$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json) Hash identifier: oBFz8B3TTQYn48edIN4kRIvUf1ay053VOT4rYVgc0rs= Subject key identifier: 3E:13:73:30:D5:50:6F:C9:E9:7E:07:D5:39:1B:18:12:FA:23:A9:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DADAAE06D66882E3796A69D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 0 IP address blocks: 2620:74:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e0:6d:66:88:2e:37:96:a6:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=09b96820-570c-4eb1-a135-238049d8bf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:27:ee:f1:8e:5c:8d:1d:3a:1b:43:0d:9b: 40:82:e1:ec:bb:e6:42:c5:a5:a0:49:ee:de:26:25: 5c:4d:a8:23:d0:2c:65:f3:b8:74:f0:b7:bc:8d:76: 69:f5:58:32:a4:4a:01:79:84:43:06:e6:f1:26:f9: 63:d9:21:68:b2:f5:fd:51:d6:ff:54:1c:35:a9:4c: 96:97:5a:c7:37:96:77:b6:ce:80:0f:60:3b:b8:cb: 2d:a9:63:bf:56:50:ee:92:20:22:f2:9c:03:37:b4: d0:32:0a:b5:2a:b6:64:67:53:cb:8e:12:d4:57:fb: 33:83:ec:e8:71:2c:99:05:51:53:0d:30:da:19:3b: 82:91:9b:93:70:2e:12:5e:b3:ac:1a:af:6e:41:68: 0c:77:77:39:df:fe:4c:b1:c0:c4:e9:da:a2:90:95: eb:79:71:f9:65:76:8e:85:3f:e2:14:bb:e0:20:e7: e7:8f:38:b2:98:8a:0c:62:93:12:77:43:79:99:7f: 23:52:35:76:3c:65:2a:4c:e9:92:c5:65:4c:a9:62: 66:a9:a1:b3:c0:d5:d1:91:32:f7:6c:dd:ee:7c:1d: 47:03:c8:43:31:94:1d:fe:c4:1a:0a:db:76:97:86: 8a:72:cf:4c:43:76:db:82:84:22:81:5d:ea:ff:dc: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:73:30:D5:50:6F:C9:E9:7E:07:D5:39:1B:18:12:FA:23:A9:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:09:17:98:55:8e:78:b7:12:7e:01:a4:75:40:c7:7a:88:5d: 82:f9:6d:16:32:2a:4a:fe:59:10:5f:26:bd:6e:75:4e:ab:90: 6b:b6:9d:6b:8b:58:73:f1:04:dd:b5:10:d0:7a:19:d8:d8:35: 5f:5e:30:e1:ac:af:b3:8c:fa:44:19:27:b6:fe:aa:0e:69:af: ce:a8:3f:29:ad:c7:eb:7a:31:40:a4:ba:94:f1:a3:79:ad:87: e1:27:1a:cd:f3:41:b8:d6:68:45:e7:3c:7c:dc:f4:8b:62:e6: ed:41:81:a9:cc:24:87:92:c9:d4:ad:2b:e0:cc:b2:1e:7c:6c: 8e:55:e1:bc:51:b3:c9:3f:45:a7:e9:3a:53:8b:25:b6:c2:d2: 7f:4b:a3:3d:fc:73:9a:7a:3e:67:33:8a:6a:b2:0a:65:f8:b1: 35:b8:98:86:32:7f:9b:dc:fd:29:93:73:71:37:61:af:2d:1b: b2:16:5e:e1:72:02:93:a9:63:7e:8c:e8:21:25:bc:c2:de:c5: 9c:f3:ce:a8:fb:3b:3a:a2:3d:e8:6d:cf:aa:e2:1e:19:38:65: 77:62:4a:cd:6c:69:b7:a1:91:bd:65:9e:b3:2c:9e:2f:92:55: 7e:7a:d0:8b:75:f6:17:ab:13:19:09:9f:75:ee:27:7e:5e:70: f2:e5:35:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2tquBtZoguN5amnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MDliOTY4MjAtNTcwYy00ZWIxLWExMzUtMjM4MDQ5ZDhiZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYn7vGOXI0dOhtDDZtAguHsu+ZCxaWgSe7e JiVcTagj0Cxl87h08Le8jXZp9VgypEoBeYRDBubxJvlj2SFosvX9Udb/VBw1qUyW l1rHN5Z3ts6AD2A7uMstqWO/VlDukiAi8pwDN7TQMgq1KrZkZ1PLjhLUV/szg+zo cSyZBVFTDTDaGTuCkZuTcC4SXrOsGq9uQWgMd3c53/5MscDE6dqikJXreXH5ZXaO hT/iFLvgIOfnjziymIoMYpMSd0N5mX8jUjV2PGUqTOmSxWVMqWJmqaGzwNXRkTL3 bN3ufB1HA8hDMZQd/sQaCtt2l4aKcs9MQ3bbgoQigV3q/9xfaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4TczDVUG/J6X4H1TkbGBL6I6nwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlN2VjODAtZWY2Mi0z MTg3LWJkZDMtNTJkMTI2YTQzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdACw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEIJF5hVjni3En4BpHVAx3qIXYL5bRYyKkr+WRBfJr1udU6rkGu2 nWuLWHPxBN21ENB6GdjYNV9eMOGsr7OM+kQZJ7b+qg5pr86oPymtx+t6MUCkupTx o3mth+EnGs3zQbjWaEXnPHzc9Iti5u1BganMJIeSydStK+DMsh58bI5V4bxRs8k/ RafpOlOLJbbC0n9Loz38c5p6PmczimqyCmX4sTW4mIYyf5vc/SmTc3E3Ya8tG7IW XuFyApOpY36M6CElvMLexZzzzqj7OzqiPehtz6riHhk4ZXdiSs1sabehkb1lnrMs ni+SVX560It19herExkJn3XuJ35ecPLlNYE= -----END CERTIFICATE-----Generated at Wed May 13 06:07:24 2026 by rpki-client