$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e30ef1ba-4efc-3bab-922a-7cc85a9d24ef.roa File: e30ef1ba-4efc-3bab-922a-7cc85a9d24ef.roa (raw, json) Hash identifier: l5pBw8qeV+odhrla0kdMvaPXmjxPr5d30ID9M79tYnE= Subject key identifier: 2B:EF:DA:11:C8:55:43:DA:2A:1B:9B:42:04:F1:85:74:0E:03:B0:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91BFF8B91B593E2DA7FAF300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e30ef1ba-4efc-3bab-922a-7cc85a9d24ef.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396582 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:f8:b9:1b:59:3e:2d:a7:fa:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=cec64250-11b2-4c9d-a22a-fc3ca7d0f7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:e7:a7:84:8e:e2:99:1a:5d:9d:4c:47:8b: c7:2b:ac:f7:04:22:d2:19:a0:19:e1:f1:b4:31:29: 82:aa:73:cc:39:e2:03:44:48:d0:6f:61:94:a0:d7: f4:55:e5:4c:6d:b0:a1:d6:ab:fa:86:c3:59:9a:2d: 98:ac:2e:d3:2d:5f:88:59:25:93:1b:0e:c4:70:7e: 6c:14:0f:d2:0e:f9:72:20:d9:3b:cb:f6:cb:a9:e7: 96:ce:60:88:3b:58:5d:5b:da:2e:37:da:16:26:7e: 44:88:73:0a:3b:c8:ec:68:2b:aa:51:71:fc:87:2b: 2c:32:ff:fc:86:9c:29:70:b2:a1:07:dc:bd:11:db: 2d:30:ba:78:52:b7:ff:c4:99:62:39:21:79:83:a6: 52:a6:f6:84:7a:36:44:07:0c:b1:37:e0:ed:c5:41: 3d:a3:05:73:01:37:29:c3:64:32:f6:8e:28:04:38: a9:01:be:cc:78:36:6a:e2:75:97:59:be:31:6e:40: 78:2c:a8:1a:10:66:83:f2:be:d7:ce:27:28:84:d7: 58:1f:bf:bc:58:15:9c:42:2b:9d:0b:5a:5c:0d:35: 23:91:12:c0:c7:0e:aa:87:51:4b:ba:36:cc:d0:a9: c5:87:33:94:68:62:ad:90:b8:09:55:76:be:7b:77: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:DA:11:C8:55:43:DA:2A:1B:9B:42:04:F1:85:74:0E:03:B0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e30ef1ba-4efc-3bab-922a-7cc85a9d24ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:20:71:15:28:e2:f7:f6:79:ee:fe:3d:35:75:a4:0f:74:fb: 6f:d9:42:24:68:38:67:ff:df:80:85:dd:24:cf:c7:df:d1:a7: a0:bf:d3:33:53:b6:98:02:0e:5a:1a:19:4d:9c:50:bf:2d:7b: ac:08:0d:b5:3d:34:26:da:21:a0:83:40:37:c3:00:6e:dc:d5: 70:d4:bd:96:ea:00:0c:a8:e2:24:bd:3a:a3:7d:49:b7:32:65: ef:36:d7:b6:6f:3f:3b:f5:0a:69:26:83:c0:b2:77:d8:e1:0b: 1c:4c:a9:d1:1f:ad:cb:63:d4:25:c2:2e:c4:5b:e2:b2:eb:13: 35:be:70:8c:d2:0f:0d:21:98:c9:6c:07:0e:1e:2a:a0:72:d0: 8a:0b:b0:23:43:34:ca:8b:8b:f1:44:b6:14:5d:e1:6e:cb:c9: 8e:32:93:1c:34:ac:d5:11:93:d3:d3:88:43:a1:fc:b9:4d:89: c7:bf:16:d3:f9:d9:78:52:11:22:e6:60:d7:dc:04:61:71:1c: 73:fb:c9:fc:06:1e:06:ad:18:4a:fa:e9:9f:2b:a4:c6:ec:11: 6d:44:ef:ea:58:0a:89:74:e2:0b:66:2b:f3:80:78:e4:e2:8f: 00:38:71:43:f6:db:42:3f:b2:53:85:fb:b3:c9:63:d8:8c:d8: f3:39:fc:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/i5G1k+Laf68wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Y2VjNjQyNTAtMTFiMi00YzlkLWEyMmEtZmMzY2E3ZDBmN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSjnp4SO4pkaXZ1MR4vHK6z3BCLSGaAZ4fG0 MSmCqnPMOeIDREjQb2GUoNf0VeVMbbCh1qv6hsNZmi2YrC7TLV+IWSWTGw7EcH5s FA/SDvlyINk7y/bLqeeWzmCIO1hdW9ouN9oWJn5EiHMKO8jsaCuqUXH8hyssMv/8 hpwpcLKhB9y9EdstMLp4Urf/xJliOSF5g6ZSpvaEejZEBwyxN+DtxUE9owVzATcp w2Qy9o4oBDipAb7MeDZq4nWXWb4xbkB4LKgaEGaD8r7XzicohNdYH7+8WBWcQiud C1pcDTUjkRLAxw6qh1FLujbM0KnFhzOUaGKtkLgJVXa+e3fsoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCvv2hHIVUPaKhubQgTxhXQOA7AWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTMwZWYxYmEtNGVmYy0z YmFiLTkyMmEtN2NjODVhOWQyNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkgcRUo4vf2ee7+PTV1pA90+2/ZQiRoOGf/34CF3STPx9/Rp6C/ 0zNTtpgCDloaGU2cUL8te6wIDbU9NCbaIaCDQDfDAG7c1XDUvZbqAAyo4iS9OqN9 SbcyZe8217ZvPzv1Cmkmg8Cyd9jhCxxMqdEfrctj1CXCLsRb4rLrEzW+cIzSDw0h mMlsBw4eKqBy0IoLsCNDNMqLi/FEthRd4W7LyY4ykxw0rNURk9PTiEOh/LlNice/ FtP52XhSESLmYNfcBGFxHHP7yfwGHgatGEr66Z8rpMbsEW1E7+pYCol04gtmK/OA eOTijwA4cUP220I/slOF+7PJY9iM2PM5/C8= -----END CERTIFICATE-----Generated at Wed May 13 03:09:24 2026 by rpki-client