$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa File: 9fc84630-ca08-3f55-8c10-a6116461ef02.roa (raw, json) Hash identifier: SUTsXZvMbLhNpd1ydgJ993KgbxGAvNXjkiC+3UJTbL4= Subject key identifier: D1:FD:A5:D7:F3:EB:F0:A7:E1:AA:0D:2D:23:46:0B:C1:48:E8:FD:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D8AC54BB3D481E40AB4735900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 7342 IP address blocks: 2620:74:68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:4b:b3:d4:81:e4:0a:b4:73:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=a05f0407-ab7e-4473-9a93-8fc1b52bba85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:81:93:c4:bf:12:ea:40:64:5c:61:e4:ff: fa:cf:db:8e:1e:1a:78:60:84:6a:37:d6:ff:b5:99: d5:de:5e:53:bd:ef:b8:9b:1d:92:6f:2c:ac:bf:3c: b8:f3:30:2a:88:e7:8f:6f:02:65:8a:fb:c8:ab:d0: fd:78:cf:ed:0d:6a:5f:85:7a:8d:1f:19:ec:46:a7: fd:32:1f:f3:75:af:06:ce:a3:24:e8:aa:77:77:b3: 94:46:86:54:21:46:1c:c3:83:a7:6d:be:5a:17:3e: a2:4f:2d:11:20:ff:69:b3:2f:ee:cf:05:be:51:7d: ad:1a:77:2a:32:b6:48:3f:2b:41:c6:36:80:6d:7b: 86:f2:e3:c2:db:95:ee:64:43:b1:ea:27:14:87:ea: c3:b3:f6:0e:0e:1c:1f:67:cd:b6:b0:4b:6c:92:12: 64:6c:9d:2d:ec:83:6c:f4:fb:5b:11:d6:55:0a:01: e8:2c:ef:c0:18:af:48:0d:9b:fb:2a:91:98:3a:f7: 11:dc:41:69:1c:bd:c5:d6:ea:e1:2e:ca:8b:3c:73: ab:85:ff:05:9f:c4:ec:ac:5e:cf:c9:45:f5:0f:c6: b1:f0:ae:93:f5:a8:1d:0a:55:e9:97:fc:ff:e1:66: d3:e4:27:9f:83:ba:ff:10:4d:f8:bd:93:c1:c8:9e: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:A5:D7:F3:EB:F0:A7:E1:AA:0D:2D:23:46:0B:C1:48:E8:FD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fc84630-ca08-3f55-8c10-a6116461ef02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:68::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d4:6b:d7:dd:23:1d:ce:34:80:0a:c3:93:eb:6a:6a:f5:6a: d4:a7:43:54:9d:53:5f:72:cb:38:b5:26:ad:3b:30:31:8c:2c: 6e:6c:56:60:e6:db:3c:eb:18:7e:2c:6d:3b:e7:fb:45:bf:b9: 8b:c4:40:68:d9:6f:86:f5:2d:ac:04:de:8d:8f:44:52:c6:e7: e6:39:40:0b:a2:24:ec:62:24:1c:07:6d:0c:5c:11:7b:47:81: ec:db:aa:96:c9:f1:48:0c:53:f5:64:14:41:7f:54:60:bd:4b: 90:d3:bb:ca:7f:1e:bd:3c:fd:5a:b2:d0:1d:2d:ae:d5:f2:d4: ab:88:89:01:63:55:5d:9d:12:64:13:6f:d2:1c:a4:a5:86:c0: 9c:db:15:ca:e7:04:96:b5:5e:6c:11:e8:3d:65:ba:98:d6:94: 98:03:6b:50:2b:22:2a:e9:09:5a:74:a0:f2:1a:a4:70:72:c6: 59:99:88:53:95:f5:06:35:65:b3:c3:c5:bd:d8:1d:fe:58:04: 75:d4:ac:b4:90:46:ac:6c:26:c9:d9:63:36:84:df:e0:5d:9a: 7c:de:df:bd:e1:0f:a5:19:12:c7:25:01:7d:f8:95:b0:d6:89: 96:d1:d1:cb:84:0b:3f:4c:34:ff:ce:54:80:ae:35:0d:4b:0f: 89:93:8a:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2KxUuz1IHkCrRzWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YTA1ZjA0MDctYWI3ZS00NDczLTlhOTMtOGZjMWI1MmJiYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/iBk8S/EupAZFxh5P/6z9uOHhp4YIRqN9b/ tZnV3l5Tve+4mx2Sbyysvzy48zAqiOePbwJlivvIq9D9eM/tDWpfhXqNHxnsRqf9 Mh/zda8GzqMk6Kp3d7OURoZUIUYcw4Onbb5aFz6iTy0RIP9psy/uzwW+UX2tGncq MrZIPytBxjaAbXuG8uPC25XuZEOx6icUh+rDs/YODhwfZ822sEtskhJkbJ0t7INs 9PtbEdZVCgHoLO/AGK9IDZv7KpGYOvcR3EFpHL3F1urhLsqLPHOrhf8Fn8TsrF7P yUX1D8ax8K6T9agdClXpl/z/4WbT5Cefg7r/EE34vZPByJ6MCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNH9pdfz6/Cn4aoNLSNGC8FI6P3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZjODQ2MzAtY2EwOC0z ZjU1LThjMTAtYTYxMTY0NjFlZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDUa9fdIx3ONIAKw5Pramr1atSnQ1SdU19yyzi1Jq07MDGMLG5s VmDm2zzrGH4sbTvn+0W/uYvEQGjZb4b1LawE3o2PRFLG5+Y5QAuiJOxiJBwHbQxc EXtHgezbqpbJ8UgMU/VkFEF/VGC9S5DTu8p/Hr08/Vqy0B0trtXy1KuIiQFjVV2d EmQTb9IcpKWGwJzbFcrnBJa1XmwR6D1lupjWlJgDa1ArIirpCVp0oPIapHByxlmZ iFOV9QY1ZbPDxb3YHf5YBHXUrLSQRqxsJsnZYzaE3+Bdmnze373hD6UZEsclAX34 lbDWiZbR0cuECz9MNP/OVICuNQ1LD4mTitE= -----END CERTIFICATE-----Generated at Wed May 13 06:28:10 2026 by rpki-client