$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00a7a818-e810-37be-9765-97a415dcc86d.roa File: 00a7a818-e810-37be-9765-97a415dcc86d.roa (raw, json) Hash identifier: 80P422teUXjpWRTNbfY2nhWxPYTn1LtVebj7EcGN/+Q= Subject key identifier: 19:1C:0A:28:57:9D:67:F6:89:A3:E7:BA:2B:F2:88:F1:1F:AE:19:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9AB9BEC1E067076FB880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00a7a818-e810-37be-9765-97a415dcc86d.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396581 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9a:b9:be:c1:e0:67:07:6f:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a6d1edff-16d8-465f-b9bd-d2d7334d6435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:70:b5:27:63:60:3a:67:2f:0b:ed:f0:85: c7:e4:26:ff:db:c9:d0:39:2e:be:75:e1:28:27:d1: a9:a9:8a:a5:30:5e:22:92:66:86:33:4c:62:9e:e9: 73:c6:15:7a:ef:6e:30:21:f7:d3:02:50:dc:ed:3c: ac:d3:4c:68:8b:c8:e8:39:58:2c:ca:38:a5:10:52: 14:bb:84:42:4f:68:ac:74:8c:02:be:5b:43:1a:ca: c3:d9:d9:7f:51:48:d5:f4:3e:0b:64:1a:7c:de:1a: c9:db:a1:cd:32:20:29:18:18:c0:a8:e8:ea:62:f3: b8:49:dd:dd:fa:e0:5e:b3:49:41:aa:db:31:6e:ec: 46:20:24:e9:80:2b:98:55:33:79:e3:d2:63:dd:be: 99:bb:61:db:96:d7:62:5a:db:e3:56:6c:3b:6c:25: 46:68:e6:34:f1:5e:a1:c6:71:92:23:66:65:36:4b: b3:03:be:cc:e1:3b:ef:d5:ce:a0:1d:61:be:7c:6a: ae:78:fb:80:87:37:1c:fe:85:d0:af:92:56:21:30: f4:32:d3:f4:d7:11:8f:1b:7d:26:1d:24:27:08:c3: 4d:66:6d:5f:ac:7c:52:70:38:3e:51:85:2b:28:81: 56:f9:2e:13:2e:73:63:48:30:0c:a2:18:34:3d:24: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:0A:28:57:9D:67:F6:89:A3:E7:BA:2B:F2:88:F1:1F:AE:19:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00a7a818-e810-37be-9765-97a415dcc86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6e:72:e7:7b:6e:8f:79:f8:57:fa:7e:53:17:e0:97:7a:0f: 45:9d:8e:86:c1:a8:11:c4:0c:e8:4f:e8:de:fa:dd:0f:9b:21: 2e:62:42:62:af:83:66:dd:82:c2:0e:00:41:5c:02:b4:41:c8: 4c:40:27:7c:18:7b:76:5b:c5:06:44:3f:f0:29:09:82:ed:07: 39:6f:16:25:17:f1:7a:67:ef:c7:fd:a6:1d:b7:24:dd:3c:c4: 44:4a:c0:99:85:6b:9f:17:dc:d9:78:06:d7:d7:b6:74:42:e8: 7f:2a:49:9d:69:cc:18:a3:20:4b:aa:3b:e1:54:29:b3:22:1a: 82:6a:f4:f8:70:79:a6:aa:e2:44:11:26:da:5a:ea:b8:33:95: 3d:26:ee:57:3f:02:74:d7:b5:69:8c:44:68:d3:97:f1:0e:ca: 89:44:83:25:85:09:f5:7c:9e:92:a9:3e:84:42:9f:59:1b:0e: ee:14:fb:60:e2:bb:65:30:0a:cd:ee:09:d8:5e:23:e8:a2:e6: b6:1c:e3:0d:2a:b0:02:40:3c:b2:3d:60:2f:48:70:2c:cd:07: de:42:af:a4:61:b5:44:4c:67:c4:6c:5a:10:d7:d7:23:1c:30: 17:f3:8a:35:20:76:00:0f:f1:fe:d8:3d:21:51:28:04:88:d9: 6b:92:1e:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pq5vsHgZwdvuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTZkMWVkZmYtMTZkOC00NjVmLWI5YmQtZDJkNzMzNGQ2NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOFwtSdjYDpnLwvt8IXH5Cb/28nQOS6+deEo J9GpqYqlMF4ikmaGM0xinulzxhV6724wIffTAlDc7Tys00xoi8joOVgsyjilEFIU u4RCT2isdIwCvltDGsrD2dl/UUjV9D4LZBp83hrJ26HNMiApGBjAqOjqYvO4Sd3d +uBes0lBqtsxbuxGICTpgCuYVTN549Jj3b6Zu2HbltdiWtvjVmw7bCVGaOY08V6h xnGSI2ZlNkuzA77M4Tvv1c6gHWG+fGquePuAhzcc/oXQr5JWITD0MtP01xGPG30m HSQnCMNNZm1frHxScDg+UYUrKIFW+S4TLnNjSDAMohg0PSS+zQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBkcCihXnWf2iaPnuivyiPEfrhlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBhN2E4MTgtZTgxMC0z N2JlLTk3NjUtOTdhNDE1ZGNjODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmbnLne26PefhX+n5TF+CXeg9FnY6GwagRxAzo T+je+t0PmyEuYkJir4Nm3YLCDgBBXAK0QchMQCd8GHt2W8UGRD/wKQmC7Qc5bxYl F/F6Z+/H/aYdtyTdPMRESsCZhWufF9zZeAbX17Z0Quh/KkmdacwYoyBLqjvhVCmz IhqCavT4cHmmquJEESbaWuq4M5U9Ju5XPwJ017VpjERo05fxDsqJRIMlhQn1fJ6S qT6EQp9ZGw7uFPtg4rtlMArN7gnYXiPooua2HOMNKrACQDyyPWAvSHAszQfeQq+k YbVETGfEbFoQ19cjHDAX84o1IHYAD/H+2D0hUSgEiNlrkh4z -----END CERTIFICATE-----Generated at Fri Apr 17 03:08:49 2026 by rpki-client