$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa File: 0b6863c5-524e-3ada-b1f8-b23b96a42035.roa (raw, json) Hash identifier: CISjf9GvByt91yhSIx8jEmLzCH/ngD4S4M4JEeujlao= Subject key identifier: 97:9B:15:D5:D3:EB:38:A7:3C:75:96:53:AF:73:A5:51:BD:C0:27:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A93706BB1B604DB6884C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 397200 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:93:70:6b:b1:b6:04:db:68:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=f85c875d-d56f-41a8-9caa-edd5a858a23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:3b:4e:ad:66:0d:8f:04:5a:95:82:49:1c: 1e:25:5b:05:03:6d:fd:60:d8:b0:84:20:cb:26:ce: f6:52:20:9e:0e:27:f7:d1:c3:74:85:46:11:dd:61: e8:79:a7:3a:46:4d:ad:90:c1:5a:6e:8f:7a:82:f4: 04:1d:38:cf:90:2d:8c:b1:f6:b0:ec:b4:26:a7:fc: ec:4e:f2:ee:3f:b0:77:5f:3c:39:e8:dd:f9:0a:00: c2:95:20:c6:14:c5:51:20:d7:09:96:7b:e8:0d:db: 5d:bd:a5:a9:30:a0:15:9d:48:bb:e0:6f:76:8c:3c: 70:47:e4:b2:6c:1b:29:aa:b2:dc:aa:d9:b4:6b:c7: ee:e4:d0:89:ce:dd:7f:37:1f:de:c5:7f:f2:77:3b: fc:c5:e0:07:b8:7d:f2:4e:7e:e5:e1:47:48:2e:6c: 30:03:e0:89:4e:e5:99:ce:6c:9e:f2:27:87:1f:78: 21:e0:09:ba:bf:d0:44:ee:d0:db:48:11:de:88:5d: b7:19:28:4e:9f:a9:9f:d9:ca:86:19:d2:63:7a:6b: 00:99:1c:ed:30:d6:82:32:b6:89:1c:04:77:f0:96: 59:8d:c7:0b:00:d1:08:c9:8f:c4:03:19:0c:36:b2: 2e:d8:13:1a:6d:e1:f4:f6:07:09:99:ea:56:62:3c: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:15:D5:D3:EB:38:A7:3C:75:96:53:AF:73:A5:51:BD:C0:27:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0a:25:26:63:b9:02:89:0f:07:85:aa:dd:63:59:7e:3c:54: 5a:6b:ed:3f:6d:13:f7:68:53:49:d5:11:b7:ca:0f:37:40:fb: 09:e0:09:2d:0d:43:8c:a8:1c:7f:2a:ee:4d:17:26:14:a9:92: 6f:70:66:9a:b5:03:22:99:27:4a:f2:0c:ab:e9:6c:14:d2:a5: 9a:a3:07:1c:67:b1:ed:b6:97:d9:75:11:00:3b:33:96:70:0b: 93:fb:7d:66:02:19:c2:86:11:69:6e:d4:ad:be:1f:f4:7d:ba: 01:2d:42:4d:aa:72:7d:b2:75:81:3b:a6:f8:87:90:7d:7b:62: 37:74:8b:ee:87:8d:9e:c4:29:f6:e6:24:2f:dd:79:45:4c:5b: b9:21:9c:50:ab:80:3b:74:5c:84:26:7e:9b:77:8e:32:19:99: 02:d6:29:93:c7:ec:73:d3:68:39:d2:d9:91:16:9f:05:e8:f7: 54:4b:07:b0:f0:97:2b:fb:c1:32:13:5d:f4:30:18:45:9b:28: 06:f5:7f:75:04:af:c2:51:5a:d2:5e:ac:58:2c:0f:f5:84:a6: a3:29:f4:74:a9:f3:d3:2d:92:ca:d6:9a:3c:aa:d8:1d:4b:57: aa:4f:dc:89:6c:47:8b:8f:3c:9b:81:a9:c3:b1:e7:29:69:fc: 2e:74:f2:42 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apNwa7G2BNtohMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk Zjg1Yzg3NWQtZDU2Zi00MWE4LTljYWEtZWRkNWE4NThhMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTk7Tq1mDY8EWpWCSRweJVsFA239YNiwhCDL Js72UiCeDif30cN0hUYR3WHoeac6Rk2tkMFabo96gvQEHTjPkC2Msfaw7LQmp/zs TvLuP7B3Xzw56N35CgDClSDGFMVRINcJlnvoDdtdvaWpMKAVnUi74G92jDxwR+Sy bBspqrLcqtm0a8fu5NCJzt1/Nx/exX/ydzv8xeAHuH3yTn7l4UdILmwwA+CJTuWZ zmye8ieHH3gh4Am6v9BE7tDbSBHeiF23GShOn6mf2cqGGdJjemsAmRztMNaCMraJ HAR38JZZjccLANEIyY/EAxkMNrIu2BMabeH09gcJmepWYjyKXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJebFdXT6zinPHWWU69zpVG9wCfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2ODYzYzUtNTI0ZS0z YWRhLWIxZjgtYjIzYjk2YTQyMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzCiUmY7kCiQ8HhardY1l+PFRaa+0/bRP3aFNJ 1RG3yg83QPsJ4AktDUOMqBx/Ku5NFyYUqZJvcGaatQMimSdK8gyr6WwU0qWaowcc Z7HttpfZdREAOzOWcAuT+31mAhnChhFpbtStvh/0fboBLUJNqnJ9snWBO6b4h5B9 e2I3dIvuh42exCn25iQv3XlFTFu5IZxQq4A7dFyEJn6bd44yGZkC1imTx+xz02g5 0tmRFp8F6PdUSwew8Jcr+8EyE130MBhFmygG9X91BK/CUVrSXqxYLA/1hKajKfR0 qfPTLZLK1po8qtgdS1eqT9yJbEeLjzybganDsecpafwudPJC -----END CERTIFICATE-----Generated at Fri Apr 17 11:14:58 2026 by rpki-client