$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa File: 89e103cc-8b9a-3365-af39-2f05d98c2b26.roa (raw, json) Hash identifier: DGVSHVKtXoa9IkaSJuSU6V3yQRdNFiFUrJJ2VY3Nsqc= Subject key identifier: 4C:5A:90:97:E9:BE:15:22:98:6B:EA:30:94:C8:8B:3A:75:9B:75:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFCA0B80523C13996A3C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 10515 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fc:a0:b8:05:23:c1:39:96:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9abf172a-ae8f-4598-adf0-0f006593be86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:1b:21:b3:f8:be:40:47:90:4f:fb:ea:71: 5d:ed:59:43:fd:22:c0:30:dd:55:34:9d:0a:c8:ff: 67:89:f8:0c:09:20:68:4e:23:29:1b:66:36:4c:93: c7:34:35:26:db:cf:fb:9b:59:c5:c4:59:e1:23:bd: ee:98:98:e6:40:64:67:15:c6:64:a4:1e:83:6a:98: 6f:ff:3b:44:7f:5f:26:03:ef:d1:b5:4a:dd:f4:eb: 2b:36:20:f6:81:a5:af:3b:47:0e:8e:47:91:18:99: e7:9d:eb:0f:3a:6b:23:e7:75:7e:08:b5:aa:a7:80: c3:6f:d7:a7:d0:eb:63:99:01:1b:e0:e0:10:ff:ee: be:39:92:14:29:41:13:1c:db:5a:61:a5:53:16:59: 03:13:e3:3b:cc:bd:42:98:ce:34:19:b1:f5:76:f9: a8:a7:92:85:30:71:c4:88:6a:8e:b0:10:84:8e:65: 63:52:be:1a:9c:44:a0:ad:f0:5f:e0:af:83:86:f9: 2f:f4:d5:f3:71:ce:9e:4b:07:b8:88:f5:65:0e:17: ab:e8:f5:bf:b7:ca:e5:ce:3f:b2:7f:12:ed:ac:e2: 1b:e2:a7:73:11:e1:a8:e1:fe:a2:b7:30:1d:41:75: 1e:24:d1:b2:97:84:19:08:4b:52:b2:6d:c5:d5:ea: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:90:97:E9:BE:15:22:98:6B:EA:30:94:C8:8B:3A:75:9B:75:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89e103cc-8b9a-3365-af39-2f05d98c2b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:79:ac:46:0c:23:05:a9:fa:0e:7b:9e:3c:b6:18:98:91:f1: 98:d7:45:d3:36:e4:a5:80:8d:d2:9e:8f:e1:17:db:11:22:f1: 17:12:e0:f8:c4:c3:3a:59:05:f5:5a:ca:31:15:f3:b6:f6:3d: 3b:55:00:71:39:85:8a:4f:bd:ac:d6:a6:a8:a8:d5:4c:52:68: 29:28:70:32:15:7e:e2:9e:4e:26:ee:4a:a4:c9:3e:58:58:08: 53:89:8c:8b:07:4f:05:ff:75:42:32:ec:a1:e9:81:56:bf:90: f9:eb:bd:cc:c4:c9:e4:01:66:9a:52:8c:2a:d4:1c:21:f1:78: 35:e8:6f:e2:24:72:a9:5f:ac:e7:da:e4:04:12:2e:7b:0d:49: 0f:29:dd:3a:80:1c:11:17:16:03:91:5b:8b:b0:dc:63:0f:61: 0c:54:e0:22:ec:85:fc:42:59:dc:2e:d0:6c:07:22:b4:8a:0f: ec:00:43:ad:8e:84:af:c5:26:0a:5f:0b:3d:d3:88:c0:8a:9f: 50:3d:11:4e:bf:33:f1:bf:c5:05:dd:f6:f9:0a:ef:15:54:1a: 93:54:30:17:d7:b5:af:92:26:bb:07:ce:51:4a:06:0d:e7:85: f4:89:b4:5d:55:f9:2e:fe:0b:d4:d5:e7:6a:de:f7:6e:1b:47: 2b:40:19:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/yguAUjwTmWo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWFiZjE3MmEtYWU4Zi00NTk4LWFkZjAtMGYwMDY1OTNiZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAcbIbP4vkBHkE/76nFd7VlD/SLAMN1VNJ0K yP9nifgMCSBoTiMpG2Y2TJPHNDUm28/7m1nFxFnhI73umJjmQGRnFcZkpB6Daphv /ztEf18mA+/RtUrd9OsrNiD2gaWvO0cOjkeRGJnnnesPOmsj53V+CLWqp4DDb9en 0OtjmQEb4OAQ/+6+OZIUKUETHNtaYaVTFlkDE+M7zL1CmM40GbH1dvmop5KFMHHE iGqOsBCEjmVjUr4anESgrfBf4K+Dhvkv9NXzcc6eSwe4iPVlDher6PW/t8rlzj+y fxLtrOIb4qdzEeGo4f6itzAdQXUeJNGyl4QZCEtSsm3F1eq78wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExakJfpvhUimGvqMJTIizp1m3W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODllMTAzY2MtOGI5YS0z MzY1LWFmMzktMmYwNWQ5OGMyYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEh5rEYMIwWp+g57njy2GJiR8ZjXRdM25KWAjdKej+EX2xEi8RcS 4PjEwzpZBfVayjEV87b2PTtVAHE5hYpPvazWpqio1UxSaCkocDIVfuKeTibuSqTJ PlhYCFOJjIsHTwX/dUIy7KHpgVa/kPnrvczEyeQBZppSjCrUHCHxeDXob+Ikcqlf rOfa5AQSLnsNSQ8p3TqAHBEXFgORW4uw3GMPYQxU4CLshfxCWdwu0GwHIrSKD+wA Q62OhK/FJgpfCz3TiMCKn1A9EU6/M/G/xQXd9vkK7xVUGpNUMBfXta+SJrsHzlFK Bg3nhfSJtF1V+S7+C9TV52re924bRytAGZ0= -----END CERTIFICATE-----Generated at Wed May 13 04:13:58 2026 by rpki-client