$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa File: 7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa (raw, json) Hash identifier: QbtHrpOQ+4Iw5dO48DtToRx83EbQzXAldISrBz+HhTY= Subject key identifier: 8F:A2:A6:6D:35:FA:10:EE:7B:C9:1A:6C:C8:99:78:B7:3E:77:E2:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00B90B3359FFD446EC4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396584 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0b:90:b3:35:9f:fd:44:6e:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=157d77b0-943e-435d-b3f4-35b48d723542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:43:f6:c4:3a:4e:3c:9d:c5:45:e2:b8:fa: 98:e1:c4:9f:05:26:38:8a:8d:4f:1f:60:38:a5:96: 25:46:1a:06:7a:4d:81:01:4f:b7:5a:2f:80:f7:92: 07:a4:31:27:a7:9c:88:5e:ad:3e:60:6a:25:39:75: a3:9f:df:3f:d6:5d:09:3d:90:31:5d:b5:8a:8a:c0: 79:9d:79:8b:04:3d:59:30:bf:b6:65:94:76:b8:a0: 65:3f:df:10:3f:8a:49:b4:15:0e:15:b2:b7:9a:5c: 2d:71:d7:c4:99:cb:13:38:94:65:d8:43:55:67:b1: b4:15:70:5b:63:f4:e2:d7:93:75:2e:f7:38:10:9a: 82:68:a4:fb:f7:a8:d4:9c:7e:98:76:97:48:9f:12: fe:4f:c3:04:c4:5a:0e:30:2c:14:4d:a1:1e:98:a7: 62:b2:b7:ad:77:e4:0c:24:2b:b0:86:3e:49:0a:ce: c2:36:1c:c0:91:64:38:1f:de:e1:43:9f:79:6d:df: 03:2a:a3:dc:35:9b:a6:76:50:1d:b4:d9:3a:d6:d4: 61:21:4d:8e:1c:7e:4a:f9:4b:c4:f6:7f:12:cf:8f: cc:94:7d:d5:17:0d:2b:cb:a5:af:58:0f:3a:40:3f: 9d:be:e1:7d:89:aa:9a:8a:77:3f:a4:69:14:43:bb: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:A6:6D:35:FA:10:EE:7B:C9:1A:6C:C8:99:78:B7:3E:77:E2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:78:a1:5c:8f:89:31:1c:9b:78:49:46:66:be:3e:4d:a1:06: b3:d5:d2:ba:c6:fb:40:95:f8:d9:c1:54:19:75:dd:26:60:d2: 93:5b:51:bb:5c:6f:18:d3:ea:79:74:3e:be:f0:72:56:8d:76: e4:17:a4:b7:60:c9:ef:d1:9e:e7:05:2c:27:0a:a5:c2:32:00: dd:1a:b9:a4:6d:06:33:b9:d9:74:75:92:34:53:f3:cf:a1:d4: 6a:2f:8f:f1:4f:cd:97:f2:04:80:bb:ba:fe:e8:43:dc:1f:06: 5d:ad:fd:83:f5:ff:48:51:29:8d:36:db:0d:fe:35:7e:7b:1d: 9b:ce:2a:53:4a:ee:cc:e5:53:c2:bb:a2:a4:f6:35:da:7a:47: 24:62:36:1d:09:cc:7e:3b:43:11:7a:b4:ea:87:69:71:87:b3: 5d:a8:f4:62:a9:96:67:04:a2:02:ac:32:16:52:ce:b7:dc:d2: 34:ad:4a:32:59:cc:7b:d1:0d:5b:e4:68:63:00:49:92:b7:95: e2:38:8c:69:c8:5d:3e:0b:22:e7:0d:b9:f4:a6:c2:13:a4:49: 5c:b3:4a:ad:65:a6:f6:1e:bf:30:73:0f:a8:76:50:40:a8:a0: 8f:87:f8:2a:2f:90:2c:71:9a:86:80:fc:83:5d:34:de:61:fe: 7d:bf:0b:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAuQszWf/URuxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MTU3ZDc3YjAtOTQzZS00MzVkLWIzZjQtMzViNDhkNzIzNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP5D9sQ6TjydxUXiuPqY4cSfBSY4io1PH2A4 pZYlRhoGek2BAU+3Wi+A95IHpDEnp5yIXq0+YGolOXWjn98/1l0JPZAxXbWKisB5 nXmLBD1ZML+2ZZR2uKBlP98QP4pJtBUOFbK3mlwtcdfEmcsTOJRl2ENVZ7G0FXBb Y/Ti15N1Lvc4EJqCaKT796jUnH6YdpdInxL+T8MExFoOMCwUTaEemKdisretd+QM JCuwhj5JCs7CNhzAkWQ4H97hQ595bd8DKqPcNZumdlAdtNk61tRhIU2OHH5K+UvE 9n8Sz4/MlH3VFw0ry6WvWA86QD+dvuF9iaqainc/pGkUQ7vz6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+ipm01+hDue8kabMiZeLc+d+LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2E0ODAyY2EtYzIzNy0z NWI5LWE1MDEtNmZlOGY5ZDRhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIR4oVyPiTEcm3hJRma+Pk2hBrPV0rrG+0CV+NnBVBl13SZg0pNb UbtcbxjT6nl0Pr7wclaNduQXpLdgye/RnucFLCcKpcIyAN0auaRtBjO52XR1kjRT 88+h1Govj/FPzZfyBIC7uv7oQ9wfBl2t/YP1/0hRKY022w3+NX57HZvOKlNK7szl U8K7oqT2Ndp6RyRiNh0JzH47QxF6tOqHaXGHs12o9GKplmcEogKsMhZSzrfc0jSt SjJZzHvRDVvkaGMASZK3leI4jGnIXT4LIucNufSmwhOkSVyzSq1lpvYevzBzD6h2 UECooI+H+CovkCxxmoaA/INdNN5h/n2/C1s= -----END CERTIFICATE-----Generated at Wed May 13 05:34:35 2026 by rpki-client