$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa File: 3b462fa8-0361-3b16-9418-ac7da4982a9e.roa (raw, json) Hash identifier: kV5C82rWSZqTZ9pFd9i1ZDMnXs87lL5oy2W0gcoW9xI= Subject key identifier: 99:1D:05:49:60:6A:20:26:50:45:F4:7E:89:E4:DE:79:2F:DF:5E:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFEC9AFD2B5676F541280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 19836 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fe:c9:af:d2:b5:67:6f:54:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=c89614bb-cf64-4407-971b-121a390b70c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:3c:38:6e:32:32:3d:b1:0f:d3:ec:70:b4: 17:d0:29:0c:eb:c8:8a:05:ed:32:6e:0d:89:61:a6: 78:9c:9f:b4:a5:d9:e1:ff:db:c1:f5:98:0d:6a:75: 2f:e8:d5:23:8b:b3:bf:b2:7c:bb:4f:73:e4:4a:d9: eb:27:f6:c0:05:76:a6:47:80:ba:85:8e:83:3e:5b: bb:57:27:bd:de:a9:4a:d9:ff:f3:1f:0a:6e:9f:41: 58:3e:45:cc:df:15:8b:45:44:88:35:71:0c:90:a5: 0b:99:a0:1c:61:0b:0e:d6:cd:a0:7e:2c:37:ff:69: fe:98:8a:e5:3e:c2:30:5a:d8:26:20:f5:4f:d5:f5: 57:44:59:60:8a:1a:a9:c5:cb:72:49:98:e1:d5:77: ae:49:82:ae:0d:81:4b:8f:bb:90:4b:6f:07:2f:f4: 33:e1:17:3d:fb:b0:d2:32:65:c8:dc:6b:fd:94:19: d6:e7:db:91:94:63:2b:80:aa:a3:85:d6:30:2b:aa: 12:82:1e:01:9e:af:d8:76:91:4a:81:f5:ef:fa:2b: 06:37:06:28:09:88:c1:e1:d4:1d:53:5a:22:2e:19: d8:9d:20:96:ad:d1:78:cb:60:3c:4b:b1:20:e9:b9: 33:08:80:99:83:80:2f:ae:4c:46:e3:7d:ae:16:53: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1D:05:49:60:6A:20:26:50:45:F4:7E:89:E4:DE:79:2F:DF:5E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b462fa8-0361-3b16-9418-ac7da4982a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8c:9b:8b:a6:db:ca:5b:4a:89:93:c5:e8:b2:b8:91:90:40: c9:d5:01:bf:3e:35:b9:36:b6:69:56:99:7d:3f:1a:24:75:c5: 8a:3e:b7:04:54:8a:2e:ca:0f:0b:47:49:ce:81:8b:5d:81:38: 63:bd:f8:0a:12:48:63:a6:cd:dc:e9:bd:eb:ae:df:f8:39:7e: 8f:7f:48:67:8e:7a:af:50:46:89:4c:49:36:c2:aa:79:82:9a: 34:0c:70:eb:29:66:71:90:64:0e:fa:f1:1a:52:d4:7d:45:fd: 28:d6:f4:9c:11:8e:bc:bc:ca:ff:42:af:f1:cd:0e:b0:6d:98: 74:51:a0:bb:b2:3d:e9:77:45:1e:e1:84:e3:aa:32:44:a4:bd: 52:16:fd:5a:d5:d6:ca:5b:39:27:21:65:81:77:bb:b5:bd:eb: d7:96:b7:cd:a0:a6:86:87:ca:c5:03:66:bc:4c:94:b3:77:4d: 3b:ca:b0:2e:af:73:a7:41:2a:e8:b0:16:cb:2f:cc:58:99:7c: 78:eb:bf:83:74:ce:2f:94:86:82:bd:b7:1f:57:9a:eb:2a:61: 2f:d6:f2:d0:3e:ae:96:c4:35:7a:b5:d0:8c:0c:e3:a6:9d:1e: 41:a8:8c:cd:e1:2d:92:09:b5:ae:ce:58:f9:23:36:cc:dc:fe: a3:59:af:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/7Jr9K1Z29UEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Yzg5NjE0YmItY2Y2NC00NDA3LTk3MWItMTIxYTM5MGI3MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE88OG4yMj2xD9PscLQX0CkM68iKBe0ybg2J YaZ4nJ+0pdnh/9vB9ZgNanUv6NUji7O/sny7T3PkStnrJ/bABXamR4C6hY6DPlu7 Vye93qlK2f/zHwpun0FYPkXM3xWLRUSINXEMkKULmaAcYQsO1s2gfiw3/2n+mIrl PsIwWtgmIPVP1fVXRFlgihqpxctySZjh1XeuSYKuDYFLj7uQS28HL/Qz4Rc9+7DS MmXI3Gv9lBnW59uRlGMrgKqjhdYwK6oSgh4Bnq/YdpFKgfXv+isGNwYoCYjB4dQd U1oiLhnYnSCWrdF4y2A8S7Eg6bkzCICZg4AvrkxG432uFlNHdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkdBUlgaiAmUEX0fonk3nkv314/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I0NjJmYTgtMDM2MS0z YjE2LTk0MTgtYWM3ZGE0OTgyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqMm4um28pbSomTxeiyuJGQQMnVAb8+Nbk2tmlWmX0/GiR1xYo+ twRUii7KDwtHSc6Bi12BOGO9+AoSSGOmzdzpveuu3/g5fo9/SGeOeq9QRolMSTbC qnmCmjQMcOspZnGQZA768RpS1H1F/SjW9JwRjry8yv9Cr/HNDrBtmHRRoLuyPel3 RR7hhOOqMkSkvVIW/VrV1spbOSchZYF3u7W969eWt82gpoaHysUDZrxMlLN3TTvK sC6vc6dBKuiwFssvzFiZfHjrv4N0zi+UhoK9tx9XmusqYS/W8tA+rpbENXq10IwM 46adHkGojM3hLZIJta7OWPkjNszc/qNZryU= -----END CERTIFICATE-----Generated at Wed May 13 07:21:43 2026 by rpki-client