$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa File: 51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa (raw, json) Hash identifier: Y/OF1LIihbCJYLOK4Cny2Y2Zyu6T8eVidtBlNF32/9Q= Subject key identifier: AC:19:8D:D5:4F:00:5F:85:56:37:AD:75:6B:B3:7A:4A:AC:87:02:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01B4A56CF15F5A9556580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36618 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1b:4a:56:cf:15:f5:a9:55:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=79bc5fd5-c26e-4911-b46d-afdbf0847d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:3d:98:17:23:85:3c:96:6e:07:a4:59:f2: ff:e8:db:ab:8f:02:df:e2:a8:94:e1:01:58:9f:2a: 95:54:8b:ff:df:c6:90:e3:6e:47:8e:e7:9a:9d:c0: 77:59:2b:1a:c3:e7:f8:97:00:54:1b:f2:fc:a4:b1: b4:1b:7d:63:21:be:91:4b:28:fa:53:8b:8d:06:7c: 6a:56:aa:42:3d:a6:6a:4c:d6:f3:3e:e5:95:82:81: bf:2f:5d:3b:90:65:b7:71:d1:15:eb:64:5d:6a:62: 52:15:33:68:12:46:a6:bd:36:7a:fd:6d:27:0b:c9: 29:67:cc:2d:1d:4f:43:5e:a0:d0:a3:df:2c:0e:3d: 58:53:43:96:1a:02:14:45:db:b1:fc:c4:8b:37:d1: fd:60:ce:49:f6:42:92:f4:95:cd:11:01:cb:5d:f0: a9:26:07:0f:ec:34:bd:f8:dc:cf:1c:46:3a:aa:d3: 21:41:f1:5c:9e:0a:31:e5:c5:22:9a:19:71:8a:90: 84:10:5f:fb:3f:87:89:9a:37:b6:cd:1b:85:4e:eb: 4b:fc:cc:bc:b0:a2:a0:81:f1:4e:9b:fa:b5:77:e0: 59:17:66:98:3e:00:27:dc:08:3b:5f:b2:c0:ec:f2: 5d:44:7a:e5:a3:8a:28:1b:ee:c3:81:ed:cb:2e:f8: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:19:8D:D5:4F:00:5F:85:56:37:AD:75:6B:B3:7A:4A:AC:87:02:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:a5:3f:fc:d1:27:d9:18:dc:3a:7e:7c:c0:f3:da:bf:b2: 49:7a:7f:4f:11:f0:02:01:e9:7a:29:b5:5f:b0:27:04:eb:38: d9:b5:e0:5b:73:eb:4e:16:94:45:a2:0f:30:69:ab:bf:8e:1f: e9:49:67:ed:52:70:1f:73:83:71:5a:81:53:88:10:ea:2b:03: ee:b8:85:09:26:cd:c9:8c:07:c0:8b:02:38:0c:a9:7c:65:d1: 51:de:06:5b:22:3a:de:73:b4:53:59:ac:1d:c2:a3:92:18:68: 66:71:f0:13:e4:43:c0:f2:f4:b8:01:0a:29:d6:96:58:a7:ce: f4:e0:d6:8a:76:45:43:4b:bb:49:97:6b:29:13:6c:61:e5:39: c7:cc:d0:43:de:ff:dc:e1:cb:76:3e:a7:18:c6:83:a6:f1:c3: f5:7e:2a:08:4c:9f:00:86:b6:93:8d:3f:6e:20:88:88:1f:32: f6:03:ed:4b:3b:c0:a1:b9:62:fb:90:6a:00:7e:1a:83:38:62: fc:3b:c6:65:44:18:4d:0f:95:f9:9a:27:10:1a:90:e1:ef:79: 25:46:d8:03:5d:c0:69:1f:b2:c6:f7:39:80:b9:39:4c:be:4b: 8e:59:01:ca:f6:e8:03:93:fa:57:c6:6b:15:91:9d:ef:f1:3c: fe:a9:44:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBtKVs8V9alVZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NzliYzVmZDUtYzI2ZS00OTExLWI0NmQtYWZkYmYwODQ3ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsA9mBcjhTyWbgekWfL/6NurjwLf4qiU4QFY nyqVVIv/38aQ425HjueancB3WSsaw+f4lwBUG/L8pLG0G31jIb6RSyj6U4uNBnxq VqpCPaZqTNbzPuWVgoG/L107kGW3cdEV62RdamJSFTNoEkamvTZ6/W0nC8kpZ8wt HU9DXqDQo98sDj1YU0OWGgIURdux/MSLN9H9YM5J9kKS9JXNEQHLXfCpJgcP7DS9 +NzPHEY6qtMhQfFcngox5cUimhlxipCEEF/7P4eJmje2zRuFTutL/My8sKKggfFO m/q1d+BZF2aYPgAn3Ag7X7LA7PJdRHrlo4ooG+7Dge3LLvidJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwZjdVPAF+FVjetdWuzekqshwKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFhZTdmN2QtODQ0NC0z OGNiLTkwMDMtYjFlNmM1ZDNlMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxopT/80SfZGNw6fnzA89q/skl6f08R8AIB6XoptV+wJwTrONm1 4Ftz604WlEWiDzBpq7+OH+lJZ+1ScB9zg3FagVOIEOorA+64hQkmzcmMB8CLAjgM qXxl0VHeBlsiOt5ztFNZrB3Co5IYaGZx8BPkQ8Dy9LgBCinWllinzvTg1op2RUNL u0mXaykTbGHlOcfM0EPe/9zhy3Y+pxjGg6bxw/V+KghMnwCGtpONP24giIgfMvYD 7Us7wKG5YvuQagB+GoM4Yvw7xmVEGE0PlfmaJxAakOHveSVG2ANdwGkfssb3OYC5 OUy+S45ZAcr26AOT+lfGaxWRne/xPP6pREM= -----END CERTIFICATE-----Generated at Wed May 13 04:14:48 2026 by rpki-client