$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa File: 501a8a2f-40a3-33f1-af80-31368c8026b6.roa (raw, json) Hash identifier: KI1v1oDZEapZCd1aOJcP5I9dXHXt7IBviN6fiSwDwCM= Subject key identifier: DE:D0:44:78:84:FC:25:C0:54:10:1F:5A:19:12:2F:10:52:76:B0:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01C018E3CFE96D665CA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396592 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1c:01:8e:3c:fe:96:d6:65:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=415ae09c-f170-41ff-b534-1d353e7d8d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:90:41:cd:bb:7d:f9:f7:69:b7:80:47:0d: e5:8d:8c:a4:5e:26:c9:7d:a6:1a:82:ed:73:3f:5a: 8d:1c:cb:5c:5f:0d:46:43:96:bb:c9:37:be:f0:21: a7:b6:32:4e:1c:47:81:85:3e:7e:af:37:8b:e1:e9: 8d:df:b5:12:ca:de:19:37:4f:0e:76:af:bb:9d:01: b1:4f:8f:ee:03:1f:c1:13:3a:61:9e:88:d2:c7:c2: 00:18:b8:07:33:80:fe:de:b0:2b:c8:6f:94:b8:ae: 9b:d5:44:c9:cb:97:22:b1:bc:58:05:c1:71:a2:22: 4a:23:ab:1f:c8:a3:b4:5c:6f:3c:55:71:a9:36:42: 7e:05:9a:9a:3a:d6:6b:35:1d:8f:c0:31:4a:d2:a4: 7d:77:76:22:53:11:7b:bf:10:24:b8:61:36:58:58: ae:8b:64:ad:fc:6b:fe:3c:16:ad:88:ec:93:76:43: 2a:ab:a0:16:f4:23:4c:f7:6d:64:96:8a:10:96:89: 16:e7:83:df:9e:14:10:b2:5e:7a:70:96:a6:11:69: 1c:6f:7e:f3:71:78:de:31:2d:25:c6:05:43:ec:e9: ff:2d:05:1e:18:4a:16:5e:3c:27:cb:0a:13:6f:38: 54:fc:3f:da:df:99:2c:dc:f8:a8:34:57:40:42:a5: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:44:78:84:FC:25:C0:54:10:1F:5A:19:12:2F:10:52:76:B0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:80:49:20:54:56:83:0b:ee:5b:0b:ea:7b:e5:ab:d2:5e:89: 80:ee:62:87:fb:36:af:0c:4e:04:57:1e:bc:11:3a:8b:13:51: 4c:1b:de:af:2e:64:87:e0:f5:8e:91:44:ba:3d:ca:83:fd:d7: 60:98:6f:f8:ca:5e:cf:55:ba:20:01:31:d6:6d:0c:90:8a:a6: 22:76:5a:93:fb:1f:2b:1a:b2:ec:6e:6a:45:8a:59:54:8c:9a: ec:82:08:14:33:79:42:32:28:46:71:3f:62:83:92:c4:9d:f0: 5f:00:c1:ab:f0:88:34:8f:c6:db:2a:9e:c9:22:4b:08:21:11: bd:5e:95:5a:a4:7b:5d:cd:d3:14:6d:03:58:7e:56:3d:71:8e: ee:5c:ee:ab:34:95:a6:ab:f9:39:17:45:7d:25:37:70:cc:85: 7e:6b:97:ef:7d:1b:16:f8:06:58:6b:71:fe:d6:a4:68:0c:54: 53:64:d5:ce:2c:69:7c:32:89:1b:34:c2:4c:b7:49:8c:88:a3: 9b:8e:24:f7:5f:75:6b:d6:b5:e5:6c:e5:02:94:cf:83:e8:66: 73:89:0f:8c:75:ba:19:fb:96:b3:72:23:94:80:38:b0:ec:cb: 69:e3:c7:56:b5:aa:c5:98:10:3d:67:fd:92:ba:47:b1:18:7a: 3f:a9:c3:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBwBjjz+ltZlyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NDE1YWUwOWMtZjE3MC00MWZmLWI1MzQtMWQzNTNlN2Q4ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l+QQc27ffn3abeARw3ljYykXibJfaYagu1z P1qNHMtcXw1GQ5a7yTe+8CGntjJOHEeBhT5+rzeL4emN37USyt4ZN08Odq+7nQGx T4/uAx/BEzphnojSx8IAGLgHM4D+3rAryG+UuK6b1UTJy5cisbxYBcFxoiJKI6sf yKO0XG88VXGpNkJ+BZqaOtZrNR2PwDFK0qR9d3YiUxF7vxAkuGE2WFiui2St/Gv+ PBatiOyTdkMqq6AW9CNM921klooQlokW54PfnhQQsl56cJamEWkcb37zcXjeMS0l xgVD7On/LQUeGEoWXjwnywoTbzhU/D/a35ks3PioNFdAQqVtYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7QRHiE/CXAVBAfWhkSLxBSdrAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAxYThhMmYtNDBhMy0z M2YxLWFmODAtMzEzNjhjODAyNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuASSBUVoML7lsL6nvlq9JeiYDuYof7Nq8MTgRXHrwROosTUUwb 3q8uZIfg9Y6RRLo9yoP912CYb/jKXs9VuiABMdZtDJCKpiJ2WpP7HysasuxuakWK WVSMmuyCCBQzeUIyKEZxP2KDksSd8F8AwavwiDSPxtsqnskiSwghEb1elVqke13N 0xRtA1h+Vj1xju5c7qs0laar+TkXRX0lN3DMhX5rl+99Gxb4Blhrcf7WpGgMVFNk 1c4saXwyiRs0wky3SYyIo5uOJPdfdWvWteVs5QKUz4PoZnOJD4x1uhn7lrNyI5SA OLDsy2njx1a1qsWYED1n/ZK6R7EYej+pwyA= -----END CERTIFICATE-----Generated at Wed May 13 06:31:26 2026 by rpki-client