$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa File: a95a5475-cc59-301d-87ba-30e0973eef12.roa (raw, json) Hash identifier: OWzBTLImxWgFgxi5TAVP8CuAnQNTiAAsayrX9fpLPYU= Subject key identifier: 91:4F:8C:C6:8F:A2:ED:1B:0C:CE:57:68:9A:E0:49:37:DE:83:92:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DADAAE0359567210852097780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 0 IP address blocks: 2620:74:e8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e0:35:95:67:21:08:52:09:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=eba280b3-7047-4419-9e30-4c75c7ead808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:d1:4c:14:9b:a6:d2:a8:8b:2e:fe:b0:f2: b2:3b:87:36:48:0f:ef:9f:1e:5e:de:fd:a5:6a:a9: cc:aa:c1:ab:8a:51:f1:cb:05:95:b9:3a:f0:0d:bf: b0:73:45:c1:0f:78:75:89:e7:40:a8:53:b8:27:12: 20:32:d6:09:2f:6d:1d:f1:67:92:17:a7:cb:31:a2: 80:2c:32:88:38:10:73:54:79:15:37:6c:73:1b:b8: 3a:c8:e8:6a:0c:d3:57:44:4b:8e:f4:f1:8e:ca:6b: 07:3d:5b:c8:5d:bb:36:58:52:d9:2d:07:ac:78:12: 51:cc:17:7e:77:b9:9f:9b:ce:24:ed:2b:37:1f:d5: f1:73:c2:d6:e9:a5:f1:c4:d6:f1:f3:9c:bc:f2:fb: a2:f1:3b:c0:8a:96:31:85:03:41:b7:31:d1:4c:e9: 06:e8:aa:44:67:75:85:4e:9f:6c:f0:cd:93:7e:60: 59:cb:c1:ea:fc:ab:6b:1b:29:75:48:ff:7b:3d:ff: 94:43:ce:7c:54:95:25:c4:89:d0:b5:23:44:3d:e1: 03:fe:ee:e6:57:c3:61:db:9b:27:dc:05:d3:7a:0a: a9:79:70:bd:18:2f:79:26:6c:47:17:b3:36:d1:7e: 5f:f1:c5:b3:02:20:c8:c1:59:a6:b0:9d:88:16:c0: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4F:8C:C6:8F:A2:ED:1B:0C:CE:57:68:9A:E0:49:37:DE:83:92:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a95a5475-cc59-301d-87ba-30e0973eef12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:e8::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:31:ec:0f:fe:be:ab:2f:5b:eb:01:f6:ad:3a:e7:09:bd:ab: dd:85:d5:85:9a:9f:05:42:d6:03:e2:f3:36:51:71:81:3e:52: 62:a2:da:ce:cc:e3:58:e2:b9:d7:de:86:f6:e4:75:3d:03:ca: 92:4a:6f:20:50:61:49:01:ef:21:87:72:5f:1d:53:c7:3d:a3: 0d:cf:fd:08:cb:ef:0b:0c:48:d3:d8:ad:d6:9b:db:a0:83:17: 65:bc:db:36:78:27:98:22:7f:0c:a5:11:48:fe:e9:b6:c8:e8: 41:9d:0d:e1:57:d8:9c:12:bc:7e:1b:46:20:12:7e:64:21:d9: b7:10:65:a1:93:2a:03:11:8b:bf:9b:1e:fc:d7:46:f7:a5:b5: 98:b9:13:27:6d:34:e2:40:c6:18:60:60:94:3c:7f:fe:36:f6: 05:fb:38:7d:5c:02:45:e7:03:e2:a0:d4:af:9f:5b:68:9d:15: e0:7f:4f:1b:20:02:e7:7c:e2:8a:46:f2:50:09:d1:f1:69:94: 88:da:da:f0:5a:05:01:9d:e2:32:eb:37:82:cf:03:8b:1d:dd: 5f:96:1d:9f:71:96:bf:9d:e5:88:2f:a5:57:cc:7d:4e:6a:21: a6:03:86:0f:17:14:2b:d6:24:55:fe:bf:57:77:4e:89:6c:75: b1:7d:1b:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2tquA1lWchCFIJd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZWJhMjgwYjMtNzA0Ny00NDE5LTllMzAtNGM3NWM3ZWFkODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbvRTBSbptKoiy7+sPKyO4c2SA/vnx5e3v2l aqnMqsGrilHxywWVuTrwDb+wc0XBD3h1iedAqFO4JxIgMtYJL20d8WeSF6fLMaKA LDKIOBBzVHkVN2xzG7g6yOhqDNNXREuO9PGOymsHPVvIXbs2WFLZLQeseBJRzBd+ d7mfm84k7Ss3H9Xxc8LW6aXxxNbx85y88vui8TvAipYxhQNBtzHRTOkG6KpEZ3WF Tp9s8M2TfmBZy8Hq/KtrGyl1SP97Pf+UQ858VJUlxInQtSNEPeED/u7mV8Nh25sn 3AXTegqpeXC9GC95JmxHF7M20X5f8cWzAiDIwVmmsJ2IFsBuMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFPjMaPou0bDM5XaJrgSTfeg5IgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTk1YTU0NzUtY2M1OS0z MDFkLTg3YmEtMzBlMDk3M2VlZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdADo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0x7A/+vqsvW+sB9q065wm9q92F1YWanwVC1gPi8zZRcYE+UmKi 2s7M41jiudfehvbkdT0DypJKbyBQYUkB7yGHcl8dU8c9ow3P/QjL7wsMSNPYrdab 26CDF2W82zZ4J5gifwylEUj+6bbI6EGdDeFX2JwSvH4bRiASfmQh2bcQZaGTKgMR i7+bHvzXRveltZi5EydtNOJAxhhgYJQ8f/429gX7OH1cAkXnA+Kg1K+fW2idFeB/ TxsgAud84opG8lAJ0fFplIja2vBaBQGd4jLrN4LPA4sd3V+WHZ9xlr+d5YgvpVfM fU5qIaYDhg8XFCvWJFX+v1d3TolsdbF9G0U= -----END CERTIFICATE-----Generated at Wed May 13 04:46:30 2026 by rpki-client