$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8506391d-d107-3345-a4bd-487ef1c06957.roa File: 8506391d-d107-3345-a4bd-487ef1c06957.roa (raw, json) Hash identifier: fu929PuitXvZYZcDvuQ7P4D94LPr0s8Re3dE0LMdb74= Subject key identifier: 21:A3:0D:B5:22:D0:55:C5:E0:0A:BE:FB:DF:39:A6:7E:F9:21:75:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFF4CB7F073A6F958DDE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8506391d-d107-3345-a4bd-487ef1c06957.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396546 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:f4:cb:7f:07:3a:6f:95:8d:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=c0ede9f2-a4c9-42a8-96c0-2473cfdefa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:a2:12:11:73:be:8f:c3:c7:4f:06:cf:1e: 43:f7:e3:fc:23:19:6d:33:3c:ca:4c:52:ca:ce:d4: f8:a2:88:6d:51:38:df:09:57:5f:0e:e6:b3:be:58: 2e:e3:dd:1e:e3:a0:88:5d:f5:00:bd:64:27:4f:f7: e6:d0:f6:8f:95:86:7a:02:75:bf:e1:cd:f8:50:c0: d9:a2:23:1d:bc:a9:a3:a7:88:1c:94:33:59:53:0f: 35:ff:d7:bc:7a:af:31:a3:6f:c9:04:3f:1d:c5:d8: 47:7c:41:c7:ea:c5:5c:88:42:13:b2:d5:b5:70:bc: 63:f0:ac:c0:84:fd:24:89:b2:8c:93:0f:46:78:d6: 49:bd:5b:ae:d5:6d:41:ca:30:70:0b:44:20:88:93: 35:07:d2:b3:69:a0:b2:2a:2c:f4:84:6b:eb:65:0a: 53:ef:ef:f1:7d:31:81:0c:20:86:16:70:32:61:2d: 40:84:89:a4:f3:fa:c1:6d:b7:19:ea:21:07:c2:28: 17:95:e9:e6:40:d2:9b:31:b9:d5:77:41:db:a8:3f: 98:be:34:f5:c1:86:47:66:2d:c5:16:70:ce:d0:c0: 6c:1d:a1:27:07:6a:85:18:06:1a:e0:1c:e5:a8:7b: f1:02:13:74:e3:26:59:a6:39:15:6f:91:95:16:d3: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:0D:B5:22:D0:55:C5:E0:0A:BE:FB:DF:39:A6:7E:F9:21:75:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8506391d-d107-3345-a4bd-487ef1c06957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:77:d2:c1:1a:f3:61:2a:89:65:90:c1:41:79:9e:77:15:95: 89:fa:48:0f:13:a0:24:7a:cb:0c:a5:e4:da:47:fb:83:cf:85: 93:10:66:2b:6d:0a:c2:e9:27:21:3b:e2:73:27:31:6d:21:73: 4e:e7:c9:97:79:a1:03:d8:38:b9:a5:99:9f:1b:60:b1:2d:64: 93:66:b3:0d:49:f4:24:89:24:ca:a6:24:52:3e:d5:2d:5b:ae: f4:23:ff:ca:c2:d4:83:1a:f8:61:84:ae:87:53:6c:d5:9c:3d: 22:59:cc:76:ae:d2:f8:ac:17:e8:1f:97:fe:54:f5:f9:f4:4d: a5:c7:ba:28:02:4e:b5:bf:75:3e:25:c8:cc:20:b3:ad:1e:b7: e8:c8:70:a2:66:ab:b3:fd:15:6e:6b:93:50:f0:ee:d2:e2:a8: 96:77:5c:0b:ba:15:03:b3:73:67:58:0d:f0:77:dd:ba:1f:8d: ee:df:ce:58:3b:f1:9f:91:4d:2f:80:37:0f:f4:7b:da:b8:14: 29:00:ae:ed:92:59:e0:3e:82:76:ca:16:c3:a5:c7:13:3d:48: 46:c5:f9:18:c7:20:21:d5:48:45:ac:1e:64:88:a1:d5:24:45: 1d:c3:85:50:b3:3b:28:79:44:a3:91:9a:ec:6a:4f:d8:73:43: 9e:4b:ce:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/TLfwc6b5WN3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YzBlZGU5ZjItYTRjOS00MmE4LTk2YzAtMjQ3M2NmZGVmYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC+iEhFzvo/Dx08Gzx5D9+P8IxltMzzKTFLK ztT4oohtUTjfCVdfDuazvlgu490e46CIXfUAvWQnT/fm0PaPlYZ6AnW/4c34UMDZ oiMdvKmjp4gclDNZUw81/9e8eq8xo2/JBD8dxdhHfEHH6sVciEITstW1cLxj8KzA hP0kibKMkw9GeNZJvVuu1W1ByjBwC0QgiJM1B9KzaaCyKiz0hGvrZQpT7+/xfTGB DCCGFnAyYS1AhImk8/rBbbcZ6iEHwigXlenmQNKbMbnVd0HbqD+YvjT1wYZHZi3F FnDO0MBsHaEnB2qFGAYa4BzlqHvxAhN04yZZpjkVb5GVFtOpZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGjDbUi0FXF4Aq++985pn75IXWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODUwNjM5MWQtZDEwNy0z MzQ1LWE0YmQtNDg3ZWYxYzA2OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB930sEa82EqiWWQwUF5nncVlYn6SA8ToCR6ywyl5NpH+4PPhZMQ ZittCsLpJyE74nMnMW0hc07nyZd5oQPYOLmlmZ8bYLEtZJNmsw1J9CSJJMqmJFI+ 1S1brvQj/8rC1IMa+GGErodTbNWcPSJZzHau0visF+gfl/5U9fn0TaXHuigCTrW/ dT4lyMwgs60et+jIcKJmq7P9FW5rk1Dw7tLiqJZ3XAu6FQOzc2dYDfB33bofje7f zlg78Z+RTS+ANw/0e9q4FCkAru2SWeA+gnbKFsOlxxM9SEbF+RjHICHVSEWsHmSI odUkRR3DhVCzOyh5RKORmuxqT9hzQ55LzrA= -----END CERTIFICATE-----Generated at Wed May 13 08:41:37 2026 by rpki-client