$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa File: 9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa (raw, json) Hash identifier: lvCUkpsrI2tQ/ZKFBYe7+hl6DDK9p4boCIlb4K3ruAw= Subject key identifier: 38:2E:9C:AC:20:39:7C:74:35:F2:2F:58:4E:7B:CF:7D:58:3C:AA:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00DDF08EBCF8613212AE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36630 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0d:df:08:eb:cf:86:13:21:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=fcc8a8b7-7e9e-4b1e-91cf-bae851440425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:ca:da:65:45:5b:48:a8:ff:7b:6f:49:3b: 3b:08:61:11:5a:59:b8:0b:68:47:a8:03:31:ee:02: 8a:4a:92:f4:cd:38:7e:25:d4:6c:ca:db:82:b1:59: 67:93:54:93:90:55:9c:0c:c5:b4:cb:39:b5:2c:07: ee:41:25:51:66:0f:7a:a2:6e:a2:ac:ad:60:a5:be: d7:9e:fc:3b:9b:97:9a:58:39:86:e1:a9:c4:90:9d: 92:c1:bb:b6:e3:30:5d:82:65:7b:02:0e:fa:df:cc: 13:f0:82:11:0f:53:9c:4a:f5:1f:2d:33:22:62:03: e6:b5:1a:69:f7:55:0f:48:b4:11:6c:4c:43:0e:f6: 56:bb:ff:aa:82:7f:77:1e:a9:04:13:04:04:31:72: 0e:37:81:83:e8:e7:5a:f1:5c:05:8e:97:31:95:08: e4:ef:32:cd:f4:46:35:b0:7c:5f:76:fb:1f:df:46: c7:4f:4c:a8:5d:8c:cc:f2:c9:35:58:a1:b1:37:b4: cf:43:cd:ee:bb:10:6b:be:55:2d:3e:92:bf:f1:bd: 37:aa:e9:44:d6:4a:cf:4a:2e:56:f8:9d:73:bb:27: 62:3c:eb:e5:25:61:3c:5a:cd:e4:97:79:8d:f5:b6: 3c:8b:97:73:0c:eb:c9:75:c2:48:1b:e4:71:2f:72: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2E:9C:AC:20:39:7C:74:35:F2:2F:58:4E:7B:CF:7D:58:3C:AA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d0:f7:1c:ff:32:e9:84:17:4f:53:d2:da:94:23:02:23:2b: 05:be:98:42:1e:de:9f:84:64:a1:5b:71:e0:2f:3c:01:e8:e0: fc:21:c1:16:74:68:2d:2f:ba:57:2d:f4:2f:67:02:38:c2:51: 5c:9a:44:8e:47:b0:6a:e8:f4:b0:cc:68:4c:60:ec:a3:3b:9f: a0:7e:70:37:1e:07:85:e2:c0:08:48:14:4f:51:ed:3e:3e:75: 50:26:86:0b:83:9c:24:28:07:da:eb:47:c5:67:84:62:7d:48: e2:53:a3:d8:e7:bd:8a:e9:cc:9d:44:e7:17:60:d9:06:c6:a7: c7:e2:62:b6:bd:87:68:55:fd:9b:9b:c3:19:5b:72:22:2d:fa: da:65:b1:ef:01:da:01:c3:06:c6:15:d4:53:13:08:4e:63:53: 1b:6a:bb:7e:32:fc:27:4a:a1:b7:9a:a6:72:4b:61:f7:25:8d: 3f:df:dc:3f:34:c0:3c:cf:e0:78:01:34:d2:3c:70:bc:17:c9: 17:65:1c:17:fd:11:80:6a:b5:f2:49:2a:9c:b3:98:d4:f5:c0: c4:a7:6a:e0:97:87:dc:c0:50:5e:18:bd:89:bf:97:3a:a2:c0: f3:cd:cf:ea:0a:0e:cb:a7:7a:69:da:84:08:38:ed:25:98:da: c0:cc:fd:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwA3fCOvPhhMhKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZmNjOGE4YjctN2U5ZS00YjFlLTkxY2YtYmFlODUxNDQwNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DzK2mVFW0io/3tvSTs7CGERWlm4C2hHqAMx 7gKKSpL0zTh+JdRsytuCsVlnk1STkFWcDMW0yzm1LAfuQSVRZg96om6irK1gpb7X nvw7m5eaWDmG4anEkJ2Swbu24zBdgmV7Ag7638wT8IIRD1OcSvUfLTMiYgPmtRpp 91UPSLQRbExDDvZWu/+qgn93HqkEEwQEMXION4GD6Oda8VwFjpcxlQjk7zLN9EY1 sHxfdvsf30bHT0yoXYzM8sk1WKGxN7TPQ83uuxBrvlUtPpK/8b03qulE1krPSi5W +J1zuydiPOvlJWE8Ws3kl3mN9bY8i5dzDOvJdcJIG+RxL3JLYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgunKwgOXx0NfIvWE57z31YPKoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE0ZTE1YzYtM2JmYS0z ODcyLWIzMDctZDUzZjRkZGE3MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPQ9xz/MumEF09T0tqUIwIjKwW+mEIe3p+EZKFbceAvPAHo4Pwh wRZ0aC0vulct9C9nAjjCUVyaRI5HsGro9LDMaExg7KM7n6B+cDceB4XiwAhIFE9R 7T4+dVAmhguDnCQoB9rrR8VnhGJ9SOJTo9jnvYrpzJ1E5xdg2QbGp8fiYra9h2hV /ZubwxlbciIt+tplse8B2gHDBsYV1FMTCE5jUxtqu34y/CdKobeapnJLYfcljT/f 3D80wDzP4HgBNNI8cLwXyRdlHBf9EYBqtfJJKpyzmNT1wMSnauCXh9zAUF4YvYm/ lzqiwPPNz+oKDsunemnahAg47SWY2sDM/aM= -----END CERTIFICATE-----Generated at Wed May 13 04:33:27 2026 by rpki-client