$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa File: ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa (raw, json) Hash identifier: MGK0tw+AagABasUCrZuZfpzvj3xhfigAgMYBXxrcwOs= Subject key identifier: DD:F5:F0:14:29:6D:0A:22:C0:3F:FB:F4:44:58:43:5F:FC:95:F9:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D91C01B62330AB91EE3D02B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396551 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1b:62:33:0a:b9:1e:e3:d0:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=d4d4737b-2ace-4834-b874-0703f00ff302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:29:83:f6:0b:78:f4:c5:63:08:91:c6:54: 95:4a:93:e3:80:32:42:b8:f2:81:c9:cd:e7:d3:4b: e7:4e:9e:5e:00:cc:fd:00:b1:fe:c9:e8:1e:f2:b0: ab:83:a5:89:e1:83:1d:fe:1d:51:f3:cf:da:c9:ec: 68:a2:0c:a3:fd:4f:bc:17:56:37:7f:0a:37:f7:1f: 64:e9:86:f4:2b:a8:a5:cd:2f:07:9c:a4:a8:e2:80: 1f:b1:bd:0e:c1:2e:04:59:a1:7a:63:26:90:2b:21: 69:8e:62:c7:2b:77:31:7f:0f:61:f9:1c:4c:d0:d6: b9:5d:9c:1f:4f:f5:da:78:d0:00:aa:34:72:31:f3: 3b:bd:cd:43:f9:56:05:69:fb:dc:7a:04:5d:08:bb: b7:a3:5a:e1:85:69:64:7e:d3:0b:c1:6b:1f:3c:d4: 25:ba:0c:bd:78:23:cb:a5:7c:7b:8d:37:65:39:08: 2e:60:60:4b:a7:d3:6b:96:44:3a:42:a6:8d:be:67: 33:6a:e6:00:75:e8:61:62:ba:a6:2f:3b:86:15:5d: 57:32:af:67:09:9e:05:5f:1b:b7:de:f3:ba:07:bd: 00:1a:b1:79:b7:88:59:43:ae:43:15:19:06:61:03: 45:53:33:b5:35:0e:83:91:16:0f:65:34:f9:8a:f1: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F5:F0:14:29:6D:0A:22:C0:3F:FB:F4:44:58:43:5F:FC:95:F9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d6:bb:d7:60:39:db:fa:b5:0d:d8:c5:af:23:d8:c5:96:74: a7:88:7a:d3:f6:75:b7:59:a3:16:ce:ec:d5:41:f5:96:b9:b2: 04:2c:98:69:fc:3b:78:f9:95:84:bf:cf:01:61:99:10:2f:fe: fc:29:41:f5:82:b3:28:ec:a3:32:7b:e3:e9:5d:fc:10:e6:5b: 23:5c:4f:77:73:a4:ea:2c:75:a5:d3:f2:92:a4:4b:c3:52:d8: 9a:e7:30:e3:09:e7:5e:e4:9e:ab:cb:95:66:02:ee:0a:44:35: 05:de:10:cc:ec:45:93:2f:2f:d2:c0:a7:d8:50:f9:37:43:65: 7c:e8:8c:0f:e0:18:74:ca:d6:9a:74:72:46:be:97:93:96:71: 63:99:b4:ee:2c:d9:62:b0:38:1f:de:ea:93:de:f7:86:64:b7: 47:07:3f:98:45:94:6b:f7:75:fa:c1:d8:9d:2f:a2:aa:d3:88: a2:c5:b6:1f:f7:41:d9:c6:09:da:19:33:e1:cc:77:0e:6a:03: 4c:9f:46:12:a0:e1:59:80:08:09:9f:71:17:64:72:cd:ad:c3: f4:4e:7b:12:0d:99:e7:53:61:39:df:57:d3:0d:40:bb:b8:c6: 3f:c8:10:85:77:96:20:93:bb:8b:59:8f:03:fd:cf:fa:2b:8a: 54:29:6b:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwBtiMwq5HuPQK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZDRkNDczN2ItMmFjZS00ODM0LWI4NzQtMDcwM2YwMGZmMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicUpg/YLePTFYwiRxlSVSpPjgDJCuPKByc3n 00vnTp5eAMz9ALH+yege8rCrg6WJ4YMd/h1R88/ayexoogyj/U+8F1Y3fwo39x9k 6Yb0K6ilzS8HnKSo4oAfsb0OwS4EWaF6YyaQKyFpjmLHK3cxfw9h+RxM0Na5XZwf T/XaeNAAqjRyMfM7vc1D+VYFafvcegRdCLu3o1rhhWlkftMLwWsfPNQlugy9eCPL pXx7jTdlOQguYGBLp9NrlkQ6QqaNvmczauYAdehhYrqmLzuGFV1XMq9nCZ4FXxu3 3vO6B70AGrF5t4hZQ65DFRkGYQNFUzO1NQ6DkRYPZTT5ivFgMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN318BQpbQoiwD/79ERYQ1/8lfknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY1MjcwNGYtNzk2Ni0z ZjdhLWFlN2QtMWQ3MmZkZjQ0OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXWu9dgOdv6tQ3Yxa8j2MWWdKeIetP2dbdZoxbO7NVB9Za5sgQs mGn8O3j5lYS/zwFhmRAv/vwpQfWCsyjsozJ74+ld/BDmWyNcT3dzpOosdaXT8pKk S8NS2JrnMOMJ517knqvLlWYC7gpENQXeEMzsRZMvL9LAp9hQ+TdDZXzojA/gGHTK 1pp0cka+l5OWcWOZtO4s2WKwOB/e6pPe94Zkt0cHP5hFlGv3dfrB2J0voqrTiKLF th/3QdnGCdoZM+HMdw5qA0yfRhKg4VmACAmfcRdkcs2tw/ROexINmedTYTnfV9MN QLu4xj/IEIV3liCTu4tZjwP9z/orilQpa1c= -----END CERTIFICATE-----Generated at Wed May 13 05:20:18 2026 by rpki-client