$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa File: 067a1732-d8a0-317f-b6a5-d117f0a964df.roa (raw, json) Hash identifier: ai6wVmEDYR6sLBOBs8cQHObUMaNSOmAeDJwZvgmqckk= Subject key identifier: BD:09:9A:51:53:CA:81:75:01:A1:2D:E3:5E:F1:0C:D3:B5:33:A9:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A96B4E991ECE9E35B5900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396591 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:96:b4:e9:91:ec:e9:e3:5b:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=1a7b1f82-0975-4367-82e5-c61b8eb72ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:34:00:6b:8d:b2:66:36:b0:9c:0b:e8:ff: 07:a0:20:13:ea:32:3d:46:8e:d0:e7:68:e8:b9:e4: 21:c5:8e:bc:83:a4:2c:ba:88:f3:45:3d:f1:4f:cb: 3a:3e:c6:a1:d0:43:30:49:a8:ca:58:88:53:7f:4f: 6e:55:27:9c:e0:89:5b:a3:5e:71:4c:76:28:ef:5d: c7:05:8e:cd:6c:07:e0:18:df:6e:3a:1a:0b:76:98: e4:1d:77:ba:80:9d:1e:d0:46:fd:48:63:d4:f8:39: 36:8e:b3:f8:3e:6b:a7:4c:d2:b4:a7:39:f0:ef:57: 46:ef:e3:2c:a4:cb:7a:9c:77:45:58:fb:c6:e5:d6: 02:e9:4e:98:5f:b4:8f:a3:00:d2:f3:c9:ff:57:29: b3:64:0e:38:21:e1:c5:ce:df:6c:c9:83:ec:3f:c1: 8d:41:2d:bc:5f:13:0f:f4:f9:70:53:29:76:32:06: b6:3a:28:e3:6b:ad:42:d4:d8:c8:1f:08:48:66:53: 1b:be:af:df:5a:59:84:e7:9e:2c:b3:d7:c5:fd:a2: 74:73:1f:80:85:6e:50:0e:1c:55:58:61:3c:2e:62: 1d:8d:af:b8:6d:b5:86:91:3e:fa:bd:f3:9b:2f:ad: f6:26:22:25:ca:5b:27:d2:51:4a:f4:0e:fa:83:e1: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:09:9A:51:53:CA:81:75:01:A1:2D:E3:5E:F1:0C:D3:B5:33:A9:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/067a1732-d8a0-317f-b6a5-d117f0a964df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:49:9f:70:64:5e:17:b8:cc:a8:ce:87:24:c6:00:e3:4a:f4: d3:06:fc:72:71:2b:21:5e:3a:9b:fa:b4:a9:38:31:30:39:1f: cb:5f:e5:d9:04:f7:73:5d:76:a7:da:eb:1a:f7:c3:1f:3c:00: e6:0a:b5:4f:c3:31:d6:94:d3:f7:57:ab:ec:aa:36:fc:bd:3b: 12:b7:06:5e:5d:dc:7a:a5:12:01:ae:0c:45:db:f2:02:c9:50: aa:b5:c2:ae:ea:7a:3f:9e:2c:f6:5c:a9:a3:26:22:9b:4f:95: 3a:94:9f:8b:37:d9:62:dd:4c:7e:a5:b9:29:d3:31:fd:65:d9: d6:d1:31:f3:4e:0c:09:cd:48:6f:63:cc:9f:4a:a6:59:39:a3: 58:a6:69:3e:fa:f9:b1:42:c3:52:00:26:1f:6f:1a:bd:12:fd: 9e:89:eb:d7:71:7e:8a:6d:7d:45:84:c6:4e:59:c4:13:ba:40: f8:5d:de:fb:46:36:e9:a5:d2:e1:2e:c7:36:eb:7c:8b:38:99: 68:eb:07:9a:d2:c5:72:bd:73:0f:2c:d1:a2:2a:aa:b9:a0:eb: 72:ca:f2:7e:3b:17:2f:47:c7:82:b6:89:6f:d5:a9:cd:99:6d: 89:2a:38:82:d9:4e:a0:b9:b1:20:53:ea:8f:e6:5e:87:09:32: c3:66:69:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apa06ZHs6eNbWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MWE3YjFmODItMDk3NS00MzY3LTgyZTUtYzYxYjhlYjcyZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH40AGuNsmY2sJwL6P8HoCAT6jI9Ro7Q52jo ueQhxY68g6QsuojzRT3xT8s6Psah0EMwSajKWIhTf09uVSec4Ilbo15xTHYo713H BY7NbAfgGN9uOhoLdpjkHXe6gJ0e0Eb9SGPU+Dk2jrP4PmunTNK0pznw71dG7+Ms pMt6nHdFWPvG5dYC6U6YX7SPowDS88n/VymzZA44IeHFzt9syYPsP8GNQS28XxMP 9PlwUyl2Mga2Oijja61C1NjIHwhIZlMbvq/fWlmE554ss9fF/aJ0cx+AhW5QDhxV WGE8LmIdja+4bbWGkT76vfObL632JiIlylsn0lFK9A76g+HplQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL0JmlFTyoF1AaEt417xDNO1M6lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY3YTE3MzItZDhhMC0z MTdmLWI2YTUtZDExN2YwYTk2NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvSZ9wZF4XuMyozockxgDjSvTTBvxycSshXjqb +rSpODEwOR/LX+XZBPdzXXan2usa98MfPADmCrVPwzHWlNP3V6vsqjb8vTsStwZe Xdx6pRIBrgxF2/ICyVCqtcKu6no/niz2XKmjJiKbT5U6lJ+LN9li3Ux+pbkp0zH9 ZdnW0THzTgwJzUhvY8yfSqZZOaNYpmk++vmxQsNSACYfbxq9Ev2eievXcX6KbX1F hMZOWcQTukD4Xd77RjbppdLhLsc263yLOJlo6wea0sVyvXMPLNGiKqq5oOtyyvJ+ OxcvR8eCtolv1anNmW2JKjiC2U6gubEgU+qP5l6HCTLDZmkH -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:07 2026 by rpki-client