$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa File: d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa (raw, json) Hash identifier: BGx1ODiqUZ0VJ9sZd/HxOgvVRAF44An4k2IfVT477uA= Subject key identifier: 2B:C6:4D:24:6D:FE:18:55:F4:69:19:D3:D9:D0:5A:6B:8A:93:83:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DC29AFA80A7037474B61C1040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 211369 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:fa:80:a7:03:74:74:b6:1c:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=a5d4da24-ec13-48c0-9ac5-0d906475081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:2a:43:aa:a0:72:60:f3:88:2b:42:9f:46: 38:14:f1:2f:a0:7d:4d:c8:82:72:30:6a:6f:14:42: aa:f4:e4:05:05:11:fb:06:ff:cd:87:6f:fa:a0:bf: 27:24:a6:0a:9b:19:1b:64:76:1b:a0:a0:02:01:28: 1a:20:48:29:19:30:d3:45:d1:74:8f:0b:4f:5f:0d: 08:27:2a:ae:42:60:e2:10:c5:84:80:24:07:0c:2c: 89:0d:6f:8d:28:71:5e:ff:60:32:e1:1c:fd:d3:57: 04:29:b5:12:a5:35:70:e8:8a:a8:f2:6f:13:8d:99: 96:f6:f2:58:09:26:d4:18:83:73:91:2e:5e:d1:2e: 8e:2d:f5:47:d9:10:2d:47:4d:ef:3f:01:5b:c0:c6: 26:70:43:04:c7:47:1e:b5:cd:9a:d4:5a:b5:6f:e7: c9:49:34:52:1b:24:80:63:2c:bc:9d:01:ca:cb:41: d6:b2:7c:20:91:91:81:bb:34:a6:e6:e0:df:a3:67: be:b8:d1:ae:36:60:29:1f:01:41:ee:fd:58:55:30: 26:4f:a2:4f:49:07:bd:df:08:e7:a6:91:60:ce:1d: 29:49:7c:57:f3:bc:1b:b5:ae:dc:8f:e1:64:1a:d2: 1a:42:46:e4:0d:7f:d7:e7:97:6b:af:5c:61:42:71: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C6:4D:24:6D:FE:18:55:F4:69:19:D3:D9:D0:5A:6B:8A:93:83:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d7:77:4e:ab:60:e6:2d:2a:dd:84:a7:07:0b:f9:96:8e:00: e9:27:fc:19:ff:a0:22:5e:74:9d:17:60:ae:32:e1:14:54:88: 4c:64:00:12:fd:bf:ac:79:de:57:03:68:ce:b5:8a:a7:bd:93: 86:03:30:b5:45:d8:18:12:c1:a3:e0:71:03:36:80:91:66:b7: 54:83:2e:89:d9:f7:4d:ae:e3:8b:75:70:0f:e5:27:2c:76:24: 04:cc:96:ea:e0:d5:14:98:b7:54:de:e3:70:86:82:fb:4a:91: 05:b7:5e:73:c9:33:ab:f4:8c:00:75:94:e3:db:b2:a6:22:d5: e5:f5:74:28:94:0b:9e:32:13:b5:0f:2b:c9:db:ba:da:6b:9c: e1:58:23:2a:f9:77:b7:8b:e1:71:22:25:02:8e:88:d4:a0:49: 17:02:29:72:d1:e0:10:30:bc:07:94:90:45:84:6d:19:ed:ea: b4:45:02:ed:97:7c:bb:6a:a7:14:01:8f:94:e2:db:84:8a:a2: 15:1a:96:d9:ce:8a:ae:5f:9e:45:7e:b3:c8:c0:31:fb:a5:7f: c8:7a:0d:33:fd:38:2c:84:fe:c1:5e:f4:e5:5f:9e:95:7d:c1: 15:95:49:80:6a:cf:ed:3a:36:01:f0:3a:43:43:57:ec:a2:d5: f3:0c:21:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3CmvqApwN0dLYcEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk YTVkNGRhMjQtZWMxMy00OGMwLTlhYzUtMGQ5MDY0NzUwODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCMqQ6qgcmDziCtCn0Y4FPEvoH1NyIJyMGpv FEKq9OQFBRH7Bv/Nh2/6oL8nJKYKmxkbZHYboKACASgaIEgpGTDTRdF0jwtPXw0I JyquQmDiEMWEgCQHDCyJDW+NKHFe/2Ay4Rz901cEKbUSpTVw6Iqo8m8TjZmW9vJY CSbUGINzkS5e0S6OLfVH2RAtR03vPwFbwMYmcEMEx0cetc2a1Fq1b+fJSTRSGySA Yyy8nQHKy0HWsnwgkZGBuzSm5uDfo2e+uNGuNmApHwFB7v1YVTAmT6JPSQe93wjn ppFgzh0pSXxX87wbta7cj+FkGtIaQkbkDX/X55drr1xhQnHk6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCvGTSRt/hhV9GkZ09nQWmuKk4NlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY4YTAyNDEtNGNjNi0z M2FiLThkODctNWZjMmQ3ZmY1MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB613dOq2DmLSrdhKcHC/mWjgDpJ/wZ/6AiXnSd F2CuMuEUVIhMZAAS/b+sed5XA2jOtYqnvZOGAzC1RdgYEsGj4HEDNoCRZrdUgy6J 2fdNruOLdXAP5ScsdiQEzJbq4NUUmLdU3uNwhoL7SpEFt15zyTOr9IwAdZTj27Km ItXl9XQolAueMhO1DyvJ27raa5zhWCMq+Xe3i+FxIiUCjojUoEkXAily0eAQMLwH lJBFhG0Z7eq0RQLtl3y7aqcUAY+U4tuEiqIVGpbZzoquX55FfrPIwDH7pX/Ieg0z /TgshP7BXvTlX56VfcEVlUmAas/tOjYB8DpDQ1fsotXzDCF4 -----END CERTIFICATE-----Generated at Wed May 13 06:36:00 2026 by rpki-client