$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa File: d868d400-3d3e-3000-b381-099279ca3a2b.roa (raw, json) Hash identifier: nIWC+BBofordt/r2uQKyF8FUi3NdxzNKKhQZ4n9prNg= Subject key identifier: 08:6C:3F:E9:2E:BB:AF:FD:B4:58:69:47:7F:F3:FD:90:26:06:DF:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01E9CE63CE11FFAC8BF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 397196 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1e:9c:e6:3c:e1:1f:fa:c8:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=8bf4b8ee-9868-436d-a2dd-eb612d2c9987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:c5:53:d1:85:7d:ea:27:b8:e4:79:a5:df: 3b:c0:d3:78:3c:2f:7d:bc:bf:b0:9b:38:55:9e:69: 46:9a:1e:5a:87:d1:ae:80:bd:a9:52:6d:18:12:a2: 07:f6:89:0a:27:d4:14:d1:32:dd:f2:a8:52:79:88: f6:07:79:5c:78:c1:0f:0a:8e:11:0f:dd:23:68:31: 26:3c:04:5a:c3:ab:35:25:75:7f:70:f3:58:c6:20: f2:86:d7:6b:79:50:4a:04:2e:21:85:8b:26:ef:c9: 9a:ed:79:69:61:fb:fd:17:9a:95:22:11:9e:65:fa: 20:de:f7:0a:67:8a:0d:e7:3d:cb:b4:23:4e:3e:ca: 9b:9c:f9:ee:81:b1:f0:ab:30:65:f2:a1:5f:1a:71: 00:22:f4:c1:8d:24:20:ea:ce:98:ec:25:24:68:6f: 75:50:42:de:d2:7b:e3:53:f8:8b:38:bc:c0:35:9f: 5b:aa:fe:92:26:8e:68:e8:37:7b:b7:31:21:46:37: 83:ca:e1:47:ec:be:7d:ec:b8:35:70:00:b6:95:ee: ec:7e:f4:59:55:3a:71:01:4c:c5:63:cf:a8:87:ad: 39:a0:fc:f9:0a:03:80:d7:ee:4e:17:ee:78:f2:d0: d7:6c:a1:71:0e:d3:15:22:83:e5:7d:97:87:88:18: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6C:3F:E9:2E:BB:AF:FD:B4:58:69:47:7F:F3:FD:90:26:06:DF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d868d400-3d3e-3000-b381-099279ca3a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:37:3f:c5:a3:ac:73:40:6e:4f:d4:fe:41:f0:04:96:a0:8f: 92:eb:fa:7b:b8:98:93:38:28:c6:44:69:dd:fd:8c:51:9b:6d: 41:43:40:03:c2:90:84:59:89:01:6d:42:cc:ff:5e:3c:90:d5: e4:5f:1e:13:19:da:62:f2:be:8d:44:7c:58:87:e6:bb:69:62: 08:eb:3c:57:31:f4:d1:ee:3a:52:62:16:72:fd:7c:51:de:2d: 65:6e:bd:98:2c:5b:cc:4a:71:9b:5e:6e:8b:dc:6d:b2:fa:75: 9c:6e:4c:22:f7:46:42:80:73:f7:97:7a:4d:fe:25:6f:40:70: 95:91:79:6e:82:cc:f9:51:fd:75:71:a9:71:f1:bf:f9:28:72: c5:bd:8a:c5:b9:c0:e0:bf:63:50:51:e3:df:bc:8a:e3:c3:00: ac:f7:c3:75:9a:db:97:d8:25:88:03:fe:13:c9:1f:9d:02:24: 58:d0:7e:07:b8:a5:78:99:37:c0:4b:cd:6b:ce:53:a5:ed:3e: 0d:83:5d:3d:f9:42:40:f5:48:b7:e3:3f:56:a5:56:19:94:cb: 2b:70:c2:3a:17:bf:9a:0a:7f:b7:1a:57:41:8a:dd:18:8d:38: 89:ab:f9:39:58:c9:40:20:4e:a4:c0:4f:b0:21:a6:01:1a:0a: 93:df:0c:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwB6c5jzhH/rIv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OGJmNGI4ZWUtOTg2OC00MzZkLWEyZGQtZWI2MTJkMmM5OTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokbFU9GFfeonuOR5pd87wNN4PC99vL+wmzhV nmlGmh5ah9GugL2pUm0YEqIH9okKJ9QU0TLd8qhSeYj2B3lceMEPCo4RD90jaDEm PARaw6s1JXV/cPNYxiDyhtdreVBKBC4hhYsm78ma7XlpYfv9F5qVIhGeZfog3vcK Z4oN5z3LtCNOPsqbnPnugbHwqzBl8qFfGnEAIvTBjSQg6s6Y7CUkaG91UELe0nvj U/iLOLzANZ9bqv6SJo5o6Dd7tzEhRjeDyuFH7L597Lg1cAC2le7sfvRZVTpxAUzF Y8+oh605oPz5CgOA1+5OF+548tDXbKFxDtMVIoPlfZeHiBhc1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhsP+kuu6/9tFhpR3/z/ZAmBt+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDg2OGQ0MDAtM2QzZS0z MDAwLWIzODEtMDk5Mjc5Y2EzYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEA3P8WjrHNAbk/U/kHwBJagj5Lr+nu4mJM4KMZEad39jFGbbUFD QAPCkIRZiQFtQsz/XjyQ1eRfHhMZ2mLyvo1EfFiH5rtpYgjrPFcx9NHuOlJiFnL9 fFHeLWVuvZgsW8xKcZtebovcbbL6dZxuTCL3RkKAc/eXek3+JW9AcJWReW6CzPlR /XVxqXHxv/kocsW9isW5wOC/Y1BR49+8iuPDAKz3w3Wa25fYJYgD/hPJH50CJFjQ fge4pXiZN8BLzWvOU6XtPg2DXT35QkD1SLfjP1alVhmUyytwwjoXv5oKf7caV0GK 3RiNOImr+TlYyUAgTqTAT7AhpgEaCpPfDEk= -----END CERTIFICATE-----Generated at Wed May 13 05:41:17 2026 by rpki-client