$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa File: 2104f919-945b-3c3e-8c3e-04789e8799b6.roa (raw, json) Hash identifier: KlPmc5kGzGFD0x3PKN9ufLccsoYfTughl/etWN8iL2U= Subject key identifier: 4F:B4:B2:FE:37:87:79:F7:89:C9:63:FD:F4:8E:FF:31:BE:DD:C4:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9BB7F96DCD5F76FEE320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397212 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9b:b7:f9:6d:cd:5f:76:fe:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=4cbcc6a8-60f0-4402-be87-1a2847ba9669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:15:99:94:15:05:b5:d3:e3:c9:1a:aa:9a: cb:31:54:8f:1c:ff:1e:c6:06:20:ad:a5:d0:e4:51: 4f:d5:4c:bb:cb:22:5c:9d:39:a7:b9:60:2d:96:8e: fa:d5:1a:4a:3d:58:5b:ff:e1:96:d5:4a:9a:d3:38: 12:17:27:1e:41:58:81:b9:eb:3d:d0:20:3b:4d:50: 02:ff:cf:bd:c1:04:e5:e1:68:d6:bf:2b:7e:94:cd: 54:d9:51:fc:f8:ae:cd:d8:a5:9e:f0:3d:a1:34:21: 6f:ba:43:5a:36:a1:7e:a9:b8:db:a0:c6:b2:7d:37: a7:50:cf:86:35:29:38:6f:bd:f9:f8:b7:d8:86:3c: 01:b2:c6:3f:84:85:fd:30:36:c8:cd:b0:e0:cc:4d: 8d:3a:0a:13:5f:26:75:b1:5a:dc:55:d8:c3:b5:48: 3d:e7:80:06:b0:3b:da:9e:c3:33:42:bc:47:78:76: 92:28:05:71:e8:c9:03:5c:e6:94:d5:29:04:a2:51: 49:20:82:73:9f:0c:17:4a:21:17:b3:34:9f:c9:a3: 6e:d7:89:4b:eb:3f:a0:b1:9f:15:37:88:29:b2:12: 19:03:42:29:55:16:f4:71:45:09:eb:70:22:d3:d2: 30:74:0c:89:3a:1f:5a:cb:ab:07:98:a6:40:c8:e5: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:B2:FE:37:87:79:F7:89:C9:63:FD:F4:8E:FF:31:BE:DD:C4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2104f919-945b-3c3e-8c3e-04789e8799b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8f:76:7e:b6:aa:e8:30:b0:c2:43:2f:32:ea:7b:de:04:25: 36:11:b7:22:43:0b:6d:cd:92:16:22:28:43:2e:2a:ca:50:78: 2f:4d:55:a0:f3:d8:51:25:95:f0:66:f4:b8:83:e6:85:30:57: 3d:0c:a1:53:e2:92:c7:21:99:91:eb:5a:ea:51:79:ce:1b:92: 69:8f:da:92:8c:49:75:c1:ba:fb:8c:eb:08:3d:66:99:70:6d: f0:ce:6e:c3:08:0a:94:f7:42:b4:93:75:93:f8:e8:73:62:e9: 3b:75:89:ce:e1:0e:53:de:8d:89:4e:d3:dc:1d:c3:e7:31:f7: 99:e7:6c:93:79:99:e4:fc:3b:05:40:db:f5:2a:c6:a3:51:d1: 90:56:12:5b:14:d2:57:43:4e:ae:ea:bf:c0:9f:e3:3a:dd:fd: 65:65:80:07:5c:a3:a3:f0:ae:23:01:f5:37:49:be:d6:e0:d5: b1:0c:1e:e9:ae:cc:b1:b2:4b:0d:b1:c2:44:61:ca:53:53:57: ef:11:35:3c:60:66:78:53:00:c8:ee:64:b1:15:b0:1b:bd:c4: f7:b7:be:53:6e:e6:9f:1c:29:a4:c9:ab:14:00:9b:df:2b:31: 90:a8:8c:11:55:63:84:f6:fa:b3:6d:cd:f2:4f:c6:b0:04:56: d3:1c:4f:ee -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pu3+W3NX3b+4yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NGNiY2M2YTgtNjBmMC00NDAyLWJlODctMWEyODQ3YmE5NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9MVmZQVBbXT48kaqprLMVSPHP8exgYgraXQ 5FFP1Uy7yyJcnTmnuWAtlo761RpKPVhb/+GW1Uqa0zgSFyceQViBues90CA7TVAC /8+9wQTl4WjWvyt+lM1U2VH8+K7N2KWe8D2hNCFvukNaNqF+qbjboMayfTenUM+G NSk4b735+LfYhjwBssY/hIX9MDbIzbDgzE2NOgoTXyZ1sVrcVdjDtUg954AGsDva nsMzQrxHeHaSKAVx6MkDXOaU1SkEolFJIIJznwwXSiEXszSfyaNu14lL6z+gsZ8V N4gpshIZA0IpVRb0cUUJ63Ai09IwdAyJOh9ay6sHmKZAyOXrEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE+0sv43h3n3iclj/fSO/zG+3cTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjEwNGY5MTktOTQ1Yi0z YzNlLThjM2UtMDQ3ODllODc5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXj3Z+tqroMLDCQy8y6nveBCU2EbciQwttzZIW IihDLirKUHgvTVWg89hRJZXwZvS4g+aFMFc9DKFT4pLHIZmR61rqUXnOG5Jpj9qS jEl1wbr7jOsIPWaZcG3wzm7DCAqU90K0k3WT+OhzYuk7dYnO4Q5T3o2JTtPcHcPn MfeZ52yTeZnk/DsFQNv1KsajUdGQVhJbFNJXQ06u6r/An+M63f1lZYAHXKOj8K4j AfU3Sb7W4NWxDB7prsyxsksNscJEYcpTU1fvETU8YGZ4UwDI7mSxFbAbvcT3t75T buafHCmkyasUAJvfKzGQqIwRVWOE9vqzbc3yT8awBFbTHE/u -----END CERTIFICATE-----Generated at Sun Apr 19 10:07:20 2026 by rpki-client