$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa File: c087ca59-28b9-32f7-b252-e4f2040cf97f.roa (raw, json) Hash identifier: Xv8Xw9RDvT7p+u0WsCSCrICvKQzmGxQHAs2RYc1b+zs= Subject key identifier: 32:8F:F9:93:19:C7:0A:78:09:3F:A8:61:7A:13:24:B0:EE:08:72:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C00C805289398635335580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396612 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0c:80:52:89:39:86:35:33:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=c26fc8b6-d209-421f-9f59-ce4dfa88e690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:59:2b:5d:d3:8f:88:76:98:52:c8:75:f4: 04:07:d8:6f:6e:71:36:cf:c9:20:6d:52:e4:c9:b5: cc:de:84:19:44:c8:3f:e9:40:f9:f5:08:ea:3b:2d: a7:4b:29:65:2f:6a:53:84:f3:62:84:4f:13:10:eb: 3c:a6:92:b6:c0:b0:a5:2a:36:0e:bc:68:ee:bd:5c: fb:9b:8e:4b:ef:05:12:97:db:8d:0d:0d:3b:cc:70: e3:b0:90:ae:a0:0a:59:bc:b3:13:1e:fb:6d:61:08: bf:f6:14:cd:21:c5:39:28:5d:9a:7f:33:43:92:13: f4:57:e7:3f:fb:a1:81:09:b2:65:86:48:fc:8d:3c: 69:fd:1c:52:cc:e2:0d:ca:b6:cc:24:12:cc:f0:22: 7e:1f:c1:37:1d:ef:e4:c2:0d:0a:1a:fd:ba:3a:4e: ac:86:80:04:2b:52:0e:23:47:a7:4c:9c:ea:07:91: 6a:b1:77:fc:f3:01:b7:b1:65:ab:a0:a1:cf:8d:83: a7:a5:d5:9b:d6:e2:a7:4e:85:cc:19:05:df:55:2c: ad:f1:c8:45:f3:71:8d:02:36:1a:8f:5d:ed:d7:1d: 5c:fe:58:12:6e:32:60:e3:12:e5:15:fa:49:0d:73: 63:f7:ec:b3:ac:09:44:3a:46:90:a6:f3:ce:93:9c: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8F:F9:93:19:C7:0A:78:09:3F:A8:61:7A:13:24:B0:EE:08:72:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:ed:93:3e:3a:65:c0:6b:d3:06:2a:b4:a5:9f:39:89:ce: 64:47:d0:e7:22:e7:34:4a:d7:dd:f6:0a:13:d8:26:43:22:4e: 48:3d:93:e9:55:f3:66:b0:6c:ea:81:02:2e:52:7a:f8:12:ee: e6:4a:e0:3a:9b:3a:3d:15:43:ba:f5:2d:d9:78:5c:a2:93:2a: 1e:23:c0:fd:6f:db:e4:1b:22:a2:b4:a3:59:15:73:b8:3c:95: ce:82:65:ab:bb:6a:70:ee:60:ef:35:31:8b:cc:e5:13:3e:fd: 40:56:0b:93:52:23:e4:fd:4d:59:76:7a:63:50:f0:6a:01:dd: 1d:1e:4b:08:8d:f6:fa:0d:f1:10:15:f5:fc:0e:c6:f1:73:e5: 33:d5:54:e0:f9:57:78:39:21:ac:44:0c:e9:2c:0b:9b:d4:73: 08:17:86:60:75:31:46:18:3a:36:e2:af:33:58:d0:0d:db:da: db:9c:54:03:3b:47:5f:e8:7b:42:f2:91:82:60:72:52:85:81: 90:93:2f:9d:5b:63:57:76:d2:b5:a7:c6:ca:d7:72:02:16:60: 99:76:03:00:13:b7:98:da:74:7f:e8:6c:35:9c:f2:74:15:32: c1:f6:11:08:2a:63:dc:7c:03:9d:a6:8d:79:4d:c5:b3:19:07: 8f:f5:fd:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAyAUok5hjUzVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YzI2ZmM4YjYtZDIwOS00MjFmLTlmNTktY2U0ZGZhODhlNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTlZK13Tj4h2mFLIdfQEB9hvbnE2z8kgbVLk ybXM3oQZRMg/6UD59QjqOy2nSyllL2pThPNihE8TEOs8ppK2wLClKjYOvGjuvVz7 m45L7wUSl9uNDQ07zHDjsJCuoApZvLMTHvttYQi/9hTNIcU5KF2afzNDkhP0V+c/ +6GBCbJlhkj8jTxp/RxSzOINyrbMJBLM8CJ+H8E3He/kwg0KGv26Ok6shoAEK1IO I0enTJzqB5FqsXf88wG3sWWroKHPjYOnpdWb1uKnToXMGQXfVSyt8chF83GNAjYa j13t1x1c/lgSbjJg4xLlFfpJDXNj9+yzrAlEOkaQpvPOk5yg6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKP+ZMZxwp4CT+oYXoTJLDuCHIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzA4N2NhNTktMjhiOS0z MmY3LWIyNTItZTRmMjA0MGNmOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNH7ZM+OmXAa9MGKrSlnzmJzmRH0Oci5zRK1932ChPYJkMiTkg9 k+lV82awbOqBAi5SevgS7uZK4DqbOj0VQ7r1Ldl4XKKTKh4jwP1v2+QbIqK0o1kV c7g8lc6CZau7anDuYO81MYvM5RM+/UBWC5NSI+T9TVl2emNQ8GoB3R0eSwiN9voN 8RAV9fwOxvFz5TPVVOD5V3g5IaxEDOksC5vUcwgXhmB1MUYYOjbirzNY0A3b2tuc VAM7R1/oe0LykYJgclKFgZCTL51bY1d20rWnxsrXcgIWYJl2AwATt5jadH/obDWc 8nQVMsH2EQgqY9x8A52mjXlNxbMZB4/1/dU= -----END CERTIFICATE-----Generated at Wed May 13 02:36:03 2026 by rpki-client