$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa File: 43e3ea64-26d8-3cc3-afce-3d6761763a84.roa (raw, json) Hash identifier: 0PFW6WFRg4REODcxqUJEXx14EYydWfjNmvVIW6IjVTc= Subject key identifier: 9A:5C:6C:01:90:4C:7F:A6:05:23:E0:38:D8:1E:37:C3:0D:0D:9A:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01DAA04CE95753A7CB3B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396562 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1d:aa:04:ce:95:75:3a:7c:b3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=8b7dc9d2-2572-432b-8fdf-4d62c190af44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:dd:a3:6f:3f:d3:90:42:45:fa:46:03:bb: 45:ce:93:c1:3f:ac:4d:eb:b6:d5:5e:f2:5d:e7:52: cf:bb:49:b9:16:35:41:2d:b9:6b:9c:aa:64:c8:22: e7:e5:7d:49:27:8e:3b:0d:06:35:ef:27:de:12:8b: 67:41:97:1a:3e:72:07:91:fa:80:78:f0:ec:b4:4f: 89:f1:5b:8d:fc:0a:1f:c1:12:41:ae:5a:d1:f3:33: f2:49:34:60:30:0c:08:69:6b:9b:27:11:a1:1a:1b: 6e:85:e8:4f:b4:bf:98:66:d8:0d:99:a3:3e:72:9f: 89:6e:73:49:c0:e9:05:7b:fb:7a:16:92:d4:e5:ba: 64:f6:4b:c6:24:8d:97:f8:a3:94:98:85:e2:1e:c5: 98:79:93:df:53:1c:81:7c:7b:80:da:67:88:97:8f: 1c:1d:5e:1c:eb:05:3d:68:03:02:27:64:6d:f4:6f: 04:16:d6:e2:4a:7c:2b:58:9c:a5:cc:d2:f6:79:28: d1:49:85:b6:4e:d3:7c:ed:9b:1f:00:59:21:b5:a0: b8:ce:87:7b:70:e5:f7:b6:fc:e5:ed:e7:df:b3:3e: 98:25:3a:45:ee:3d:63:28:e7:3f:2c:0d:bd:db:b7: 15:fa:4f:26:0f:e1:00:96:df:a4:d8:4e:85:94:4a: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:6C:01:90:4C:7F:A6:05:23:E0:38:D8:1E:37:C3:0D:0D:9A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a5:c6:80:77:e3:d0:df:bc:6b:7b:78:35:d0:7d:fc:76:58: 03:96:03:1a:3d:b8:f6:4a:62:ab:26:9c:c0:6b:a9:9d:ca:6b: b7:e0:0f:0e:f3:45:a5:b3:7f:4f:e1:f2:4a:35:74:cf:99:96: d1:4b:10:10:29:19:8a:16:74:fc:41:35:f9:bf:08:f4:86:7d: af:27:95:9f:1d:81:6e:3a:5a:99:ac:57:e5:d4:c5:03:ff:70: b2:84:40:a9:7a:74:88:e0:ec:a4:87:3f:c2:f9:7a:ab:f2:4e: cb:44:01:1d:29:d4:6f:53:c4:52:27:99:ae:2b:e3:1c:a5:fe: 9b:84:6c:4e:f7:0f:13:21:cd:a6:61:c4:16:dc:4e:97:ad:3f: fa:cc:15:24:08:c3:57:80:1c:44:d9:13:63:f1:d2:08:ad:c0: 1c:50:f2:7c:eb:90:69:b0:4b:ba:fd:be:e2:e6:8a:a8:34:77: 4f:b0:04:14:f7:33:73:af:66:be:63:b1:b6:56:46:a9:1b:9d: c7:00:84:9c:59:cd:f2:21:5b:32:13:10:a8:05:7a:5a:7f:9a: 57:a4:c6:91:e7:98:6f:45:58:b1:14:f2:6b:f3:d5:5c:df:39: 8d:92:23:a9:b7:dd:35:f1:46:db:53:a6:ad:72:05:f2:b0:d3: e5:f6:9f:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwB2qBM6VdTp8s7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OGI3ZGM5ZDItMjU3Mi00MzJiLThmZGYtNGQ2MmMxOTBhZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/fdo28/05BCRfpGA7tFzpPBP6xN67bVXvJd 51LPu0m5FjVBLblrnKpkyCLn5X1JJ447DQY17yfeEotnQZcaPnIHkfqAePDstE+J 8VuN/AofwRJBrlrR8zPySTRgMAwIaWubJxGhGhtuhehPtL+YZtgNmaM+cp+JbnNJ wOkFe/t6FpLU5bpk9kvGJI2X+KOUmIXiHsWYeZPfUxyBfHuA2meIl48cHV4c6wU9 aAMCJ2Rt9G8EFtbiSnwrWJylzNL2eSjRSYW2TtN87ZsfAFkhtaC4zod7cOX3tvzl 7effsz6YJTpF7j1jKOc/LA2927cV+k8mD+EAlt+k2E6FlEoV2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJpcbAGQTH+mBSPgONgeN8MNDZpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlM2VhNjQtMjZkOC0z Y2MzLWFmY2UtM2Q2NzYxNzYzYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAylxoB349DfvGt7eDXQffx2WAOWAxo9uPZKYqsmnMBrqZ3Ka7fg Dw7zRaWzf0/h8ko1dM+ZltFLEBApGYoWdPxBNfm/CPSGfa8nlZ8dgW46WpmsV+XU xQP/cLKEQKl6dIjg7KSHP8L5eqvyTstEAR0p1G9TxFInma4r4xyl/puEbE73DxMh zaZhxBbcTpetP/rMFSQIw1eAHETZE2Px0gitwBxQ8nzrkGmwS7r9vuLmiqg0d0+w BBT3M3OvZr5jsbZWRqkbnccAhJxZzfIhWzITEKgFelp/mlekxpHnmG9FWLEU8mvz 1VzfOY2SI6m33TXxRttTpq1yBfKw0+X2nw0= -----END CERTIFICATE-----Generated at Wed May 13 05:23:05 2026 by rpki-client