$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa File: 9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa (raw, json) Hash identifier: ncfbpf5gOpPnZ7Cr2OvVmo1Ya7ebBeTEKpIT1zG4bAU= Subject key identifier: E2:26:C7:81:65:43:C8:A1:23:C7:29:41:41:2B:4D:13:61:7F:4F:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFFAFFDEBDE9944F391B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397209 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fa:ff:de:bd:e9:94:4f:39:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=ed8ac591-187b-4f76-b3d2-5b121feeaa34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:db:27:15:67:7e:35:4f:5a:ab:f6:8b:e1: a8:ec:da:fc:1a:c5:53:d6:19:9a:9f:a3:a0:a0:3c: e6:cd:a5:47:ca:e2:6c:5a:67:19:06:92:a3:f6:02: 4f:1d:e7:f7:89:df:b3:68:4a:b4:22:72:06:70:1b: eb:80:33:74:43:14:39:17:23:04:6b:2f:ac:03:da: 9f:04:2e:ec:dd:41:a4:75:cd:43:d5:92:b0:e1:b4: df:6e:c8:a5:a0:88:12:c4:31:2d:86:ff:b9:df:38: 32:a7:8c:77:a8:dc:49:c8:6d:a6:ad:bd:aa:dd:70: 27:3c:38:89:9d:2a:71:a4:ff:a0:44:76:ce:1f:b2: 29:4d:99:15:bd:26:a5:71:4e:29:d2:64:af:29:5f: b6:af:25:e1:4e:f4:8f:43:97:38:fb:aa:12:f0:2c: bf:a8:6e:e6:67:b5:bf:88:17:a7:56:f6:ab:c0:2a: 58:05:06:0b:ac:cf:72:b1:7f:7a:5c:17:46:42:f5: c4:cf:a0:3b:fa:d9:a1:69:62:69:f6:42:82:c2:da: 37:93:ba:c0:44:6e:13:02:f7:2f:1a:bb:09:e0:da: 18:72:ed:ca:f3:f1:27:cf:cb:fb:30:10:77:2c:83: 7c:e2:17:a0:d0:5f:bf:4a:7d:a5:6a:8c:bd:80:eb: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:C7:81:65:43:C8:A1:23:C7:29:41:41:2B:4D:13:61:7F:4F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce6a917-fa53-3edf-b096-b8b85ca4048d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e7:5e:9b:e6:17:99:b6:13:e9:b5:e9:e2:eb:1e:87:2b:37: 0e:58:07:3c:9b:b4:e2:93:2c:b1:18:f6:d5:69:5a:b8:0d:cc: a5:1b:c9:c5:50:97:64:c2:35:cb:71:36:41:e8:41:62:c0:b8: 5b:73:ee:b9:1f:6b:9a:de:91:b6:c2:64:75:ba:48:52:d5:de: cd:5f:ca:02:3b:55:1c:86:2d:4f:38:a2:1f:9c:26:91:65:0f: 12:64:d5:bf:5d:2f:cc:2a:d2:99:e5:c6:ad:a6:58:76:0c:c9: 41:c3:44:30:90:5b:86:31:2c:02:08:f6:c1:59:c8:bb:d2:68: fc:4f:60:e9:7f:7c:f7:87:01:f3:bf:bd:89:e8:29:f4:23:11: 0a:02:23:95:e3:a4:38:3b:d3:63:ee:b3:49:84:3e:d5:82:7e: b9:03:dc:94:d3:1a:e3:d0:c2:1b:96:cd:31:28:f0:71:16:bd: 67:18:ee:8d:5f:8b:c5:51:34:ae:9e:d0:94:a9:56:e8:47:b3: 38:b9:8c:30:83:5a:f3:56:4f:49:ad:69:b3:f0:8b:97:e5:a6: 84:40:cf:19:a5:5b:ce:72:47:bb:a1:89:3d:ea:a9:da:06:34: d3:49:85:53:b8:b5:2e:5b:81:60:4b:43:af:be:41:c8:06:4d: 4d:b3:92:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/r/3r3plE85G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZWQ4YWM1OTEtMTg3Yi00Zjc2LWIzZDItNWIxMjFmZWVhYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmirbJxVnfjVPWqv2i+Go7Nr8GsVT1hman6Og oDzmzaVHyuJsWmcZBpKj9gJPHef3id+zaEq0InIGcBvrgDN0QxQ5FyMEay+sA9qf BC7s3UGkdc1D1ZKw4bTfbsiloIgSxDEthv+53zgyp4x3qNxJyG2mrb2q3XAnPDiJ nSpxpP+gRHbOH7IpTZkVvSalcU4p0mSvKV+2ryXhTvSPQ5c4+6oS8Cy/qG7mZ7W/ iBenVvarwCpYBQYLrM9ysX96XBdGQvXEz6A7+tmhaWJp9kKCwto3k7rARG4TAvcv GrsJ4NoYcu3K8/Enz8v7MBB3LIN84heg0F+/Sn2laoy9gOs2lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOImx4FlQ8ihI8cpQUErTRNhf0+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWNlNmE5MTctZmE1My0z ZWRmLWIwOTYtYjhiODVjYTQwNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbnXpvmF5m2E+m16eLrHocrNw5YBzybtOKTLLEY9tVpWrgNzKUb ycVQl2TCNctxNkHoQWLAuFtz7rkfa5rekbbCZHW6SFLV3s1fygI7VRyGLU84oh+c JpFlDxJk1b9dL8wq0pnlxq2mWHYMyUHDRDCQW4YxLAII9sFZyLvSaPxPYOl/fPeH AfO/vYnoKfQjEQoCI5XjpDg702Pus0mEPtWCfrkD3JTTGuPQwhuWzTEo8HEWvWcY 7o1fi8VRNK6e0JSpVuhHszi5jDCDWvNWT0mtabPwi5flpoRAzxmlW85yR7uhiT3q qdoGNNNJhVO4tS5bgWBLQ6++QcgGTU2zktA= -----END CERTIFICATE-----Generated at Wed May 13 03:18:55 2026 by rpki-client