$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa File: a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa (raw, json) Hash identifier: 1PEOj9IeSeVwKoV3VUZq295TxgHZh+Lx4QvjjcaLL6E= Subject key identifier: 0C:72:74:18:73:58:70:4D:F2:9A:B1:AF:8D:6E:CA:FA:55:9A:3A:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00C9A4EACB0C8F9269B30 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 40717 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0c:9a:4e:ac:b0:c8:f9:26:9b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=9a25a843-0378-4c63-b6a4-cb04bac701ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:35:d7:45:1c:1d:67:bd:8c:98:23:d0:f7: 80:39:32:cc:5f:11:72:5a:20:17:57:e2:82:93:bf: f9:63:26:1b:a7:7a:e5:ed:9e:68:91:86:78:ea:55: 86:39:23:48:1d:c5:93:b3:7d:24:cb:a3:e8:c8:10: b0:21:b0:37:75:ca:c4:98:d4:00:86:6e:30:7a:d7: 3c:27:56:8b:9a:e0:41:a0:8e:9a:3c:14:53:56:65: 53:10:8e:65:24:4e:3e:43:5f:e7:88:8c:18:df:4e: ae:a8:5e:29:27:00:da:28:3e:1a:44:6d:bc:7d:44: 48:a0:d1:20:c2:cd:02:a0:a1:c4:1f:4c:79:d2:ea: 83:90:47:7d:67:95:55:d4:20:be:c0:8b:53:97:88: 12:42:f0:f3:1a:ce:40:3d:da:7e:c8:49:12:19:29: 82:89:b4:b0:7a:76:e5:69:c3:3c:4e:60:76:58:d9: 9e:bf:16:29:e7:fa:ab:f1:fe:bb:e1:43:11:62:ab: 36:90:e9:ee:2b:95:89:1c:29:9a:1b:49:fd:2b:96: 2a:2f:db:f5:16:e1:ac:48:26:70:b5:db:ef:54:ab: 71:a3:62:92:59:c4:86:60:ec:b9:f8:bf:01:10:6b: f1:9a:13:fd:e3:1f:7e:ab:4f:b3:66:a5:ff:d9:6d: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:72:74:18:73:58:70:4D:F2:9A:B1:AF:8D:6E:CA:FA:55:9A:3A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:00:95:7a:a6:76:5a:c8:ee:ac:c2:01:c0:73:76:f1:68: 28:7b:90:34:e5:46:b8:e8:ce:89:d3:62:85:c1:a7:a0:74:f9: 1f:4f:64:7b:05:0c:60:0e:ba:39:e7:f8:26:e5:38:2a:0b:e9: 64:60:93:10:94:d6:e1:38:53:f2:a6:e7:6b:02:7b:dc:f1:47: 16:a5:db:1d:d7:1d:13:55:0c:99:e1:34:f9:b7:46:2e:8c:ca: 2c:d7:7a:5f:bd:0e:9e:2d:73:7f:d6:0c:45:db:91:36:a1:e4: 92:ba:62:87:a9:5b:cd:21:3d:75:20:c2:d3:16:b6:87:9e:d0: 22:4b:26:71:68:ac:71:6f:f6:1f:52:ec:1b:17:87:de:cd:c6: ea:28:60:8e:a4:5a:c2:8a:b5:ac:d8:fb:a7:42:46:91:7f:65: c5:0b:ec:e2:9d:ec:85:ec:9b:a9:6b:ad:54:f5:6f:ff:7b:ff: 76:07:88:27:f3:a0:84:9e:6a:60:fc:41:da:33:84:a0:a1:1e: 64:76:5b:b7:f4:0f:8b:45:f4:6f:4a:40:d1:61:87:37:c9:69: 6a:19:1c:79:bd:d2:f2:1b:4c:97:b9:bb:41:ea:4d:b4:78:eb: 86:9f:57:12:62:a3:54:44:e1:19:f7:ca:76:c6:9d:92:35:89: d4:65:e8:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAyaTqywyPkmmzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OWEyNWE4NDMtMDM3OC00YzYzLWI2YTQtY2IwNGJhYzcwMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mk110UcHWe9jJgj0PeAOTLMXxFyWiAXV+KC k7/5YyYbp3rl7Z5okYZ46lWGOSNIHcWTs30ky6PoyBCwIbA3dcrEmNQAhm4wetc8 J1aLmuBBoI6aPBRTVmVTEI5lJE4+Q1/niIwY306uqF4pJwDaKD4aRG28fURIoNEg ws0CoKHEH0x50uqDkEd9Z5VV1CC+wItTl4gSQvDzGs5APdp+yEkSGSmCibSwenbl acM8TmB2WNmevxYp5/qr8f674UMRYqs2kOnuK5WJHCmaG0n9K5YqL9v1FuGsSCZw tdvvVKtxo2KSWcSGYOy5+L8BEGvxmhP94x9+q0+zZqX/2W3xxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAxydBhzWHBN8pqxr41uyvpVmjpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZiOWNlMzctYzdkNy0z OGE1LWJiNWMtYzFmNjM2MDQyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0xAJV6pnZayO6swgHAc3bxaCh7kDTlRrjozonTYoXBp6B0+R9P ZHsFDGAOujnn+CblOCoL6WRgkxCU1uE4U/Km52sCe9zxRxal2x3XHRNVDJnhNPm3 Ri6MyizXel+9Dp4tc3/WDEXbkTah5JK6YoepW80hPXUgwtMWtoee0CJLJnForHFv 9h9S7BsXh97NxuooYI6kWsKKtazY+6dCRpF/ZcUL7OKd7IXsm6lrrVT1b/97/3YH iCfzoISeamD8QdozhKChHmR2W7f0D4tF9G9KQNFhhzfJaWoZHHm90vIbTJe5u0Hq TbR464afVxJio1RE4Rn3ynbGnZI1idRl6PA= -----END CERTIFICATE-----Generated at Wed May 13 07:03:32 2026 by rpki-client