$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa File: 24c9c28d-46b6-3549-8101-ad0cd851e804.roa (raw, json) Hash identifier: gzDX8EMN3fH5HhXlJc5IVdKaH3vX3uyOMuI+PBOvZdU= Subject key identifier: 3C:5F:DF:1B:DD:39:17:28:44:83:05:11:9A:23:7D:0A:FE:14:EE:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D703FF033A0F75F8906947880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 7342 IP address blocks: 2620:74:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f0:33:a0:f7:5f:89:06:94:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=2cd192bc-4b69-4ba8-a926-911ab22f940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:f2:b8:86:30:93:bb:a4:1a:38:f9:e9:ae: 26:13:e9:63:2d:85:7e:9e:82:e9:fe:d5:60:65:81: 55:da:b6:a4:28:9c:00:ff:61:49:65:84:1d:68:30: 8d:3c:22:67:ca:89:98:74:46:7a:15:b6:76:ec:00: 3b:1b:11:b0:4a:fc:a2:ea:ef:74:d1:b0:8d:5d:73: 33:0b:22:ac:94:7c:f5:ec:d5:86:5b:c1:d8:a0:46: e1:ea:dd:b1:e8:97:16:0c:9b:cc:1d:e0:4e:80:f7: ff:2e:cb:c0:e1:9e:ff:b8:98:02:c4:76:6a:50:69: 5d:97:2b:a5:f1:08:eb:3e:26:25:f3:c7:ff:35:61: 80:9c:4e:16:87:90:4d:f5:be:ab:d1:1e:dd:15:1b: 08:8e:52:8d:61:42:6d:0f:5e:61:cd:35:2d:0b:f5: a0:c2:1f:83:99:48:22:2e:74:c9:53:37:ec:fc:5c: 59:63:3f:e4:07:46:a5:ea:09:48:25:4f:08:0b:50: c3:9e:3d:93:86:df:0b:bb:b0:23:21:b7:74:73:ae: 10:fb:84:7c:84:f8:1c:ad:cf:4d:91:77:81:f4:53: ab:ee:0a:97:aa:2d:ba:90:77:11:20:03:75:32:34: 4e:7b:46:90:b3:e1:2a:7d:16:83:07:cf:42:41:aa: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:DF:1B:DD:39:17:28:44:83:05:11:9A:23:7D:0A:FE:14:EE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:85:24:ac:8c:4c:a5:f7:b7:05:97:b7:6b:b1:27:ad:aa:78: 26:02:9f:15:38:d9:ab:0b:0d:29:19:63:79:5e:02:4a:b3:24: d6:6b:d2:40:e3:0a:f1:bc:e8:66:9b:2d:eb:1f:bc:78:fb:2b: b3:62:b1:31:e8:b5:86:ac:d0:de:b0:2d:8a:a7:07:11:b4:b7: 8c:b8:6a:1b:4d:9d:51:a9:90:6e:1c:66:67:cb:df:2b:5f:29: b7:cf:d8:03:b1:6e:71:fe:45:93:36:c7:b0:f5:fc:34:e1:60: 33:5f:b1:43:28:8f:c3:bb:6c:c9:75:fe:11:4a:c5:9a:d2:ff: d6:9d:37:76:05:07:c0:12:65:33:df:c7:05:0c:e6:bb:26:dd: 05:91:8a:64:01:8d:f5:fe:a2:eb:17:70:bf:30:aa:0a:83:a4: c6:aa:17:49:9b:71:d9:71:7b:85:2f:59:c2:fb:75:d9:f5:fe: 2c:6c:f2:11:46:e0:62:1c:39:d4:ba:4c:86:95:6f:54:16:b1: 00:81:ad:c5:8b:f7:7e:85:d0:0b:65:72:30:6e:ba:3d:3e:09: 61:cc:c4:5b:43:28:9b:4b:2d:32:e4:45:56:9b:a3:2b:08:5a: 84:3e:b2:95:75:e7:9b:25:e7:78:1a:a2:0e:64:a6:f3:67:f9: 13:fd:d4:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1wP/AzoPdfiQaUeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MmNkMTkyYmMtNGI2OS00YmE4LWE5MjYtOTExYWIyMmY5NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mjyuIYwk7ukGjj56a4mE+ljLYV+noLp/tVg ZYFV2rakKJwA/2FJZYQdaDCNPCJnyomYdEZ6FbZ27AA7GxGwSvyi6u900bCNXXMz CyKslHz17NWGW8HYoEbh6t2x6JcWDJvMHeBOgPf/LsvA4Z7/uJgCxHZqUGldlyul 8QjrPiYl88f/NWGAnE4Wh5BN9b6r0R7dFRsIjlKNYUJtD15hzTUtC/Wgwh+DmUgi LnTJUzfs/FxZYz/kB0al6glIJU8IC1DDnj2Tht8Lu7AjIbd0c64Q+4R8hPgcrc9N kXeB9FOr7gqXqi26kHcRIAN1MjROe0aQs+EqfRaDB89CQar7bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxf3xvdORcoRIMFEZojfQr+FO4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRjOWMyOGQtNDZiNi0z NTQ5LTgxMDEtYWQwY2Q4NTFlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKFJKyMTKX3twWXt2uxJ62qeCYCnxU42asLDSkZY3leAkqzJNZr 0kDjCvG86GabLesfvHj7K7NisTHotYas0N6wLYqnBxG0t4y4ahtNnVGpkG4cZmfL 3ytfKbfP2AOxbnH+RZM2x7D1/DThYDNfsUMoj8O7bMl1/hFKxZrS/9adN3YFB8AS ZTPfxwUM5rsm3QWRimQBjfX+ousXcL8wqgqDpMaqF0mbcdlxe4UvWcL7ddn1/ixs 8hFG4GIcOdS6TIaVb1QWsQCBrcWL936F0AtlcjBuuj0+CWHMxFtDKJtLLTLkRVab oysIWoQ+spV155sl53gaog5kpvNn+RP91Gg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:01:26 2026 by rpki-client