$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa File: 4234488f-8886-3a8d-961e-e0228ef7f6a0.roa (raw, json) Hash identifier: nv5Gvugf7TiSoy0cOWMynfuBQ/yRH7clfKF6XxL8QnU= Subject key identifier: CB:12:8A:CB:13:7A:EA:C7:B4:15:6A:55:83:17:82:71:E4:E2:B3:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D95F01D3C9DA4EE338B457B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 7342 IP address blocks: 2620:74:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1d:3c:9d:a4:ee:33:8b:45:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=6908ac43-7cb3-44c3-b2db-15f42a150782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:51:d9:41:e2:ce:ab:48:e6:1c:e9:f7:d7: a1:74:2f:6f:7d:f1:c8:65:fe:34:c3:8c:1d:a6:ce: 4a:f3:08:e0:b2:0a:0b:44:4f:b1:5e:fa:b2:1b:39: e5:f0:b7:dc:7e:86:8d:e2:9d:dc:89:5f:12:9a:2d: db:43:31:73:d8:ca:b9:03:8a:9b:c2:f9:1c:73:b9: ba:77:54:0a:24:ce:6c:3f:d1:82:fc:cc:f6:a4:06: e2:64:93:3f:c8:fe:cd:4a:35:65:0f:f3:8a:76:da: 9b:51:b9:58:74:c8:54:28:4c:14:c0:16:30:e3:55: 03:7a:70:9c:5e:c9:a5:35:7d:25:f8:c9:52:05:77: c0:50:69:fb:ad:4c:37:75:1f:c5:2c:74:e7:d1:b9: ff:56:bc:f4:cb:03:8f:aa:5c:24:92:16:3f:9b:4b: 74:3a:8d:f7:b0:cd:be:cf:ce:10:07:d1:57:6a:f5: 87:99:47:73:7b:26:68:9a:f6:72:06:d1:6e:ff:2e: 26:f5:1b:0d:1b:b2:28:d5:36:9f:b2:3e:e6:3e:cb: ee:14:95:d3:14:ae:6f:25:94:37:a4:78:a7:38:d9: 2c:09:fe:c5:e5:8e:69:2e:f8:36:f0:2e:63:c4:a3: c2:52:ff:0d:f0:ba:c2:c0:8b:30:60:84:b0:2f:50: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:12:8A:CB:13:7A:EA:C7:B4:15:6A:55:83:17:82:71:E4:E2:B3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:88:c7:fc:5f:49:4a:25:9f:6f:49:d0:ac:8e:1a:05:d7:dd: 5a:1a:7b:f1:14:88:77:7f:13:5c:ec:78:f5:ca:43:80:46:b2: 68:03:ed:6e:fc:b6:96:fc:6a:86:1b:c4:98:fb:39:a9:a9:5c: 59:17:1d:34:3c:be:09:54:b7:51:c8:5f:b9:84:70:19:53:e6: e4:d1:c9:b1:03:85:ab:95:a2:37:99:85:01:58:fe:cd:2a:a9: ed:78:1d:3e:50:d1:ca:22:f9:89:ef:43:f4:f9:eb:2f:4f:6b: 95:b4:6d:ec:f3:06:18:71:75:15:3b:59:12:f5:fd:3a:e0:26: 55:34:36:b9:c0:10:e0:3c:81:d3:6d:30:0c:2c:fb:df:40:1b: a6:42:bb:02:d1:01:99:11:43:1f:bd:0a:49:77:2d:55:e4:61: 54:a1:a6:31:bb:a0:7c:05:43:b8:17:e2:1d:00:ef:29:67:b9: 89:e4:f2:77:86:66:36:da:7d:9a:32:24:0c:0b:25:22:d8:96: e8:e6:b2:79:cd:9b:71:e1:8c:f4:db:30:dd:55:a4:4a:aa:f4: 48:68:76:80:0b:23:da:b1:f8:a8:54:32:df:48:0b:81:dc:91: 39:4f:83:d3:06:d0:b0:5f:df:04:89:42:fd:40:42:89:18:f1: 3c:82:93:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8B08naTuM4tFe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjkwOGFjNDMtN2NiMy00NGMzLWIyZGItMTVmNDJhMTUwNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8JR2UHizqtI5hzp99ehdC9vffHIZf40w4wd ps5K8wjgsgoLRE+xXvqyGznl8LfcfoaN4p3ciV8Smi3bQzFz2Mq5A4qbwvkcc7m6 d1QKJM5sP9GC/Mz2pAbiZJM/yP7NSjVlD/OKdtqbUblYdMhUKEwUwBYw41UDenCc XsmlNX0l+MlSBXfAUGn7rUw3dR/FLHTn0bn/Vrz0ywOPqlwkkhY/m0t0Oo33sM2+ z84QB9FXavWHmUdzeyZomvZyBtFu/y4m9RsNG7Io1Tafsj7mPsvuFJXTFK5vJZQ3 pHinONksCf7F5Y5pLvg28C5jxKPCUv8N8LrCwIswYISwL1B6BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMsSissTeurHtBVqVYMXgnHk4rPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDIzNDQ4OGYtODg4Ni0z YThkLTk2MWUtZTAyMjhlZjdmNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyIx/xfSUoln29J0KyOGgXX3Voae/EUiHd/E1zsePXKQ4BGsmgD 7W78tpb8aoYbxJj7OampXFkXHTQ8vglUt1HIX7mEcBlT5uTRybEDhauVojeZhQFY /s0qqe14HT5Q0coi+YnvQ/T56y9Pa5W0bezzBhhxdRU7WRL1/TrgJlU0NrnAEOA8 gdNtMAws+99AG6ZCuwLRAZkRQx+9Ckl3LVXkYVShpjG7oHwFQ7gX4h0A7ylnuYnk 8neGZjbafZoyJAwLJSLYlujmsnnNm3HhjPTbMN1VpEqq9EhodoALI9qx+KhUMt9I C4HckTlPg9MG0LBf3wSJQv1AQokY8TyCk/s= -----END CERTIFICATE-----Generated at Wed May 13 04:04:48 2026 by rpki-client