$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa File: 3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa (raw, json) Hash identifier: q/K22z30Jw9xGGl6C/WMCTFiMQ5FKUnsMbBa1gVmEXM= Subject key identifier: D1:F9:FD:51:18:5C:A4:88:92:02:E1:22:B5:B0:4C:59:36:D4:17:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00D1BE895C1E20AA68B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 27544 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0d:1b:e8:95:c1:e2:0a:a6:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=96553d19-d607-4fa2-9cec-ec4cd80e18fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:9d:94:28:5c:02:69:0c:58:48:01:21:29: 4f:28:a8:38:f8:55:34:14:f5:f1:ad:d2:25:99:f6: 4d:f6:a9:04:c9:31:29:b5:71:d5:12:61:00:78:fb: 6e:99:92:d4:53:f3:96:a3:bf:b0:d7:fe:0d:92:37: 76:e6:e4:a2:dc:76:b4:8d:ec:53:26:75:91:f9:b8: 7b:b1:a4:f8:38:e7:e4:d6:0e:e6:70:dc:9c:f8:1f: 99:68:1f:e4:3b:89:e7:a8:89:29:a7:ae:bb:4c:45: 0e:5c:38:f1:b7:b1:7e:49:26:27:84:63:22:18:26: b4:c4:e6:3e:75:e3:83:02:01:37:1c:e7:65:40:80: d4:49:b7:2c:3d:93:08:1e:52:b3:d9:0b:10:1c:a4: 6d:17:bf:14:ea:53:f4:7c:35:98:87:c4:cd:78:39: df:e4:d3:81:9d:f2:8b:69:3e:9a:91:55:25:04:de: 0a:57:de:0f:cc:8c:38:c8:c7:cc:2e:bf:5d:14:d9: a8:6d:79:a5:4c:7b:52:ac:a8:90:6d:b0:7e:68:a4: cd:fd:74:1e:a5:8e:e4:e9:52:42:b8:01:63:12:85: ab:e4:28:07:75:f7:16:56:4b:5e:e5:c7:90:5f:a0: d2:c0:80:8f:f5:eb:ac:da:e4:25:69:11:38:e9:e0: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:FD:51:18:5C:A4:88:92:02:E1:22:B5:B0:4C:59:36:D4:17:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c5:ef:0c:b5:b0:9f:85:71:a4:60:f8:19:db:fb:47:2f:af: e1:a4:fe:93:0e:a6:7b:14:37:00:b6:d1:fa:d7:02:7b:af:a5: 8a:0e:d3:c3:5a:34:79:57:9e:04:87:b7:6a:94:ed:8d:d0:0e: 63:93:e1:f3:ca:d3:0d:59:22:a4:3a:f6:06:f6:0e:b8:59:ee: 41:e0:99:f2:9e:47:00:ae:8d:f0:63:c8:e0:91:ce:61:50:ce: 05:e2:cd:16:c6:17:be:ae:ce:ae:f0:6b:63:60:66:8f:e6:98: 83:0e:de:4f:f0:6c:a4:a0:cd:40:3b:a9:ca:92:6d:37:09:73: 83:9e:03:62:2d:96:2c:77:78:31:96:bb:d8:73:77:bd:1b:a1: 73:9f:ac:56:3c:5b:25:09:ff:27:00:02:38:6f:1a:b4:67:35: 83:66:6f:92:7b:cd:e9:06:f5:c8:77:8f:bd:c7:88:3e:16:73: ec:50:51:b1:2f:d7:f3:c5:b3:d0:fc:62:d7:7e:8f:da:90:4f: 21:d3:8a:22:dc:bd:28:fd:17:27:dd:81:cc:f7:56:b7:f0:1d: 15:a1:85:f5:4c:6f:56:fc:df:ce:19:37:75:31:7e:f3:07:18: b6:dd:42:2d:5d:db:6e:77:90:b1:6f:6e:b5:f7:4e:60:ae:18: 57:7b:03:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwA0b6JXB4gqmi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OTY1NTNkMTktZDYwNy00ZmEyLTljZWMtZWM0Y2Q4MGUxOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMqdlChcAmkMWEgBISlPKKg4+FU0FPXxrdIl mfZN9qkEyTEptXHVEmEAePtumZLUU/OWo7+w1/4Nkjd25uSi3Ha0jexTJnWR+bh7 saT4OOfk1g7mcNyc+B+ZaB/kO4nnqIkpp667TEUOXDjxt7F+SSYnhGMiGCa0xOY+ deODAgE3HOdlQIDUSbcsPZMIHlKz2QsQHKRtF78U6lP0fDWYh8TNeDnf5NOBnfKL aT6akVUlBN4KV94PzIw4yMfMLr9dFNmobXmlTHtSrKiQbbB+aKTN/XQepY7k6VJC uAFjEoWr5CgHdfcWVkte5ceQX6DSwICP9eus2uQlaRE46eA6hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNH5/VEYXKSIkgLhIrWwTFk21BftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Q3ZDViZWQtMzE4My0z ZjllLTgyYWYtZWU0ZTg2M2IxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACXF7wy1sJ+FcaRg+Bnb+0cvr+Gk/pMOpnsUNwC20frXAnuvpYoO 08NaNHlXngSHt2qU7Y3QDmOT4fPK0w1ZIqQ69gb2DrhZ7kHgmfKeRwCujfBjyOCR zmFQzgXizRbGF76uzq7wa2NgZo/mmIMO3k/wbKSgzUA7qcqSbTcJc4OeA2Itlix3 eDGWu9hzd70boXOfrFY8WyUJ/ycAAjhvGrRnNYNmb5J7zekG9ch3j73HiD4Wc+xQ UbEv1/PFs9D8Ytd+j9qQTyHTiiLcvSj9Fyfdgcz3VrfwHRWhhfVMb1b8384ZN3Ux fvMHGLbdQi1d2253kLFvbrX3TmCuGFd7AwM= -----END CERTIFICATE-----Generated at Wed May 13 03:20:16 2026 by rpki-client