$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa File: 4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa (raw, json) Hash identifier: rs9wN4vgNsdHr3praf76bfO+slCs9FwRnYGtj6RVu2U= Subject key identifier: 24:00:0A:E0:76:0A:76:4F:67:8A:B2:68:F2:6D:07:3A:95:17:65:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DC29AF78114B6C25F9D8F0200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 396541 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:f7:81:14:b6:c2:5f:9d:8f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=f8071d39-9cd6-4a16-b3e8-dc787d6895cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3c:a5:23:ac:74:c9:06:1b:8e:8b:57:b5:b0: c2:eb:97:60:5f:e6:ff:47:3d:ed:01:de:e3:0e:fe: 1e:3f:d0:c7:58:26:ec:9b:d6:14:a5:33:0a:3d:de: 7e:86:fb:63:0c:f1:61:b6:87:a4:57:01:fb:df:71: ca:f4:98:f5:d9:47:53:84:1f:e9:d1:b0:20:8d:b2: de:06:a3:31:64:3c:cf:e5:e8:10:fb:ed:8a:db:9e: bc:f0:c7:30:bb:06:58:92:22:dd:47:7b:fb:b8:d4: f0:df:7b:91:51:5c:98:98:95:fe:36:5d:a5:a1:5f: 24:c6:7c:f8:f1:dc:1a:3e:b1:ef:d1:57:c7:2c:cb: 48:2c:41:39:19:d8:69:6a:08:69:c7:33:5b:d9:3a: 11:61:46:68:b5:de:c2:53:1e:55:a3:4e:b0:0e:34: d8:b5:99:d2:e8:4e:c2:69:cb:d8:ef:9b:48:f1:af: 81:f5:88:4e:14:23:f0:63:3a:9e:d7:08:7c:bc:43: 9b:8f:a4:59:8a:bd:a1:fc:c2:c0:32:a7:dc:53:56: f2:a3:ad:64:6c:93:1d:04:0c:cb:71:05:92:ce:cd: 46:c0:02:77:22:a1:80:d9:72:48:a2:9d:f5:dc:e5: 42:70:dd:c1:10:4e:61:7f:dd:e6:2e:52:b2:27:b7: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:0A:E0:76:0A:76:4F:67:8A:B2:68:F2:6D:07:3A:95:17:65:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4aef7006-6c0c-3bc4-966f-2e7e97d911b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:75:7b:44:7a:02:c2:3b:8f:d7:d2:e6:e7:6c:6a:ee:2a:d4: b0:d7:10:7d:f1:98:58:97:72:d8:ea:0b:f6:52:40:13:ff:68: ef:df:7e:a6:72:ea:a6:e9:30:0c:e5:fc:04:3e:e1:87:17:7c: 10:40:6f:35:d6:3f:f8:b2:35:ef:3f:84:39:d3:60:9c:53:a3: 5d:09:cb:eb:98:4e:b2:b7:6c:5a:8b:1e:cc:12:8a:a5:14:df: 7a:b3:42:28:07:8a:e0:9d:47:04:2d:27:bc:5a:dc:c0:75:b1: 84:21:b4:59:e0:1b:f3:9c:fb:64:f7:91:35:a8:44:fd:d1:a3: 03:7c:e5:17:1f:58:e4:a4:89:59:10:96:ae:30:35:2a:d2:b6: 01:f4:8b:06:77:15:73:43:1c:30:50:f3:6a:aa:d5:78:01:ae: d7:09:68:13:e6:44:75:5d:3b:95:22:6a:cd:fe:30:9a:77:4f: 87:23:e5:1f:9b:b0:53:d9:b3:a1:10:eb:1c:67:68:cc:84:5d: b6:22:b6:ed:43:a9:b0:56:fc:f1:8d:f2:61:70:7a:a3:13:db: 6e:a2:a4:c4:93:66:5b:b5:25:72:c1:e8:a3:bb:0b:57:1a:45: cf:36:0c:70:08:4e:5f:3a:e7:26:25:12:d5:4d:26:08:74:97: c7:f0:a1:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3CmveBFLbCX52PAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk ZjgwNzFkMzktOWNkNi00YTE2LWIzZTgtZGM3ODdkNjg5NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDylI6x0yQYbjotXtbDC65dgX+b/Rz3tAd7j Dv4eP9DHWCbsm9YUpTMKPd5+hvtjDPFhtoekVwH733HK9Jj12UdThB/p0bAgjbLe BqMxZDzP5egQ++2K25688McwuwZYkiLdR3v7uNTw33uRUVyYmJX+Nl2loV8kxnz4 8dwaPrHv0VfHLMtILEE5GdhpaghpxzNb2ToRYUZotd7CUx5Vo06wDjTYtZnS6E7C acvY75tI8a+B9YhOFCPwYzqe1wh8vEObj6RZir2h/MLAMqfcU1byo61kbJMdBAzL cQWSzs1GwAJ3IqGA2XJIop313OVCcN3BEE5hf93mLlKyJ7ehBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCQACuB2CnZPZ4qyaPJtBzqVF2W7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFlZjcwMDYtNmMwYy0z YmM0LTk2NmYtMmU3ZTk3ZDkxMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3dXtEegLCO4/X0ubnbGruKtSw1xB98ZhYl3LY 6gv2UkAT/2jv336mcuqm6TAM5fwEPuGHF3wQQG811j/4sjXvP4Q502CcU6NdCcvr mE6yt2xaix7MEoqlFN96s0IoB4rgnUcELSe8WtzAdbGEIbRZ4BvznPtk95E1qET9 0aMDfOUXH1jkpIlZEJauMDUq0rYB9IsGdxVzQxwwUPNqqtV4Aa7XCWgT5kR1XTuV ImrN/jCad0+HI+Ufm7BT2bOhEOscZ2jMhF22IrbtQ6mwVvzxjfJhcHqjE9tuoqTE k2ZbtSVyweijuwtXGkXPNgxwCE5fOucmJRLVTSYIdJfH8KEa -----END CERTIFICATE-----Generated at Wed May 13 04:48:55 2026 by rpki-client