$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa File: 43e649a5-8c17-35bf-89e2-67bb6324e681.roa (raw, json) Hash identifier: R0N+3tAoSEca9J6mZczXTnqVEVK5vzDvdMHjxXkJes8= Subject key identifier: D6:B5:F4:4A:5F:C4:26:3A:98:BF:B0:C8:D7:B1:7D:C5:4F:99:88:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFC6FEBC730EE8972AC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397194 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fc:6f:eb:c7:30:ee:89:72:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=16446afd-bfcd-44c5-97cf-a3e72f3327fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c3:34:57:1c:55:7b:01:3c:ce:62:5c:4d:8b: 1b:46:95:53:d6:a5:d0:a4:c1:a2:8c:92:f2:a3:af: dc:71:61:4c:b5:21:ef:28:89:04:31:ad:db:57:4b: 8f:1d:e7:ac:16:96:8b:70:8b:66:95:fe:ef:74:51: eb:c2:a9:fb:ca:ff:9d:42:66:74:2d:c0:ab:55:db: 9a:38:b4:5d:8a:e4:59:2e:27:1f:64:9c:dc:c3:67: bd:db:a8:1a:25:c8:d4:eb:f2:8e:9e:0b:c0:48:8a: ae:7a:dd:4c:03:bb:d2:5f:13:65:87:84:c5:a1:6c: 00:8a:4b:81:ce:e1:8d:ae:14:6c:a6:24:f4:89:d7: 45:04:9a:74:fb:8a:e6:f6:84:00:d8:06:92:b0:91: 0d:69:47:ec:09:9d:70:db:0e:f1:c2:09:9a:d1:52: d9:8f:50:53:b3:38:3b:c3:92:94:a0:3e:96:96:1f: 77:63:d3:09:0f:e8:24:fe:7e:11:9d:a1:1e:35:45: 0e:32:2d:00:b5:49:5a:94:6d:26:10:5e:ec:1a:ed: b9:42:ac:48:05:c4:16:3d:9c:06:08:7f:db:c0:07: 41:70:20:14:e4:56:ac:7a:2f:02:1a:b8:45:39:5a: c5:80:ea:17:76:07:e6:fc:fe:5f:d0:15:aa:7e:d2: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:F4:4A:5F:C4:26:3A:98:BF:B0:C8:D7:B1:7D:C5:4F:99:88:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:85:bf:ce:b6:2c:68:33:38:26:e7:2a:0d:d4:a6:78:fa:d5: 5c:78:af:99:4f:ff:e2:ec:11:b2:68:4d:91:6d:8d:3d:67:56: 5f:b7:0d:45:72:bc:89:1d:45:46:34:56:e9:56:df:e7:50:d8: be:4b:32:1e:3d:20:a8:4e:6e:d8:53:8b:5e:7f:27:e7:6c:a3: bc:21:e4:2a:59:26:40:f7:99:ba:73:f0:9f:a7:04:03:03:12: 6d:fa:14:48:fa:1f:7d:dc:90:4f:a6:ec:8d:bb:df:aa:dd:80: 9f:93:f7:c9:46:c1:e0:f5:db:12:da:af:22:02:67:ee:d2:ff: 3e:1e:5c:34:84:fe:2d:1b:a7:ef:47:fd:aa:d4:d9:6d:04:dd: ea:a2:31:50:f5:a9:5c:91:c3:4c:6e:89:e7:91:68:27:62:64: 21:5b:18:a7:31:af:e9:2a:73:1a:79:70:ad:cc:22:c6:69:2f: 9b:1c:e4:c3:d4:13:3f:4a:a9:58:a5:af:9c:22:1b:bf:cd:c3: b7:78:56:32:aa:e3:3d:ad:ec:22:bd:b3:47:93:7c:3c:16:c8: d4:54:0c:14:13:c5:f8:9f:9c:8f:61:fe:ba:b4:55:f9:76:30: 60:75:10:da:6e:95:24:9a:a6:16:01:80:ab:fd:98:64:a0:26: 0e:0b:5a:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/xv68cw7olyrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MTY0NDZhZmQtYmZjZC00NGM1LTk3Y2YtYTNlNzJmMzMyN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisM0VxxVewE8zmJcTYsbRpVT1qXQpMGijJLy o6/ccWFMtSHvKIkEMa3bV0uPHeesFpaLcItmlf7vdFHrwqn7yv+dQmZ0LcCrVdua OLRdiuRZLicfZJzcw2e926gaJcjU6/KOngvASIquet1MA7vSXxNlh4TFoWwAikuB zuGNrhRspiT0iddFBJp0+4rm9oQA2AaSsJENaUfsCZ1w2w7xwgma0VLZj1BTszg7 w5KUoD6Wlh93Y9MJD+gk/n4RnaEeNUUOMi0AtUlalG0mEF7sGu25QqxIBcQWPZwG CH/bwAdBcCAU5Fasei8CGrhFOVrFgOoXdgfm/P5f0BWqftJEEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNa19EpfxCY6mL+wyNexfcVPmYghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNjQ5YTUtOGMxNy0z NWJmLTg5ZTItNjdiYjYzMjRlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaFv862LGgzOCbnKg3Upnj61Vx4r5lP/+LsEbJoTZFtjT1nVl+3 DUVyvIkdRUY0VulW3+dQ2L5LMh49IKhObthTi15/J+dso7wh5CpZJkD3mbpz8J+n BAMDEm36FEj6H33ckE+m7I2736rdgJ+T98lGweD12xLaryICZ+7S/z4eXDSE/i0b p+9H/arU2W0E3eqiMVD1qVyRw0xuieeRaCdiZCFbGKcxr+kqcxp5cK3MIsZpL5sc 5MPUEz9KqVilr5wiG7/Nw7d4VjKq4z2t7CK9s0eTfDwWyNRUDBQTxfifnI9h/rq0 Vfl2MGB1ENpulSSaphYBgKv9mGSgJg4LWis= -----END CERTIFICATE-----Generated at Wed May 13 05:27:26 2026 by rpki-client