$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa File: 1d173c7d-4cc3-3f45-8662-a713821860f7.roa (raw, json) Hash identifier: S0t1auWlhVoyIC6a4gnAbJtFKD+DnXNQI74RxewkLFw= Subject key identifier: 4C:8D:28:C9:D3:82:F5:69:2C:5E:14:27:9A:3C:83:E9:38:30:EF:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A97D5D21705839AFCDAE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396609 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:97:d5:d2:17:05:83:9a:fc:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=4281f47f-6a02-4073-a201-2d6fb33caf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:16:b1:89:34:4d:d7:47:5d:5a:b7:d6:0b: 1c:af:80:44:0b:3a:bf:ca:22:ca:53:14:81:32:33: da:79:36:fa:78:ac:4e:e4:71:91:ce:e7:ac:d4:9d: e8:a2:9d:9f:ff:5f:37:30:e9:c9:60:5a:71:ea:ad: cd:6f:29:16:9d:61:de:54:d3:7e:53:09:01:37:39: 1a:d8:9e:eb:d4:13:5c:54:61:3f:16:fa:b4:44:97: a8:86:18:1e:b0:c5:32:78:2e:aa:dd:fd:a2:6b:9b: b9:c8:e5:bb:ce:93:7a:ae:cd:2f:8c:33:38:58:69: c9:47:38:26:d8:f3:dd:92:a2:70:3b:41:aa:8a:73: bf:ce:8c:03:84:da:aa:6f:93:eb:e7:94:49:14:f3: 66:45:e0:2d:55:1e:c9:4b:50:3e:f7:20:30:8c:29: fa:19:c6:b1:00:7d:de:d0:6b:2d:99:5d:ce:ae:ac: 73:c1:76:02:3d:87:02:25:0e:50:e5:2b:73:f1:7a: 1e:5c:92:6a:aa:6d:cd:90:80:d7:3e:39:bc:67:11: ca:b1:c9:59:c1:e1:b3:bd:24:0e:66:bc:67:c2:75: 70:b4:16:46:2d:8d:ed:c0:c4:25:10:d8:c7:45:46: a6:8c:15:b8:4a:20:2b:28:36:34:8a:78:7e:ca:51: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:28:C9:D3:82:F5:69:2C:5E:14:27:9A:3C:83:E9:38:30:EF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d173c7d-4cc3-3f45-8662-a713821860f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6f:05:ec:7d:e0:a5:e7:59:45:f5:58:ba:e5:bb:42:a5:7f: ac:95:ac:0f:c4:fb:31:a8:b3:2f:8e:6d:b7:60:f8:24:99:d4: 39:fe:e6:ed:88:12:41:7d:93:8b:67:98:ab:c0:a4:6a:4b:d4: 81:e3:ac:b0:92:95:79:10:c7:59:de:7d:d7:2d:fc:32:15:6a: 5a:82:cf:bd:47:80:4d:52:e9:96:93:5f:b3:7b:e5:14:78:a7: d8:eb:57:9a:83:df:2c:42:59:4f:1a:69:8b:ea:e2:87:5e:d7: 7f:f5:90:ed:d8:65:3d:01:3f:ac:7d:78:4f:b8:9b:d8:94:0f: 45:bb:8a:b6:84:37:9d:2a:91:8d:fc:7c:9a:87:d6:f6:3f:0b: 79:52:84:89:84:da:03:59:84:68:0c:e7:74:9d:fa:dc:93:3a: c6:e1:1c:87:46:81:e1:3a:04:01:4a:55:fb:63:2c:d3:81:28: 8e:52:5d:03:36:25:9a:e7:59:be:77:01:fe:3c:59:3e:62:4a: 35:63:3c:07:6b:e8:79:72:e9:f3:84:94:25:e5:bb:18:62:4c: 4a:81:8d:52:10:6d:0a:72:15:9e:f8:67:5c:bf:cb:fd:59:5c: d4:12:e8:39:c2:cb:e5:49:cb:c5:66:49:95:7f:e4:a2:36:1e: 88:71:7f:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apfV0hcFg5r82uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NDI4MWY0N2YtNmEwMi00MDczLWEyMDEtMmQ2ZmIzM2NhZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU4WsYk0TddHXVq31gscr4BECzq/yiLKUxSB MjPaeTb6eKxO5HGRzues1J3oop2f/183MOnJYFpx6q3NbykWnWHeVNN+UwkBNzka 2J7r1BNcVGE/Fvq0RJeohhgesMUyeC6q3f2ia5u5yOW7zpN6rs0vjDM4WGnJRzgm 2PPdkqJwO0GqinO/zowDhNqqb5Pr55RJFPNmReAtVR7JS1A+9yAwjCn6GcaxAH3e 0GstmV3OrqxzwXYCPYcCJQ5Q5Stz8XoeXJJqqm3NkIDXPjm8ZxHKsclZweGzvSQO ZrxnwnVwtBZGLY3twMQlENjHRUamjBW4SiArKDY0inh+ylFa+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEyNKMnTgvVpLF4UJ5o8g+k4MO9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQxNzNjN2QtNGNjMy0z ZjQ1LTg2NjItYTcxMzgyMTg2MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBubwXsfeCl51lF9Vi65btCpX+slawPxPsxqLMv jm23YPgkmdQ5/ubtiBJBfZOLZ5irwKRqS9SB46ywkpV5EMdZ3n3XLfwyFWpags+9 R4BNUumWk1+ze+UUeKfY61eag98sQllPGmmL6uKHXtd/9ZDt2GU9AT+sfXhPuJvY lA9Fu4q2hDedKpGN/Hyah9b2Pwt5UoSJhNoDWYRoDOd0nfrckzrG4RyHRoHhOgQB SlX7YyzTgSiOUl0DNiWa51m+dwH+PFk+Yko1YzwHa+h5cunzhJQl5bsYYkxKgY1S EG0KchWe+Gdcv8v9WVzUEug5wsvlScvFZkmVf+SiNh6IcX/v -----END CERTIFICATE-----Generated at Fri Apr 17 14:33:40 2026 by rpki-client