$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa File: 924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json) Hash identifier: /L6PrOR1O5cNcqmKBkRp8BHAO2a3FaH22uDdTgozEJU= Subject key identifier: EE:D4:1C:39:AF:4B:11:F8:A8:93:97:59:EF:EA:8D:ED:B8:B4:BC:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D9E50237AE58D2D2B63BEC480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 2620:74:6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:23:7a:e5:8d:2d:2b:63:be:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=13e0c7e1-85c1-4476-aeba-d6be71b198fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:59:f6:2d:af:95:34:ab:27:4c:aa:ca:4a: 82:e6:cd:49:21:be:0b:90:72:e6:07:ef:2a:48:db: c3:6e:3a:5c:c7:78:d1:a0:19:ba:45:a1:de:29:1c: 17:78:a8:2c:90:7a:8b:97:45:6c:5d:04:b3:70:77: f4:ca:8a:8b:bd:c4:b3:a6:08:2a:e6:ee:13:af:e9: 37:92:b6:e8:73:43:7a:61:d0:6e:8d:ef:53:a5:fb: d7:e9:b7:c1:fb:56:40:33:bf:a6:40:33:ce:0a:ee: 2c:85:ef:f7:8c:79:39:ec:b0:4d:16:60:b5:1a:87: ac:02:5e:50:35:2c:f7:11:32:33:d2:26:25:5b:fc: 98:95:5d:fe:a4:8b:b0:8f:d6:73:a8:88:12:e8:d6: 31:06:47:ac:88:46:a6:c8:d4:ab:44:c2:53:aa:0a: c7:b2:34:57:2d:a0:47:8f:37:de:5f:9d:f6:7a:ff: cb:1d:d1:86:50:eb:29:30:ab:2a:dd:88:b6:6d:2c: ab:4d:d4:a5:c8:af:4b:be:dc:d7:26:d2:40:49:c4: 27:db:a9:06:22:eb:ac:23:d1:99:fe:a2:cc:2b:5d: 2d:8e:8b:c3:f5:f8:3e:69:a5:26:12:90:f7:98:9c: ab:84:d3:4d:ce:f5:29:6f:44:cb:32:f1:e4:35:24: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D4:1C:39:AF:4B:11:F8:A8:93:97:59:EF:EA:8D:ED:B8:B4:BC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9a:8b:b6:65:fd:ab:45:e1:7e:0a:cf:c8:e6:ce:d7:6d:83: 63:6e:a2:84:bd:5e:b9:fe:b2:0a:da:be:8c:28:20:4d:d5:c1: 52:07:1d:c4:81:6a:2f:ab:06:9b:3d:5a:45:25:78:7d:35:c7: 04:dd:2f:d8:b2:61:a0:5e:8c:fd:4a:9c:be:73:07:8d:7d:9c: 8b:25:e0:20:aa:e1:e3:a0:a8:df:f4:cf:25:bd:db:df:76:b0: bf:05:07:31:f4:b6:5a:c5:30:17:11:66:0f:2a:db:bb:20:7b: 3b:a5:14:20:29:a0:89:a6:f4:76:88:24:d3:4c:91:cf:05:b6: 53:fe:10:6e:6e:be:bf:a8:25:23:90:12:94:fa:c2:aa:8b:96: 35:d3:e8:b2:f0:1e:92:6d:2e:6d:0c:d7:af:97:2a:1a:d1:b0: e2:2a:7f:ea:d8:27:c8:8c:19:cc:74:30:86:2c:23:bd:94:2c: a0:bc:90:9f:a0:f9:ac:fe:0b:fb:30:3b:d6:bf:09:60:48:32: 4c:0f:b2:fa:87:ed:ad:38:71:e0:99:3f:ce:92:e3:41:d6:17: d7:74:94:93:7c:1b:94:1e:77:a2:30:fe:6f:5d:35:3d:d5:0c: 7f:28:a5:d5:1d:71:77:49:a9:8e:f8:d3:5d:0e:7a:69:05:bb: d3:3a:72:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUCN65Y0tK2O+xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTNlMGM3ZTEtODVjMS00NDc2LWFlYmEtZDZiZTcxYjE5OGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKxZ9i2vlTSrJ0yqykqC5s1JIb4LkHLmB+8q SNvDbjpcx3jRoBm6RaHeKRwXeKgskHqLl0VsXQSzcHf0yoqLvcSzpggq5u4Tr+k3 krboc0N6YdBuje9TpfvX6bfB+1ZAM7+mQDPOCu4she/3jHk57LBNFmC1GoesAl5Q NSz3ETIz0iYlW/yYlV3+pIuwj9ZzqIgS6NYxBkesiEamyNSrRMJTqgrHsjRXLaBH jzfeX532ev/LHdGGUOspMKsq3Yi2bSyrTdSlyK9LvtzXJtJAScQn26kGIuusI9GZ /qLMK10tjovD9fg+aaUmEpD3mJyrhNNNzvUpb0TLMvHkNSRRjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO7UHDmvSxH4qJOXWe/qje24tLxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTI0YTNlYzEtODc0Yy0z MTFlLTkyMDMtMzVkMWYxYjViOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOai7Zl/atF4X4Kz8jmztdtg2NuooS9Xrn+sgravowoIE3VwVIH HcSBai+rBps9WkUleH01xwTdL9iyYaBejP1KnL5zB419nIsl4CCq4eOgqN/0zyW9 2992sL8FBzH0tlrFMBcRZg8q27sgezulFCApoImm9HaIJNNMkc8FtlP+EG5uvr+o JSOQEpT6wqqLljXT6LLwHpJtLm0M16+XKhrRsOIqf+rYJ8iMGcx0MIYsI72ULKC8 kJ+g+az+C/swO9a/CWBIMkwPsvqH7a04ceCZP86S40HWF9d0lJN8G5Qed6Iw/m9d NT3VDH8opdUdcXdJqY74010OemkFu9M6cp8= -----END CERTIFICATE-----Generated at Wed May 13 08:21:42 2026 by rpki-client