$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa File: b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa (raw, json) Hash identifier: JA/5aa7MQ07LlmxuubSsKgLSFydlmngNWeBvE206+RI= Subject key identifier: 0A:97:DC:DE:8D:0B:D7:D6:BE:97:8A:26:3E:AF:0D:D0:AF:FE:78:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DADAADFFDB9006F5C96B79A20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 0 IP address blocks: 2620:74:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:df:fd:b9:00:6f:5c:96:b7:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=e0d0f612-6011-46ea-b3e6-66d8e267549d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:03:ad:81:10:88:f0:17:cd:55:9f:a8:2f: ce:9c:fb:d2:b0:1e:33:6a:97:ab:88:54:84:67:11: aa:87:53:95:99:fe:76:38:e4:b4:2b:92:bb:b0:cb: ea:dd:c7:7a:81:25:e1:0f:fe:07:3e:dc:f4:10:e8: 64:ed:fc:c2:40:7a:68:98:74:c4:4a:fd:d7:2a:ef: d1:23:61:50:dc:2b:44:05:19:95:0c:9e:64:62:a0: d0:7c:bd:6a:01:5d:20:3b:98:fe:9f:13:94:cb:94: 11:b9:93:5c:0d:39:b9:1e:91:e8:6f:72:32:b9:e0: 1f:9f:6b:8d:8e:f5:6f:65:98:b5:e0:85:14:07:94: 8c:0c:da:8c:53:30:9d:4e:91:18:d8:0f:cf:30:f9: 7d:ff:ca:b3:83:ec:3d:9b:4e:08:3c:2a:b1:e4:60: 75:69:40:1b:15:a7:7a:a0:ee:d1:9b:d7:a1:c7:b6: cd:ad:65:81:6a:f3:70:ea:b6:85:95:d4:45:75:4b: 56:a2:05:8e:7c:cf:c3:e4:19:df:0a:42:3a:ca:04: 9a:54:66:54:d7:6e:33:ed:54:73:52:84:88:b0:fb: 30:7a:3f:d3:98:dc:99:87:9e:f0:3c:d6:1c:df:50: 05:06:ef:66:af:09:90:ed:93:2d:80:94:7f:b2:a9: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:97:DC:DE:8D:0B:D7:D6:BE:97:8A:26:3E:AF:0D:D0:AF:FE:78:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89abb76-e4ef-3f80-ab46-e2dc1a7ded66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:10:0b:80:7f:09:a0:99:3f:f3:6c:18:d8:83:1d:c7:e6:47: 9b:b3:ae:94:47:d6:ba:75:b8:17:63:4a:28:65:c9:3d:64:1f: 28:10:d2:a0:1d:c3:5d:d5:41:68:ef:f8:86:28:c1:c9:54:a1: 3c:44:ad:90:4d:b7:c6:8b:9d:b0:d9:b7:55:ce:91:63:41:e1: 13:1b:80:bf:ab:86:cc:3c:5f:36:66:54:7c:a8:63:05:1d:87: c4:13:07:bb:28:6f:ad:df:d1:c6:e9:1e:26:68:3d:dd:c7:c4: 38:82:ea:82:b4:95:e3:ad:4a:e9:9f:fd:ba:ce:07:1e:41:f6: 98:cc:e8:02:57:a5:27:4d:1c:62:31:5c:8d:c5:de:08:32:a6: 5b:07:81:c2:36:c3:8d:2c:52:2b:5b:36:10:14:00:63:f5:78: 3b:1a:15:06:ec:f0:93:e7:5f:fe:e7:13:37:7c:66:2c:fa:55: 71:06:c8:fe:69:32:04:90:4d:a5:66:9a:7e:0a:f7:25:b2:aa: 5f:f9:5b:43:fe:09:23:a8:97:4f:10:55:d6:dd:16:97:dd:c4: 40:f2:48:ee:f9:c0:5e:81:cb:70:0d:f3:7b:d2:3a:f5:e9:28: 56:07:c3:d2:ab:11:25:42:22:ec:7b:37:cb:6a:39:0a:99:7b: de:cd:b3:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2tqt/9uQBvXJa3miAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZTBkMGY2MTItNjAxMS00NmVhLWIzZTYtNjZkOGUyNjc1NDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs64DrYEQiPAXzVWfqC/OnPvSsB4zaperiFSE ZxGqh1OVmf52OOS0K5K7sMvq3cd6gSXhD/4HPtz0EOhk7fzCQHpomHTESv3XKu/R I2FQ3CtEBRmVDJ5kYqDQfL1qAV0gO5j+nxOUy5QRuZNcDTm5HpHob3IyueAfn2uN jvVvZZi14IUUB5SMDNqMUzCdTpEY2A/PMPl9/8qzg+w9m04IPCqx5GB1aUAbFad6 oO7Rm9ehx7bNrWWBavNw6raFldRFdUtWogWOfM/D5BnfCkI6ygSaVGZU124z7VRz UoSIsPswej/TmNyZh57wPNYc31AFBu9mrwmQ7ZMtgJR/sqlf/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqX3N6NC9fWvpeKJj6vDdCv/ngrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjg5YWJiNzYtZTRlZi0z ZjgwLWFiNDYtZTJkYzFhN2RlZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkQC4B/CaCZP/NsGNiDHcfmR5uzrpRH1rp1uBdjSihlyT1kHygQ 0qAdw13VQWjv+IYowclUoTxErZBNt8aLnbDZt1XOkWNB4RMbgL+rhsw8XzZmVHyo YwUdh8QTB7sob63f0cbpHiZoPd3HxDiC6oK0leOtSumf/brOBx5B9pjM6AJXpSdN HGIxXI3F3ggyplsHgcI2w40sUitbNhAUAGP1eDsaFQbs8JPnX/7nEzd8Ziz6VXEG yP5pMgSQTaVmmn4K9yWyql/5W0P+CSOol08QVdbdFpfdxEDySO75wF6By3AN83vS OvXpKFYHw9KrESVCIux7N8tqOQqZe97Ns/4= -----END CERTIFICATE-----Generated at Tue May 12 21:50:10 2026 by rpki-client