$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa File: 543a87d2-a772-3495-ad38-2cb0fb484d36.roa (raw, json) Hash identifier: hkoqFxMCiQz0lA89gHjrBDJ+OXaRkEkkpKSAHoxDkjA= Subject key identifier: 68:39:48:E1:FD:C8:D8:BC:1B:A3:B4:7B:1A:0A:51:D9:9A:99:52:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01A07CC4C6C5E6D351200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396589 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1a:07:cc:4c:6c:5e:6d:35:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1ad1e9cd-50c7-4400-bcb1-ab5ba6a61932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:50:b5:c9:c4:bf:9f:0b:ce:db:d8:a2:74:28: db:e5:17:ce:da:80:68:10:dd:7b:23:0f:e7:9e:e2: 38:fe:64:86:24:9f:93:ce:82:ef:3c:95:d7:51:19: 48:bf:58:80:9f:6a:44:56:1b:ba:fb:9a:93:12:99: 22:79:41:01:a6:08:ee:67:cb:65:00:b2:46:de:4a: 2f:fd:92:8e:bc:cb:44:8a:a7:5a:73:42:56:34:c2: 15:17:44:5e:a8:7a:16:fd:c9:48:94:1b:9f:73:fb: 72:2e:78:2d:c1:a6:66:4e:ce:87:ba:91:a9:80:51: aa:a7:72:69:18:99:ec:bf:90:f9:5b:06:4c:9e:f2: b6:e9:6e:7b:1c:f8:e1:3d:8c:86:df:bc:f1:ca:5a: de:71:ff:5c:9e:4a:d2:9e:6e:64:b5:ce:f4:a0:d3: 24:e4:34:35:fa:05:7f:43:b0:89:e6:40:ec:4f:af: 6a:ef:a8:4c:81:98:25:7d:40:34:ca:19:81:a0:bd: ba:88:48:f5:c6:01:a5:00:83:77:02:8c:b1:ef:78: 99:07:ab:69:61:44:a7:01:53:71:99:5c:71:a0:b3: 0f:1a:e8:81:a9:32:19:a8:4d:b6:47:f6:28:76:54: 73:5f:cb:d6:8e:85:13:5e:06:db:56:57:84:1c:3e: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:39:48:E1:FD:C8:D8:BC:1B:A3:B4:7B:1A:0A:51:D9:9A:99:52:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:78:b8:d7:bf:d8:97:df:77:08:89:20:37:3a:74:df:6c:1f: 4e:3a:00:23:45:82:a2:30:6f:2d:ef:27:5a:7f:d5:49:b4:b1: 0a:dc:4f:16:7f:63:6b:58:cf:6d:3f:e8:83:f0:3f:34:af:cd: b4:c8:91:98:f3:87:c4:46:85:c5:09:1e:d2:9e:73:9d:31:b0: 46:35:8d:2c:51:17:aa:28:1f:15:be:e9:7f:aa:70:3c:4f:04: d0:ed:96:0a:2a:1f:65:b7:ea:cf:a9:59:5f:04:b5:32:a2:96: e7:ab:64:a1:f6:a4:a8:8b:c7:d4:56:89:c6:8e:e0:ae:fe:a5: 0d:8e:91:1f:97:dd:26:a7:3c:1b:28:47:f5:7d:70:16:59:dc: f5:7f:9e:77:c6:08:e0:c3:fa:d0:86:0e:40:93:0a:94:27:35: fa:58:08:08:42:35:4b:31:dc:c2:bc:5b:01:8f:78:f8:1b:46: eb:81:17:2f:b8:d4:19:8f:5e:5c:b8:2a:45:ef:2a:31:db:9a: c1:33:2d:db:3c:c0:01:45:c2:70:52:70:d8:9a:02:1e:27:a7: b1:ad:bf:a6:a7:cf:66:c9:c0:2a:c0:af:2f:82:f2:0b:2c:50: 23:dd:19:70:c9:5a:95:34:28:2f:ef:30:a8:b4:09:26:f3:8f: ce:88:7b:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBoHzExsXm01EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWFkMWU5Y2QtNTBjNy00NDAwLWJjYjEtYWI1YmE2YTYxOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVC1ycS/nwvO29iidCjb5RfO2oBoEN17Iw/n nuI4/mSGJJ+TzoLvPJXXURlIv1iAn2pEVhu6+5qTEpkieUEBpgjuZ8tlALJG3kov /ZKOvMtEiqdac0JWNMIVF0ReqHoW/clIlBufc/tyLngtwaZmTs6HupGpgFGqp3Jp GJnsv5D5WwZMnvK26W57HPjhPYyG37zxylrecf9cnkrSnm5ktc70oNMk5DQ1+gV/ Q7CJ5kDsT69q76hMgZglfUA0yhmBoL26iEj1xgGlAIN3Aoyx73iZB6tpYUSnAVNx mVxxoLMPGuiBqTIZqE22R/YodlRzX8vWjoUTXgbbVleEHD7uawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGg5SOH9yNi8G6O0exoKUdmamVI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzYTg3ZDItYTc3Mi0z NDk1LWFkMzgtMmNiMGZiNDg0ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADt4uNe/2JffdwiJIDc6dN9sH046ACNFgqIwby3vJ1p/1Um0sQrc TxZ/Y2tYz20/6IPwPzSvzbTIkZjzh8RGhcUJHtKec50xsEY1jSxRF6ooHxW+6X+q cDxPBNDtlgoqH2W36s+pWV8EtTKiluerZKH2pKiLx9RWicaO4K7+pQ2OkR+X3San PBsoR/V9cBZZ3PV/nnfGCODD+tCGDkCTCpQnNfpYCAhCNUsx3MK8WwGPePgbRuuB Fy+41BmPXly4KkXvKjHbmsEzLds8wAFFwnBScNiaAh4np7Gtv6anz2bJwCrAry+C 8gssUCPdGXDJWpU0KC/vMKi0CSbzj86Ie7Y= -----END CERTIFICATE-----Generated at Wed May 13 07:33:50 2026 by rpki-client