$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa File: 06d44412-91c0-329a-857b-f8c871429cb4.roa (raw, json) Hash identifier: NmvG4Z6enFufWjqbLDyZ7rW11nT1NKn5hf50ma48X9I= Subject key identifier: 57:B6:F5:91:B7:BB:41:EE:73:48:CC:AD:41:A6:21:08:85:53:7E:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A94A8AA3B2ACCC48462E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396610 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:94:a8:aa:3b:2a:cc:c4:84:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=9c18ca70-a5a8-4c3b-8602-af84a2591377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:86:6b:e9:99:99:d9:74:06:2d:85:1a:41: 72:4c:7b:28:15:d9:bc:2f:c2:23:7f:dd:58:4d:74: a8:40:d0:93:30:1a:c8:f0:c9:b9:21:58:06:51:80: 6a:28:c9:ba:9d:84:c1:dc:19:52:fd:a9:82:38:c7: 30:46:d7:53:72:62:18:a5:66:4f:00:a0:9f:be:14: ff:3f:8d:32:f1:d2:ff:bd:08:a0:ab:32:30:33:e2: 06:24:77:c0:db:a4:d7:46:e6:93:ca:4b:f5:f5:9a: c8:5d:80:65:00:2c:15:b0:94:ee:55:67:2b:7c:2f: e3:c2:54:c9:84:a9:b6:e8:e6:b8:da:7c:38:b5:eb: d9:96:f4:a3:18:83:27:87:38:e5:4d:61:95:01:38: f1:d1:6a:1e:d9:ad:38:33:85:9c:27:95:00:e3:20: 89:ec:4c:a0:11:b8:61:33:4e:c2:24:54:74:7e:98: 51:30:ac:5c:95:20:90:75:ad:b1:e6:b5:08:69:25: 15:5b:43:4b:3b:8f:b0:d9:27:40:f3:c4:7a:8c:ed: a3:07:35:dd:e6:a4:9b:87:f1:84:cf:93:6d:f4:22: 70:14:3c:a2:e6:77:82:70:8c:9c:2b:32:ed:e4:31: 8a:0a:36:65:e6:4e:51:dc:8e:fd:fa:5e:43:bc:93: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:F5:91:B7:BB:41:EE:73:48:CC:AD:41:A6:21:08:85:53:7E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06d44412-91c0-329a-857b-f8c871429cb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:35:de:98:de:18:9b:e9:9b:0f:b3:7d:c4:0a:82:e6:00:92: 32:15:5a:1a:72:08:d3:45:95:2a:9f:96:21:3b:a2:e6:f5:5a: 66:96:b2:10:d3:ac:74:6a:94:d9:c6:0a:a1:51:43:f6:ab:e0: 9a:86:b8:80:82:66:c1:c1:ac:89:80:90:79:75:3b:62:46:0d: f4:31:0c:92:cf:84:5f:55:6b:4c:a8:2e:c2:4a:5b:5a:ee:2a: 67:8f:24:c7:6a:ac:de:89:46:6d:d0:db:47:03:97:4d:54:1a: 54:af:9a:0a:4b:01:08:d3:b9:af:b1:0d:cb:35:c4:8f:69:87: ee:48:0c:5b:eb:a8:ed:01:3b:63:62:07:f0:96:1a:86:f1:4a: c9:7c:6c:0b:24:28:b6:57:4e:fb:3e:ee:cc:4b:8f:e0:40:ad: 2e:ae:fc:a7:77:19:02:ec:a2:7b:31:77:c7:ed:dd:c4:5b:4e: ba:ea:8e:75:58:57:b1:29:e1:4e:d4:d6:d0:7c:ec:0e:5a:ec: a4:8a:89:6f:e7:93:62:62:05:df:41:c3:8b:7c:62:1a:9a:71: 61:19:b1:40:d7:3c:14:90:e7:79:da:13:07:f7:82:12:8d:5c: 7f:8f:04:f4:c3:fe:17:36:e6:37:e7:89:a8:66:23:1a:f0:99: 93:94:e1:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apSoqjsqzMSEYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk OWMxOGNhNzAtYTVhOC00YzNiLTg2MDItYWY4NGEyNTkxMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ASGa+mZmdl0Bi2FGkFyTHsoFdm8L8Ijf91Y TXSoQNCTMBrI8Mm5IVgGUYBqKMm6nYTB3BlS/amCOMcwRtdTcmIYpWZPAKCfvhT/ P40y8dL/vQigqzIwM+IGJHfA26TXRuaTykv19ZrIXYBlACwVsJTuVWcrfC/jwlTJ hKm26Oa42nw4tevZlvSjGIMnhzjlTWGVATjx0Woe2a04M4WcJ5UA4yCJ7EygEbhh M07CJFR0fphRMKxclSCQda2x5rUIaSUVW0NLO4+w2SdA88R6jO2jBzXd5qSbh/GE z5Nt9CJwFDyi5neCcIycKzLt5DGKCjZl5k5R3I79+l5DvJM0MQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFe29ZG3u0Huc0jMrUGmIQiFU35qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDZkNDQ0MTItOTFjMC0z MjlhLTg1N2ItZjhjODcxNDI5Y2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHNd6Y3hib6ZsPs33ECoLmAJIyFVoacgjTRZUq n5YhO6Lm9VpmlrIQ06x0apTZxgqhUUP2q+CahriAgmbBwayJgJB5dTtiRg30MQyS z4RfVWtMqC7CSlta7ipnjyTHaqzeiUZt0NtHA5dNVBpUr5oKSwEI07mvsQ3LNcSP aYfuSAxb66jtATtjYgfwlhqG8UrJfGwLJCi2V077Pu7MS4/gQK0urvyndxkC7KJ7 MXfH7d3EW0666o51WFexKeFO1NbQfOwOWuykiolv55NiYgXfQcOLfGIamnFhGbFA 1zwUkOd52hMH94ISjVx/jwT0w/4XNuY354moZiMa8JmTlOGt -----END CERTIFICATE-----Generated at Fri Apr 17 15:57:15 2026 by rpki-client