$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa File: 58c7d010-56ad-3b1e-8476-fb1b0e916912.roa (raw, json) Hash identifier: kTiaH4I4OjTioO/JWvhLBbzPSzlqoAYu2v+xPbUBq24= Subject key identifier: FB:09:CD:18:F3:6F:05:DD:33:F3:82:66:FA:B1:47:17:34:F9:B4:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D95F00D8C31B94F1025889600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 2620:74:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:8c:31:b9:4f:10:25:88:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=6175c616-95c9-446d-9651-f56d451f9a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:41:47:0a:f6:af:29:e1:8b:a8:5c:7d:42: f4:70:d8:be:d5:71:31:81:f2:eb:58:28:e3:b4:f6: 80:7d:ac:39:79:ff:e0:ae:88:8b:d9:ee:8d:62:0d: a6:3b:38:6a:5e:3e:83:69:f3:d0:a4:5a:31:03:6f: da:13:4f:a7:44:eb:34:64:0d:ef:83:f2:28:bd:3c: 0e:4d:d8:8d:4e:1b:af:86:04:3e:e0:5d:58:7c:40: c6:f7:11:b9:cf:eb:ea:5d:f8:90:5d:65:c8:f4:ad: e1:af:ac:37:61:71:f5:20:9c:e6:f5:9d:e5:a3:9a: 49:c9:94:f5:a5:7d:b6:1e:a9:5c:54:a9:41:84:67: 1c:02:4c:71:2c:d4:35:81:6b:9c:2b:34:97:61:6c: eb:f5:6a:cc:4a:7c:ec:ac:c0:fe:43:86:46:68:cf: f5:d2:dc:b8:3b:b5:dc:f8:61:92:12:00:18:3c:2c: b4:b8:fd:5c:f3:b9:69:17:ef:e5:ca:b4:75:dc:ae: 6c:c1:e5:c3:7a:55:76:ec:da:0f:13:a1:53:9f:93: 5e:a0:bb:65:88:2a:2b:47:74:d5:10:16:b2:9e:d1: 21:9c:43:23:19:89:90:b5:5c:89:2b:7c:05:02:94: ff:52:a2:2b:bb:f0:f4:a7:84:a3:fb:f6:08:30:7e: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:09:CD:18:F3:6F:05:DD:33:F3:82:66:FA:B1:47:17:34:F9:B4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58c7d010-56ad-3b1e-8476-fb1b0e916912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8d:f8:f6:06:70:e7:c7:f0:59:64:e0:14:f7:cf:3a:da:11: 75:8c:51:bc:cf:b6:7c:85:ef:04:f2:c7:52:d4:74:18:d8:02: 13:f1:87:69:8c:db:a8:51:c7:e3:7a:2b:df:cd:d1:c6:28:ca: 30:5e:29:af:2d:9a:19:a4:ef:a2:24:38:65:27:60:86:8b:58: 54:aa:f0:ab:c7:7d:b2:8f:4d:b0:c1:77:6f:d2:1b:cf:f7:70: 85:66:b6:92:5d:e4:d4:a2:2a:65:da:aa:61:8a:e2:93:8d:f1: ce:62:a7:13:1d:ea:7e:59:c5:f2:bc:dc:bf:d1:ec:29:1f:ca: 1b:f3:0e:e6:df:ba:5d:62:d0:80:2e:08:3f:b9:81:50:93:c2: 56:dc:f4:f1:b8:83:d7:9c:d3:7d:86:b9:8e:37:9f:7f:5b:ce: 15:55:0d:d7:53:4e:a6:9d:0a:ca:ec:2b:2c:96:01:9e:b3:7b: 22:a1:75:44:6e:fe:b4:e2:a9:fa:2d:2d:8b:11:19:ad:27:ec: bb:7c:8c:b2:80:3a:a4:b9:03:03:f0:be:09:7c:de:76:1c:43: e9:c5:9d:0f:52:5e:0e:a5:78:31:e7:47:42:c4:1b:63:a5:b8: dc:32:fe:94:d6:92:b2:f5:b0:ab:1f:1c:a8:cd:de:a5:25:2b: 96:44:a5:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8A2MMblPECWIlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjE3NWM2MTYtOTVjOS00NDZkLTk2NTEtZjU2ZDQ1MWY5YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirtBRwr2rynhi6hcfUL0cNi+1XExgfLrWCjj tPaAfaw5ef/groiL2e6NYg2mOzhqXj6DafPQpFoxA2/aE0+nROs0ZA3vg/IovTwO TdiNThuvhgQ+4F1YfEDG9xG5z+vqXfiQXWXI9K3hr6w3YXH1IJzm9Z3lo5pJyZT1 pX22HqlcVKlBhGccAkxxLNQ1gWucKzSXYWzr9WrMSnzsrMD+Q4ZGaM/10ty4O7Xc +GGSEgAYPCy0uP1c87lpF+/lyrR13K5sweXDelV27NoPE6FTn5NeoLtliCorR3TV EBayntEhnEMjGYmQtVyJK3wFApT/UqIru/D0p4Sj+/YIMH7eNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPsJzRjzbwXdM/OCZvqxRxc0+bTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNThjN2QwMTAtNTZhZC0z YjFlLTg0NzYtZmIxYjBlOTE2OTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACiN+PYGcOfH8Flk4BT3zzraEXWMUbzPtnyF7wTyx1LUdBjYAhPx h2mM26hRx+N6K9/N0cYoyjBeKa8tmhmk76IkOGUnYIaLWFSq8KvHfbKPTbDBd2/S G8/3cIVmtpJd5NSiKmXaqmGK4pON8c5ipxMd6n5ZxfK83L/R7CkfyhvzDubful1i 0IAuCD+5gVCTwlbc9PG4g9ec032GuY43n39bzhVVDddTTqadCsrsKyyWAZ6zeyKh dURu/rTiqfotLYsRGa0n7Lt8jLKAOqS5AwPwvgl83nYcQ+nFnQ9SXg6leDHnR0LE G2OluNwy/pTWkrL1sKsfHKjN3qUlK5ZEpR8= -----END CERTIFICATE-----Generated at Wed May 13 06:41:22 2026 by rpki-client