$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f6e1e53-5f95-3d4c-b51e-2b5cd335b3ce.roa File: 4f6e1e53-5f95-3d4c-b51e-2b5cd335b3ce.roa (raw, json) Hash identifier: SLct261OQBTPNHqYZPVInIZFPhpofGo/C979dq0e7Vk= Subject key identifier: 7A:2B:EC:7E:7C:E2:4C:DF:F9:FB:29:78:81:49:B0:9E:0F:8F:6C:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01B9F7A2D981450D2B280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f6e1e53-5f95-3d4c-b51e-2b5cd335b3ce.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 22547 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1b:9f:7a:2d:98:14:50:d2:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=26a253f6-0d5d-4a12-951f-19dd5600ba97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:8b:9b:01:d1:d4:f3:f8:1c:4e:e5:33:a7: 09:d9:ae:55:b8:91:22:79:12:36:06:2a:35:60:12: 53:b3:d6:10:6c:be:5e:7d:73:89:04:b3:9e:28:4a: b4:99:08:1a:2c:64:52:07:8b:01:c9:6b:00:ba:ae: c2:2d:93:e2:38:15:cc:19:56:e1:01:35:87:0f:71: 27:fd:39:82:9c:49:cc:01:74:f7:16:81:1d:01:74: a6:50:c9:7e:d5:c9:b1:48:90:63:e1:56:27:61:f0: 03:cb:bc:57:91:16:5d:fb:8e:2e:91:a6:e8:d6:34: 05:73:c3:1a:ef:05:22:7f:12:f3:57:cc:12:a7:66: bb:1a:11:48:af:70:91:45:a1:3b:0c:5f:61:d6:d0: 8a:95:91:7c:56:5b:83:60:8d:0e:2f:bb:ee:ef:bb: 72:d0:b1:41:b5:92:98:a7:92:26:ec:73:4d:cf:9b: 40:5d:00:84:a2:c8:98:3c:da:78:b3:96:d6:9a:83: f1:64:ce:72:c3:57:f4:05:8d:de:7b:6f:a2:ce:6c: 77:7e:63:c2:7e:d1:0d:3e:0d:07:b0:96:37:1f:50: 2e:10:93:53:e8:c9:17:fd:ea:c5:78:78:37:d4:86: d2:19:18:ac:3b:65:75:5b:fd:a1:39:e3:74:8e:62: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2B:EC:7E:7C:E2:4C:DF:F9:FB:29:78:81:49:B0:9E:0F:8F:6C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f6e1e53-5f95-3d4c-b51e-2b5cd335b3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:34:74:da:96:a0:85:88:e8:f3:c2:6a:89:73:35:d0:32:c1: 95:ec:aa:1a:08:63:fb:e6:d0:4b:cc:34:55:cc:bb:13:e1:87: 50:ad:5e:d0:9c:5b:7c:b6:56:92:6d:91:85:bc:2b:d6:84:8e: 37:fc:b0:43:1d:ce:09:a6:29:71:56:d1:6c:71:da:75:fc:92: 81:1a:fc:47:ce:b3:34:6f:db:2d:c0:08:41:ef:3f:19:db:67: 0a:79:09:06:64:c1:4a:cd:34:51:c9:6c:17:af:92:96:f7:d4: 6f:ab:f3:a9:e6:c6:7c:40:7d:ed:75:01:a7:4d:f5:f4:81:7a: f3:cc:d4:9f:a5:f6:03:5c:03:c0:68:d9:a5:e6:a8:c0:9e:ce: 6e:3d:9b:bc:bb:e8:df:78:0a:44:61:08:3e:72:0f:ea:71:37: eb:af:ae:dc:cf:e0:e3:b7:05:f3:67:03:46:03:bb:01:21:98: 0a:7f:5a:cd:5c:b2:8f:84:a3:83:c6:78:c9:f3:f3:a9:0a:b8: 2a:0d:8d:40:4d:7f:7f:1c:6c:d4:92:30:81:20:8c:47:61:92: 37:ba:64:bf:b3:58:4c:c9:d2:ef:d1:04:02:d5:e1:0e:32:ae: 06:6c:ae:d6:55:82:04:4e:aa:bf:e7:79:c6:68:52:a3:1a:6e: de:15:34:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBufei2YFFDSsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MjZhMjUzZjYtMGQ1ZC00YTEyLTk1MWYtMTlkZDU2MDBiYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ASLmwHR1PP4HE7lM6cJ2a5VuJEieRI2Bio1 YBJTs9YQbL5efXOJBLOeKEq0mQgaLGRSB4sByWsAuq7CLZPiOBXMGVbhATWHD3En /TmCnEnMAXT3FoEdAXSmUMl+1cmxSJBj4VYnYfADy7xXkRZd+44ukabo1jQFc8Ma 7wUifxLzV8wSp2a7GhFIr3CRRaE7DF9h1tCKlZF8VluDYI0OL7vu77ty0LFBtZKY p5Im7HNNz5tAXQCEosiYPNp4s5bWmoPxZM5yw1f0BY3ee2+izmx3fmPCftENPg0H sJY3H1AuEJNT6MkX/erFeHg31IbSGRisO2V1W/2hOeN0jmJibQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHor7H584kzf+fspeIFJsJ4Pj2wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGY2ZTFlNTMtNWY5NS0z ZDRjLWI1MWUtMmI1Y2QzMzViM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACY0dNqWoIWI6PPCaolzNdAywZXsqhoIY/vm0EvMNFXMuxPhh1Ct XtCcW3y2VpJtkYW8K9aEjjf8sEMdzgmmKXFW0Wxx2nX8koEa/EfOszRv2y3ACEHv PxnbZwp5CQZkwUrNNFHJbBevkpb31G+r86nmxnxAfe11AadN9fSBevPM1J+l9gNc A8Bo2aXmqMCezm49m7y76N94CkRhCD5yD+pxN+uvrtzP4OO3BfNnA0YDuwEhmAp/ Ws1cso+Eo4PGeMnz86kKuCoNjUBNf38cbNSSMIEgjEdhkje6ZL+zWEzJ0u/RBALV 4Q4yrgZsrtZVggROqr/necZoUqMabt4VNIY= -----END CERTIFICATE-----Generated at Wed May 13 05:02:56 2026 by rpki-client