$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa File: db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa (raw, json) Hash identifier: UXr6deaNdPhg2vsaOFO+7KOjLMZ8XtM1KZ2EVm+j6mM= Subject key identifier: 1C:4F:1B:06:0A:C8:7D:7D:C1:5E:E0:AE:59:2E:80:66:18:9D:D5:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01C6E8D86638073881F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396573 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1c:6e:8d:86:63:80:73:88:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=671df849-6522-47f1-a7ce-db04eb207dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:93:f5:2b:8c:d5:f3:bc:f3:00:22:39:34: a0:22:f2:b5:1d:ce:94:09:dd:cf:29:12:b9:bc:59: b5:90:55:0e:d3:b2:b5:b9:cf:50:75:94:21:e2:97: aa:26:da:c6:91:19:1c:27:3b:b6:2c:89:f6:db:68: fd:da:d9:a9:de:2b:23:0e:07:2a:d9:ed:90:b2:c5: 09:04:f9:1f:33:26:61:5a:51:74:bd:e1:bb:90:d4: b9:42:51:a8:9b:e3:c8:2c:9c:96:4c:63:b7:f5:be: f3:85:a4:da:31:b4:5e:a5:33:48:72:82:5f:a0:e8: b0:7f:92:67:5f:0c:ed:f2:4c:ab:3b:a3:24:c6:26: 01:2f:e9:19:e4:87:4b:1c:75:18:9d:31:19:f1:6d: dd:6c:a8:98:b4:2c:81:b2:a8:aa:ec:52:24:42:88: 43:b7:45:39:af:10:c6:72:62:19:27:cd:19:0a:51: a0:b3:08:15:a5:9b:85:54:e6:56:3d:57:97:2c:ca: 3a:a0:03:48:b0:f5:21:99:32:a2:17:87:75:74:af: 18:3a:7c:c0:b6:91:4e:72:9e:03:9b:37:11:e0:23: f6:61:58:b1:a0:02:79:ee:ae:c7:14:c4:67:a1:f7: 8a:77:84:d1:ac:e3:77:48:68:02:e3:10:29:07:33: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:1B:06:0A:C8:7D:7D:C1:5E:E0:AE:59:2E:80:66:18:9D:D5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:db:ac:b2:fa:46:4b:03:3e:89:21:ce:de:b0:3b:33:1c: 28:41:17:e6:cd:38:c7:c6:5c:82:cb:32:8b:41:cb:89:ef:7e: b5:37:3d:80:f2:7c:d4:24:15:2c:36:38:74:fa:cc:ae:18:e0: c6:40:e6:8c:21:44:1b:01:2d:20:ce:53:e3:c0:17:82:f8:27: e7:1a:80:2e:d5:f3:7a:8e:f9:9a:b7:c0:35:b0:94:9b:82:6d: 5f:7c:b7:c4:60:41:22:71:38:7d:5e:a4:e2:26:9e:9c:1e:26: ee:2d:51:f1:de:f8:77:76:46:f8:d4:86:68:f2:fe:38:ae:02: 89:bc:63:47:89:4f:e7:42:f2:10:58:0f:b4:48:2f:df:4d:fd: fd:4c:c1:bd:41:97:d2:e1:f4:56:bd:8f:18:2d:64:41:53:9b: 57:ff:99:2d:63:0e:d0:a2:cb:b1:ed:a5:c8:42:3b:34:0f:ca: b1:8d:91:1b:72:a9:9c:a6:2b:79:1a:9f:51:92:0c:f9:c4:0c: bc:55:09:96:38:b0:8d:43:09:3a:09:4b:cf:28:a8:cc:3c:32: 2d:6d:6b:8a:b0:6a:64:cf:1e:26:79:ae:80:2a:d6:a3:04:5c: dd:5f:ac:b0:da:fd:85:8f:4b:cc:40:2b:48:f9:85:94:49:dc: 3e:b4:99:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBxujYZjgHOIHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NjcxZGY4NDktNjUyMi00N2YxLWE3Y2UtZGIwNGViMjA3ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvleT9SuM1fO88wAiOTSgIvK1Hc6UCd3PKRK5 vFm1kFUO07K1uc9QdZQh4peqJtrGkRkcJzu2LIn222j92tmp3isjDgcq2e2QssUJ BPkfMyZhWlF0veG7kNS5QlGom+PILJyWTGO39b7zhaTaMbRepTNIcoJfoOiwf5Jn Xwzt8kyrO6MkxiYBL+kZ5IdLHHUYnTEZ8W3dbKiYtCyBsqiq7FIkQohDt0U5rxDG cmIZJ80ZClGgswgVpZuFVOZWPVeXLMo6oANIsPUhmTKiF4d1dK8YOnzAtpFOcp4D mzcR4CP2YVixoAJ57q7HFMRnofeKd4TRrON3SGgC4xApBzO9RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxPGwYKyH19wV7grlkugGYYndVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIyZjJlYzMtNjdmMi0z NWI1LWI1ZmQtMTlmZDgxZWE4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMh26yy+kZLAz6JIc7esDszHChBF+bNOMfGXILLMotBy4nvfrU3 PYDyfNQkFSw2OHT6zK4Y4MZA5owhRBsBLSDOU+PAF4L4J+cagC7V83qO+Zq3wDWw lJuCbV98t8RgQSJxOH1epOImnpweJu4tUfHe+Hd2RvjUhmjy/jiuAom8Y0eJT+dC 8hBYD7RIL99N/f1Mwb1Bl9Lh9Fa9jxgtZEFTm1f/mS1jDtCiy7HtpchCOzQPyrGN kRtyqZymK3kan1GSDPnEDLxVCZY4sI1DCToJS88oqMw8Mi1ta4qwamTPHiZ5roAq 1qMEXN1frLDa/YWPS8xAK0j5hZRJ3D60mcg= -----END CERTIFICATE-----Generated at Wed May 13 02:57:00 2026 by rpki-client