$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa File: 45660512-52c3-3f7c-9dfb-cce3420d71dc.roa (raw, json) Hash identifier: q8/qR7Gxl4FRXou1AsUZycoPu2KcnjLySL2TiOlsoPQ= Subject key identifier: CB:9D:54:02:B8:3C:E0:78:D1:D5:7A:C9:99:A2:41:53:78:B1:2B:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01E0BA46F2CE54FF01C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396615 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1e:0b:a4:6f:2c:e5:4f:f0:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=6a58021d-e210-4183-91aa-aa972401e7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:4f:3a:9b:2b:91:61:1d:f5:b4:06:6e:d2: be:e9:42:e3:37:87:ca:ac:b4:d1:7e:7f:5e:55:40: ca:38:95:32:fc:74:62:a6:f0:f4:23:d9:6b:5f:66: 52:44:d0:16:90:15:b3:2a:65:8d:87:97:3b:46:94: 98:f9:b3:5d:3f:40:fa:6b:70:52:31:74:6d:37:08: 64:80:79:30:6c:ef:fc:8d:b7:af:53:71:05:04:d5: 89:6b:4e:6d:c3:17:55:9b:87:44:71:c9:71:ed:b5: 27:3e:86:2b:19:fc:23:16:6e:cf:c0:b1:97:19:25: 2c:5e:80:ff:03:b2:38:7e:68:c0:17:69:6c:d9:b5: 6d:9f:ac:0b:9e:97:b8:6b:c9:2f:e3:30:55:bf:d3: 0a:31:58:a4:9e:87:79:7d:a1:9e:8d:0f:a8:98:ba: c9:41:96:04:b7:3d:93:27:e2:ba:3c:88:f9:39:88: 58:a1:72:08:9c:c7:4b:d7:8f:bf:78:af:43:90:67: ab:51:2e:68:16:82:b6:de:48:b0:a0:08:9b:47:b2: 2d:21:16:60:84:4b:be:d7:a8:89:cb:70:ea:9e:97: 59:ed:c8:29:aa:51:7d:e7:ef:70:ae:66:bf:b3:61: fc:01:88:aa:9c:5f:9e:ab:bc:69:58:83:5c:61:98: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9D:54:02:B8:3C:E0:78:D1:D5:7A:C9:99:A2:41:53:78:B1:2B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45660512-52c3-3f7c-9dfb-cce3420d71dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:84:4e:7b:fd:da:73:17:2a:0a:6a:2c:e9:a9:ff:b7:e0:d3: a0:f0:1e:ac:4a:35:50:81:4b:2a:8f:15:44:39:a9:d1:c4:b6: 3e:5c:5a:55:87:95:a9:88:b4:b8:68:d4:37:71:21:37:47:07: 06:5c:0c:f7:06:79:07:a8:2e:bb:7d:b5:0e:e7:3a:f8:4c:e3: a1:ae:ac:ad:9a:3e:a6:75:b1:c3:6d:2a:98:e3:93:b1:2a:f5: 79:22:2d:c9:98:70:93:e5:eb:7a:0f:04:8a:03:ae:46:73:b2: a6:e5:21:ff:10:93:35:e1:b4:31:71:8e:46:22:2c:03:a8:97: 2a:8f:ce:11:24:73:e7:6e:b2:6c:f6:37:62:93:85:01:4e:a6: d0:94:2c:a7:9c:b6:ab:85:a3:97:7b:02:b2:16:38:be:61:d4: 55:ce:0f:db:cb:e5:0f:46:8f:2e:b3:38:86:a8:30:25:86:a1: 7e:46:2e:39:ae:22:60:df:9f:79:03:f1:d3:1e:fd:d7:b8:47: 82:e1:5e:16:a2:5e:05:0c:ac:1d:f1:a5:48:e9:f2:95:ef:39: 48:61:61:74:e8:0b:99:9b:f0:13:0f:0b:22:d7:98:14:48:43: 5f:6c:f6:c2:8b:a3:55:a0:61:ef:ab:3b:b2:1d:04:6d:54:58: 5b:1e:4c:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwB4LpG8s5U/wHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NmE1ODAyMWQtZTIxMC00MTgzLTkxYWEtYWE5NzI0MDFlN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15POpsrkWEd9bQGbtK+6ULjN4fKrLTRfn9e VUDKOJUy/HRipvD0I9lrX2ZSRNAWkBWzKmWNh5c7RpSY+bNdP0D6a3BSMXRtNwhk gHkwbO/8jbevU3EFBNWJa05twxdVm4dEcclx7bUnPoYrGfwjFm7PwLGXGSUsXoD/ A7I4fmjAF2ls2bVtn6wLnpe4a8kv4zBVv9MKMViknod5faGejQ+omLrJQZYEtz2T J+K6PIj5OYhYoXIInMdL14+/eK9DkGerUS5oFoK23kiwoAibR7ItIRZghEu+16iJ y3DqnpdZ7cgpqlF95+9wrma/s2H8AYiqnF+eq7xpWINcYZh+OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMudVAK4POB40dV6yZmiQVN4sSvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU2NjA1MTItNTJjMy0z ZjdjLTlkZmItY2NlMzQyMGQ3MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqETnv92nMXKgpqLOmp/7fg06DwHqxKNVCBSyqPFUQ5qdHEtj5c WlWHlamItLho1DdxITdHBwZcDPcGeQeoLrt9tQ7nOvhM46GurK2aPqZ1scNtKpjj k7Eq9XkiLcmYcJPl63oPBIoDrkZzsqblIf8QkzXhtDFxjkYiLAOolyqPzhEkc+du smz2N2KThQFOptCULKectquFo5d7ArIWOL5h1FXOD9vL5Q9Gjy6zOIaoMCWGoX5G LjmuImDfn3kD8dMe/de4R4LhXhaiXgUMrB3xpUjp8pXvOUhhYXToC5mb8BMPCyLX mBRIQ19s9sKLo1WgYe+rO7IdBG1UWFseTO8= -----END CERTIFICATE-----Generated at Wed May 13 04:04:52 2026 by rpki-client