$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa File: 814bd802-3f18-3aa8-9586-1e59fb89a268.roa (raw, json) Hash identifier: hbPEBM8Qbaflxdr6BTau2EiqCkMdPlBna2aJVr7gSag= Subject key identifier: 34:00:23:80:BC:50:EF:09:33:50:F1:18:BC:30:3C:82:73:3E:DF:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFFE1F24197C02B1B0400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36620 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:ff:e1:f2:41:97:c0:2b:1b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=a0273fd2-8fc6-4826-a028-5e2848d79b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:08:5d:83:08:d3:35:91:ef:62:d7:74:2e: e9:f0:04:3c:b1:51:af:44:85:e4:30:9e:bb:55:67: 79:d2:b6:76:e0:01:40:88:82:80:0c:38:5f:48:0a: 2d:9f:13:3e:a2:6c:1c:31:0c:84:ab:1e:f8:2c:48: c0:02:6e:7e:ed:b2:d8:fc:04:f2:ae:9c:86:62:b2: 83:a8:7a:60:2b:6c:39:4c:74:1c:25:5b:5c:1c:a3: de:d4:9a:a8:f1:18:ee:ce:be:63:67:cb:62:d3:aa: 5e:92:b3:74:c6:4e:0a:c6:9a:54:08:8e:06:b8:85: 3f:0e:5b:8e:f3:14:5c:0e:cf:a0:19:04:46:26:68: 49:89:13:38:db:0f:38:93:61:90:b9:33:5c:42:7f: 1b:dd:9f:93:b3:bc:be:ce:aa:b8:f4:6d:5c:72:1d: 17:ee:a0:f6:d6:92:6e:c9:5a:e2:d8:b8:2d:95:61: 1b:3b:8a:63:65:a1:21:32:3e:12:c0:87:22:04:65: e9:c8:97:c6:a2:6d:7a:ca:7c:c9:15:0a:f7:3c:ea: cf:51:80:4b:94:c1:8a:a9:ae:58:62:9a:5f:e2:cf: 08:ed:e3:2a:bc:0b:b9:a2:2a:73:73:78:e4:eb:57: b9:4e:43:68:09:95:82:bb:82:09:c0:f2:71:f6:95: 4c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:23:80:BC:50:EF:09:33:50:F1:18:BC:30:3C:82:73:3E:DF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c3:ac:00:26:a6:d0:79:60:05:c6:72:dc:ac:26:bf:be:49: e9:b7:e9:a6:94:7c:82:96:d1:fb:95:c0:7b:83:34:61:44:9a: 1d:b2:3a:ce:6c:4f:d8:01:2d:5b:e3:23:4f:37:8e:e5:84:00: 13:43:aa:db:e9:07:81:eb:ab:6c:46:c9:b6:82:9c:e5:97:02: b9:3c:07:ed:a5:d9:73:9d:be:27:d7:6f:17:1d:1c:70:ca:21: 21:bc:50:e9:b9:a8:03:71:a8:26:1e:3d:5c:06:16:28:9b:27: 2c:04:cd:bd:ac:f5:e5:27:a7:18:d7:d3:e9:4d:1d:00:47:a0: 40:a5:d3:7c:2c:6d:dd:8b:54:2d:6e:ec:d7:f3:52:bb:75:65: fd:80:d3:8c:a0:e6:8e:b9:02:74:71:12:09:26:03:91:75:21: bc:bc:0d:d6:1e:0e:2b:d8:bf:e2:de:89:cd:d3:92:a4:ba:3f: 86:a6:cc:a5:88:07:68:c8:db:d5:8c:d5:cb:ab:23:6d:a4:f9: 0e:83:8f:70:31:d9:9c:fd:9c:71:a2:dc:fd:ed:9d:2e:71:79: ce:7f:92:6b:1e:e6:a2:91:81:b1:ff:52:ec:eb:ea:f2:d9:50: 5b:25:0c:26:8e:3a:53:2e:61:07:05:16:ac:a0:df:5c:f2:97: cf:6d:ed:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv//h8kGXwCsbBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YTAyNzNmZDItOGZjNi00ODI2LWEwMjgtNWUyODQ4ZDc5YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEIXYMI0zWR72LXdC7p8AQ8sVGvRIXkMJ67 VWd50rZ24AFAiIKADDhfSAotnxM+omwcMQyEqx74LEjAAm5+7bLY/ATyrpyGYrKD qHpgK2w5THQcJVtcHKPe1Jqo8Rjuzr5jZ8ti06pekrN0xk4KxppUCI4GuIU/DluO 8xRcDs+gGQRGJmhJiRM42w84k2GQuTNcQn8b3Z+Ts7y+zqq49G1cch0X7qD21pJu yVri2LgtlWEbO4pjZaEhMj4SwIciBGXpyJfGom16ynzJFQr3POrPUYBLlMGKqa5Y Yppf4s8I7eMqvAu5oipzc3jk61e5TkNoCZWCu4IJwPJx9pVMVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQAI4C8UO8JM1DxGLwwPIJzPt/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODE0YmQ4MDItM2YxOC0z YWE4LTk1ODYtMWU1OWZiODlhMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXDrAAmptB5YAXGctysJr++Sem36aaUfIKW0fuVwHuDNGFEmh2y Os5sT9gBLVvjI083juWEABNDqtvpB4Hrq2xGybaCnOWXArk8B+2l2XOdvifXbxcd HHDKISG8UOm5qANxqCYePVwGFiibJywEzb2s9eUnpxjX0+lNHQBHoECl03wsbd2L VC1u7NfzUrt1Zf2A04yg5o65AnRxEgkmA5F1Iby8DdYeDivYv+Leic3TkqS6P4am zKWIB2jI29WM1curI22k+Q6Dj3Ax2Zz9nHGi3P3tnS5xec5/kmse5qKRgbH/Uuzr 6vLZUFslDCaOOlMuYQcFFqyg31zyl89t7Sc= -----END CERTIFICATE-----Generated at Wed May 13 05:01:26 2026 by rpki-client