$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa File: 7bd42a94-3977-377c-a625-eefac05f2f40.roa (raw, json) Hash identifier: 0o+AZ9wYaeUVFPETz6Vt41l47CplVIux25qklv3zU9g= Subject key identifier: 79:76:41:86:71:C6:FD:F5:F2:D9:E2:D8:CA:6F:36:61:46:B3:27:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01A3892916F5DA8565480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396547 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1a:38:92:91:6f:5d:a8:56:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=67d83250-93a2-467e-8af0-1e51ba584ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:b5:ce:63:db:02:ad:43:d7:6c:6b:44:9a: 97:3d:38:08:fd:58:7d:fc:cb:ab:2e:27:58:6b:fc: a3:66:4d:3d:2a:75:b4:53:a3:ec:d6:8d:bc:7c:71: d6:dc:7a:f1:00:77:29:23:26:22:25:4a:58:0f:48: b4:2f:65:24:91:c3:90:a8:45:90:0e:2e:16:33:27: 45:d4:55:66:20:b7:18:00:9a:03:fa:8e:f3:a1:2e: 28:f1:5a:83:24:f3:88:58:af:e9:7d:ea:33:5e:85: 52:03:61:0e:d4:43:b0:4d:40:de:5d:d2:9c:d1:ef: c1:cf:93:b4:dc:ea:3d:bb:92:41:7f:98:93:d3:f0: b1:90:b7:02:de:e5:24:4c:d1:74:98:80:d2:5b:ab: 18:0f:cd:40:4f:d4:61:7e:41:ab:5d:48:b4:9c:71: 9c:8f:f4:a5:cd:96:28:aa:f3:d9:80:ac:bc:9f:89: ec:96:a7:ba:69:39:4d:a2:e9:d1:ca:e7:74:0b:78: bc:aa:e4:16:65:33:3b:0a:e3:0b:27:34:51:63:d8: c0:a7:d2:6c:75:3b:05:47:9b:92:3d:61:bf:63:0d: 00:7a:34:9f:7e:2e:9b:7a:a9:48:a9:06:ca:d9:32: 5e:46:c7:3d:45:7b:c6:6d:6c:9d:1c:12:cb:da:49: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:41:86:71:C6:FD:F5:F2:D9:E2:D8:CA:6F:36:61:46:B3:27:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:46:c9:4b:64:eb:e9:a1:63:1e:f3:c4:be:03:ff:93:f1:7a: 10:2d:33:6b:47:d9:32:ea:c3:4c:d0:27:f2:1b:f4:ba:97:0e: 94:a4:a4:e8:75:c9:a9:81:91:9f:c6:9f:d6:f8:70:1e:55:0e: 62:39:5e:02:bd:cc:cf:d6:e8:b2:25:00:10:6d:28:2e:f5:60: 6e:bf:01:9f:95:04:2e:78:fa:d0:f2:49:22:ee:fd:48:ed:07: 23:bb:f3:b3:a5:01:e4:91:22:ec:e1:65:2a:27:3f:df:c2:56: 45:98:ea:31:a5:d9:14:48:00:e4:44:b1:88:d5:26:b5:c3:dd: 33:d7:76:bc:08:6e:d1:dc:28:71:df:39:60:39:98:4d:fe:87: a2:d6:0d:7c:c9:51:b8:05:81:60:5d:18:ae:17:75:8a:aa:a4: 77:02:3c:7b:f9:77:90:8a:1b:2e:2d:3b:5d:c5:12:9e:fb:43: ae:9d:87:ae:f4:fc:29:f8:5b:90:78:10:ea:50:e5:0b:c3:11: 72:15:42:6a:68:3a:90:77:69:d7:77:ab:0a:d8:1d:2f:ba:44: a0:e2:b0:de:99:a6:8f:4f:0e:ab:1b:b3:3a:c8:36:4a:d2:da: b8:53:3d:92:89:cf:8f:dd:77:68:fe:20:d3:ee:96:17:fd:6c: 82:27:2a:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBo4kpFvXahWVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NjdkODMyNTAtOTNhMi00NjdlLThhZjAtMWU1MWJhNTg0ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIy1zmPbAq1D12xrRJqXPTgI/Vh9/MurLidY a/yjZk09KnW0U6Ps1o28fHHW3HrxAHcpIyYiJUpYD0i0L2UkkcOQqEWQDi4WMydF 1FVmILcYAJoD+o7zoS4o8VqDJPOIWK/pfeozXoVSA2EO1EOwTUDeXdKc0e/Bz5O0 3Oo9u5JBf5iT0/CxkLcC3uUkTNF0mIDSW6sYD81AT9RhfkGrXUi0nHGcj/SlzZYo qvPZgKy8n4nslqe6aTlNounRyud0C3i8quQWZTM7CuMLJzRRY9jAp9JsdTsFR5uS PWG/Yw0AejSffi6beqlIqQbK2TJeRsc9RXvGbWydHBLL2kl8QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHl2QYZxxv318tni2MpvNmFGsyfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JkNDJhOTQtMzk3Ny0z NzdjLWE2MjUtZWVmYWMwNWYyZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJGyUtk6+mhYx7zxL4D/5PxehAtM2tH2TLqw0zQJ/Ib9LqXDpSk pOh1yamBkZ/Gn9b4cB5VDmI5XgK9zM/W6LIlABBtKC71YG6/AZ+VBC54+tDySSLu /UjtByO787OlAeSRIuzhZSonP9/CVkWY6jGl2RRIAOREsYjVJrXD3TPXdrwIbtHc KHHfOWA5mE3+h6LWDXzJUbgFgWBdGK4XdYqqpHcCPHv5d5CKGy4tO13FEp77Q66d h670/Cn4W5B4EOpQ5QvDEXIVQmpoOpB3add3qwrYHS+6RKDisN6Zpo9PDqsbszrI NkrS2rhTPZKJz4/dd2j+INPulhf9bIInKvY= -----END CERTIFICATE-----Generated at Wed May 13 03:53:33 2026 by rpki-client