$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/807caed3-1812-3132-ba27-dd87e6124d54.roa File: 807caed3-1812-3132-ba27-dd87e6124d54.roa (raw, json) Hash identifier: 582JK4JP6oQWNXW6ET908NtXV/uQwM0KGAHiCnvb9PQ= Subject key identifier: EA:C9:95:78:02:E8:13:F7:8E:7A:F1:7B:6C:D7:85:31:D6:34:23:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00C053FA3932E7676E580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/807caed3-1812-3132-ba27-dd87e6124d54.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36624 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0c:05:3f:a3:93:2e:76:76:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=53909b5b-5fd6-4944-b52d-86b2843e4cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:d2:41:0f:67:02:f8:a1:36:7c:ae:96:0b: 5d:3f:58:41:40:b8:95:8a:af:29:6a:2f:ec:2c:0a: ac:c4:f2:31:6a:21:dd:73:49:7f:69:e7:d9:f0:60: fc:2b:5a:10:2d:26:16:c0:55:52:92:21:16:eb:b1: 4b:1d:9f:00:47:84:2f:f6:8b:91:b8:4a:7c:c3:79: b7:4a:37:a1:1a:b9:3e:92:ab:be:7a:71:59:1b:b6: 37:41:11:5f:ac:ce:92:eb:41:dc:74:c3:74:04:23: cb:0b:95:10:5b:c3:68:f6:93:72:9d:36:b0:f5:c7: 3f:f9:dd:c3:58:f4:af:7e:a5:b0:a4:cd:5e:82:61: 51:71:16:90:a0:57:00:8a:01:17:7c:65:e6:8d:33: 9e:08:01:20:ee:00:d1:1e:05:7b:f2:9b:19:02:9b: 7c:53:9d:b0:62:16:13:a6:e5:35:99:e8:63:6c:12: a8:04:a2:ea:39:94:33:6a:af:39:c0:8e:37:4a:c7: c6:8f:da:b1:ed:c1:af:28:12:87:bb:ae:75:0c:21: 60:69:75:48:17:78:c7:2d:a2:9b:a5:a0:32:d6:d4: b7:ca:32:d1:b9:a5:1d:06:e0:99:e1:63:35:65:24: b7:43:c3:58:d9:eb:f9:88:93:53:f8:21:ac:d5:ef: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:95:78:02:E8:13:F7:8E:7A:F1:7B:6C:D7:85:31:D6:34:23:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/807caed3-1812-3132-ba27-dd87e6124d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4c:1b:2d:e2:9b:6d:0f:35:58:5e:e7:01:83:fc:a6:52:b3: 32:1f:26:30:b5:5b:ba:ad:e5:6d:53:8e:cc:cc:9e:51:6a:89: 82:f5:b6:52:7c:2d:60:bd:d6:25:d0:a1:9e:c8:11:91:ca:1c: e9:a7:ee:a7:5a:e4:37:04:8e:d0:29:53:cc:0b:00:57:f7:39: ae:3a:fe:2d:a7:bb:3e:1a:d1:14:08:df:33:39:67:0b:b0:cf: 7c:2b:a1:70:a3:74:9f:04:e6:08:f0:0d:50:20:fc:2b:f3:17: c5:aa:9e:ca:a7:ec:03:30:38:02:96:a8:3e:be:c5:ee:f3:80: d8:ee:2c:88:1d:aa:af:13:a4:bd:73:fe:e9:60:33:de:1d:ae: 0c:15:fc:7f:bb:4d:ae:fe:d1:73:c2:88:e6:22:78:88:7c:2f: 19:fb:f3:1e:d7:0d:c1:ce:79:d4:9b:b2:7f:4d:b3:23:f4:ed: 4f:9b:9e:ea:4e:66:dd:46:9e:93:65:09:0c:40:8c:cc:ee:ee: c5:1b:5e:de:74:26:5c:3e:09:55:56:81:e4:a3:8b:76:f3:6e: b4:d6:49:f8:f8:13:39:3f:86:74:53:23:88:ad:04:c8:d2:cc: 11:2e:ba:3d:67:4d:fa:a4:53:bb:69:c5:73:50:3d:57:78:9b: b4:21:84:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAwFP6OTLnZ25YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NTM5MDliNWItNWZkNi00OTQ0LWI1MmQtODZiMjg0M2U0Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7SQQ9nAvihNnyulgtdP1hBQLiViq8pai/s LAqsxPIxaiHdc0l/aefZ8GD8K1oQLSYWwFVSkiEW67FLHZ8AR4Qv9ouRuEp8w3m3 SjehGrk+kqu+enFZG7Y3QRFfrM6S60HcdMN0BCPLC5UQW8No9pNynTaw9cc/+d3D WPSvfqWwpM1egmFRcRaQoFcAigEXfGXmjTOeCAEg7gDRHgV78psZApt8U52wYhYT puU1mehjbBKoBKLqOZQzaq85wI43SsfGj9qx7cGvKBKHu651DCFgaXVIF3jHLaKb paAy1tS3yjLRuaUdBuCZ4WM1ZSS3Q8NY2ev5iJNT+CGs1e9IdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrJlXgC6BP3jnrxe2zXhTHWNCNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODA3Y2FlZDMtMTgxMi0z MTMyLWJhMjctZGQ4N2U2MTI0ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZMGy3im20PNVhe5wGD/KZSszIfJjC1W7qt5W1TjszMnlFqiYL1 tlJ8LWC91iXQoZ7IEZHKHOmn7qda5DcEjtApU8wLAFf3Oa46/i2nuz4a0RQI3zM5 Zwuwz3wroXCjdJ8E5gjwDVAg/CvzF8Wqnsqn7AMwOAKWqD6+xe7zgNjuLIgdqq8T pL1z/ulgM94drgwV/H+7Ta7+0XPCiOYieIh8Lxn78x7XDcHOedSbsn9NsyP07U+b nupOZt1GnpNlCQxAjMzu7sUbXt50Jlw+CVVWgeSji3bzbrTWSfj4Ezk/hnRTI4it BMjSzBEuuj1nTfqkU7tpxXNQPVd4m7QhhKw= -----END CERTIFICATE-----Generated at Wed May 13 07:08:35 2026 by rpki-client