$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa File: 8e437137-ec80-38e3-a86e-89ab811d658e.roa (raw, json) Hash identifier: c1mtiYCOo6prSl5e+cTgnxrqCbWZvgK6sQ0Zz3vgZvw= Subject key identifier: 3D:9F:E1:25:C7:FC:4A:50:9C:06:39:E1:21:4C:BE:F1:33:AF:48:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D8AC54BCB2C7F7E18B1347880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 2620:74:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4b:cb:2c:7f:7e:18:b1:34:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=17dc7a49-e32f-4977-88b6-dfb69804a44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:98:db:27:95:e9:60:20:2a:5e:25:16:77: 2a:5e:e3:1a:43:59:f6:5c:80:0c:31:42:87:25:a9: 2b:d7:64:1a:d4:a0:96:01:9e:0a:cf:1c:9c:9d:89: fa:71:2f:b3:36:0d:00:cb:34:52:e8:db:29:35:ad: f6:02:86:aa:25:24:71:7b:2f:dc:f9:61:19:ca:5e: fa:ea:b6:52:a7:d5:52:af:46:a3:8b:23:54:bd:3b: c1:be:90:4d:53:63:11:40:76:0e:12:d7:31:8e:35: 6e:47:15:35:9a:81:43:b0:fd:d9:42:c4:92:51:f3: 5e:5c:82:b5:c5:85:22:81:d7:4e:bd:fe:6a:49:14: 7b:6d:c8:9b:07:3b:0e:fa:2a:7b:e5:4e:44:c2:9b: b4:c0:a4:38:a4:14:c7:15:ca:27:80:33:63:12:17: fc:0a:d6:a0:11:e6:81:ae:33:88:d2:93:4d:b2:94: f2:8f:f7:5e:b2:b4:b7:33:cf:af:90:cb:91:45:1f: 97:df:df:83:8d:ef:ef:b2:23:6f:7b:16:a9:20:98: 07:0b:1c:17:00:ab:60:5b:c3:c2:69:13:50:66:d1: 3f:e8:46:0a:15:d5:98:89:7b:41:f3:65:0c:45:80: aa:07:5c:cc:76:eb:7b:33:a2:99:a4:31:91:b5:47: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:E1:25:C7:FC:4A:50:9C:06:39:E1:21:4C:BE:F1:33:AF:48:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8d:98:06:78:45:c9:01:5d:2b:c3:93:ce:7d:57:f6:cd:8c: 72:be:bf:91:cb:36:1a:7c:28:bd:55:6b:4a:23:d5:ab:fa:9f: 10:4a:6e:3c:f9:aa:40:19:6e:5a:90:27:82:29:c9:4d:59:72: d0:a2:69:31:fb:a0:15:24:31:e5:e7:66:a9:2b:a7:04:29:de: e2:17:94:b5:51:c4:57:eb:17:c9:37:1d:16:b4:7a:32:f4:1c: 6c:2a:ed:86:6c:dc:f5:4a:45:f6:68:b8:a2:e0:b5:da:cb:93: 08:16:a5:8e:65:83:1a:6f:b5:59:41:f0:60:50:1e:b3:a8:f7: bd:b4:70:60:22:25:8e:ae:c8:86:62:3e:26:49:b3:a9:a6:d6: 31:c9:a9:21:06:ea:de:d6:1d:ee:f7:2a:d0:b3:3c:72:d3:36: 0e:29:24:8b:ef:42:fc:f3:5e:7f:84:16:65:11:80:67:50:e6: 16:92:15:1b:d9:60:44:58:b6:af:32:94:1c:97:38:40:ce:5c: 20:ed:d7:3c:0a:d8:93:9d:50:cb:bf:a9:f0:78:00:69:9d:05: b5:2e:fa:38:87:3c:f9:50:8e:32:92:fa:41:2b:6c:39:8c:5e: 5f:20:c4:63:9b:4a:4a:0c:13:2e:a4:23:14:91:2d:92:0c:e6: 47:fb:19:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2KxUvLLH9+GLE0eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MTdkYzdhNDktZTMyZi00OTc3LTg4YjYtZGZiNjk4MDRhNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSSY2yeV6WAgKl4lFncqXuMaQ1n2XIAMMUKH Jakr12Qa1KCWAZ4KzxycnYn6cS+zNg0AyzRS6NspNa32AoaqJSRxey/c+WEZyl76 6rZSp9VSr0ajiyNUvTvBvpBNU2MRQHYOEtcxjjVuRxU1moFDsP3ZQsSSUfNeXIK1 xYUigddOvf5qSRR7bcibBzsO+ip75U5Ewpu0wKQ4pBTHFcongDNjEhf8CtagEeaB rjOI0pNNspTyj/desrS3M8+vkMuRRR+X39+Dje/vsiNvexapIJgHCxwXAKtgW8PC aRNQZtE/6EYKFdWYiXtB82UMRYCqB1zMdut7M6KZpDGRtUdnHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2f4SXH/EpQnAY54SFMvvEzr0jcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzcxMzctZWM4MC0z OGUzLWE4NmUtODlhYjgxMWQ2NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqNmAZ4RckBXSvDk859V/bNjHK+v5HLNhp8KL1Va0oj1av6nxBK bjz5qkAZblqQJ4IpyU1ZctCiaTH7oBUkMeXnZqkrpwQp3uIXlLVRxFfrF8k3HRa0 ejL0HGwq7YZs3PVKRfZouKLgtdrLkwgWpY5lgxpvtVlB8GBQHrOo9720cGAiJY6u yIZiPiZJs6mm1jHJqSEG6t7WHe73KtCzPHLTNg4pJIvvQvzzXn+EFmURgGdQ5haS FRvZYERYtq8ylByXOEDOXCDt1zwK2JOdUMu/qfB4AGmdBbUu+jiHPPlQjjKS+kEr bDmMXl8gxGObSkoMEy6kIxSRLZIM5kf7GYo= -----END CERTIFICATE-----Generated at Wed May 13 05:54:25 2026 by rpki-client