$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa File: 97c023f1-83db-3711-916f-18fa4c5336b7.roa (raw, json) Hash identifier: f5Mz6YXF9KN5X+uIZHoyTX2B2SZFyRUP0EMxQpSD/Ag= Subject key identifier: 70:EE:9E:29:76:7C:B8:1A:0D:2C:8B:34:01:5A:84:F8:06:CB:51:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D95F01CF591DBF976A92CC228 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 7342 IP address blocks: 2620:74:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1c:f5:91:db:f9:76:a9:2c:c2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=b656c0a4-a919-4efb-92a9-a39624e80ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:aa:d0:9b:f1:51:aa:e8:cc:9a:df:f7:48: 7c:be:e1:51:61:e7:6f:9a:c6:3b:18:fb:e8:6a:b1: 8c:82:ca:34:9a:14:07:55:c9:3f:b0:3c:5b:a1:dd: 77:8c:10:3f:71:26:8c:c7:f9:81:50:21:05:c0:7d: e1:4a:05:df:62:23:06:4c:d1:43:53:e4:d1:d1:c8: 89:e7:b3:68:a6:c7:98:e9:86:a8:bf:7b:e9:54:a3: f1:71:47:2c:d2:71:2a:82:b8:76:14:50:04:52:ee: ef:a3:c4:98:0b:77:96:ef:36:bd:26:fc:35:12:c1: b7:40:2e:06:2d:91:db:00:06:ed:6b:11:1f:b5:8d: 41:38:2a:f7:36:16:2e:7e:7c:80:de:50:2c:52:1e: ae:4a:8d:d6:f2:e5:3d:4c:04:d7:bc:b3:ef:68:ee: 1c:64:94:fa:6d:56:80:19:08:a5:4f:3a:4d:79:a4: 4f:63:69:17:f8:99:15:15:b8:dc:80:b2:d5:50:d9: f3:e0:61:82:37:66:5b:3e:16:4c:de:b3:99:40:72: d8:6c:6e:bb:79:36:c5:fb:dc:6c:7a:ba:80:ed:70: 5b:6d:1d:79:98:81:fa:b1:40:52:60:2b:f5:d1:6d: 8a:7d:41:77:f5:af:b7:f2:a3:5e:94:a7:2e:e4:5f: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:9E:29:76:7C:B8:1A:0D:2C:8B:34:01:5A:84:F8:06:CB:51:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:da:84:01:1f:d1:ff:c4:67:a1:2b:29:d0:1d:fd:70:d2:d0: 04:29:76:8c:37:64:37:df:49:12:d0:c5:f1:a0:19:7d:d5:ee: dd:48:e5:a9:51:15:09:81:fa:6f:44:8e:aa:95:b9:6c:54:9d: e6:43:74:b5:6c:e3:ab:a2:f1:dc:07:e1:a1:28:4e:37:b2:e8: 14:b3:2e:7b:47:a3:00:cf:bd:91:2a:70:76:34:c9:70:0d:d5: 50:d6:3f:16:61:9c:2e:e1:a0:f2:a8:eb:8b:fc:b9:89:62:11: 7b:1e:f5:fe:d8:56:7b:e0:f0:06:83:a1:ec:db:11:d2:1c:ca: 02:fd:67:66:f9:5c:cb:69:d5:67:d0:68:ca:a5:a6:34:f2:cb: 46:e3:9b:53:28:1d:2d:9c:47:b0:57:d0:ce:ca:f2:7c:63:ef: 5a:5e:98:f2:36:19:89:88:db:b0:50:4a:a1:2b:a3:a2:4f:6a: 0d:44:a9:3d:a4:97:6b:23:fa:69:66:b9:6f:a6:65:36:6c:f9: 3b:ef:16:cd:e6:cf:99:1f:09:eb:1e:ee:a6:99:dc:80:a4:7e: 62:be:87:b2:dc:bc:06:93:cf:ae:59:78:2c:37:3c:8a:a7:7a: 42:24:23:2f:c0:2a:da:b4:d5:14:12:c3:bc:b4:bb:ba:91:fb: 9e:cd:c8:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8Bz1kdv5dqkswigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YjY1NmMwYTQtYTkxOS00ZWZiLTkyYTktYTM5NjI0ZTgwZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmduq0JvxUarozJrf90h8vuFRYedvmsY7GPvo arGMgso0mhQHVck/sDxbod13jBA/cSaMx/mBUCEFwH3hSgXfYiMGTNFDU+TR0ciJ 57NopseY6Yaov3vpVKPxcUcs0nEqgrh2FFAEUu7vo8SYC3eW7za9Jvw1EsG3QC4G LZHbAAbtaxEftY1BOCr3NhYufnyA3lAsUh6uSo3W8uU9TATXvLPvaO4cZJT6bVaA GQilTzpNeaRPY2kX+JkVFbjcgLLVUNnz4GGCN2ZbPhZM3rOZQHLYbG67eTbF+9xs erqA7XBbbR15mIH6sUBSYCv10W2KfUF39a+38qNelKcu5F85XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDunil2fLgaDSyLNAFahPgGy1GeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdjMDIzZjEtODNkYi0z NzExLTkxNmYtMThmYTRjNTMzNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC/ahAEf0f/EZ6ErKdAd/XDS0AQpdow3ZDffSRLQxfGgGX3V7t1I 5alRFQmB+m9EjqqVuWxUneZDdLVs46ui8dwH4aEoTjey6BSzLntHowDPvZEqcHY0 yXAN1VDWPxZhnC7hoPKo64v8uYliEXse9f7YVnvg8AaDoezbEdIcygL9Z2b5XMtp 1WfQaMqlpjTyy0bjm1MoHS2cR7BX0M7K8nxj71pemPI2GYmI27BQSqEro6JPag1E qT2kl2sj+mlmuW+mZTZs+TvvFs3mz5kfCese7qaZ3ICkfmK+h7LcvAaTz65ZeCw3 PIqnekIkIy/AKtq01RQSw7y0u7qR+57NyMg= -----END CERTIFICATE-----Generated at Wed May 13 10:53:23 2026 by rpki-client