIh9iq0jb6vBSdw9miwe3G6VJ4LRx9z4fl3Gh2cC3fadU6O0duM5Nz MYjDSmMopUOrdmF0tbsPSJQJawDiKNf+oX77NnOqDZTwLUcLkixboYyMLpjiInfD D9eI3pCNF6/592l0rJTjKYy4akdRiC95mSdWXR3pPtUhgwtO7zRsaJuVWU5TBg/L 5pAq36/pbP+1tXNxE41BvOqJJoHsSw7w8eM= -----END CERTIFICATE-----Generated at Wed May 13 04:06:04 2026 by rpki-client