$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa File: 28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa (raw, json) Hash identifier: eSXtwDaqXscmEpUiC4MkgdiyA05/TgGOJEVPLn/pbsc= Subject key identifier: 13:14:28:D5:D6:4B:9A:8F:60:CC:34:B8:30:E4:BE:5B:0F:F9:DB:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A951E5363A3FE0E7C6F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 397202 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:95:1e:53:63:a3:fe:0e:7c:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=744bd792-8b60-4efb-b80d-74f33628f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:94:1c:1e:be:80:22:88:5a:b6:d3:c7:aa: 88:70:76:4c:72:59:ee:84:d5:ce:fc:fa:49:18:10: d9:62:1d:ee:ba:87:03:b4:24:40:d1:94:08:cf:14: 34:ba:14:7d:a8:c5:da:1c:6a:1f:da:d5:70:a0:c1: 7b:08:56:3d:32:95:22:d7:05:f7:7e:4b:d2:4b:49: 2a:1c:39:d7:3a:8f:0b:24:f8:55:78:45:eb:0f:7b: 33:c2:0c:24:24:53:d0:58:4d:2d:c3:30:ed:59:52: d9:1f:c4:e3:55:50:5f:08:72:1c:22:0a:0e:54:91: f7:29:74:85:97:85:72:70:f7:0e:55:ae:58:96:c1: 29:26:ab:5c:4d:b0:02:01:f5:f2:3a:f0:1f:41:4d: fc:77:df:01:3d:ff:17:dc:0f:bf:d1:4e:fe:18:79: 21:75:2c:72:e7:d1:0d:73:86:e9:ff:6c:c3:29:aa: c7:15:15:ed:27:39:62:e9:5c:03:73:82:59:76:b2: 61:b4:d8:49:b1:7a:e8:14:fa:b1:e6:18:ad:3e:bb: 52:d8:10:46:a1:a3:ac:f3:9f:4c:f1:e8:f6:bd:f6: ca:83:e7:6a:c8:7b:1f:7c:fe:2d:99:f9:b6:f6:0a: 9e:de:08:b8:26:42:1c:92:9e:bb:8b:8a:2b:cc:20: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:28:D5:D6:4B:9A:8F:60:CC:34:B8:30:E4:BE:5B:0F:F9:DB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:81:4f:ac:72:28:16:20:b5:22:7f:ea:16:16:e6:07:9a:22: 98:ea:87:e4:cb:83:26:d9:cd:c3:7d:74:29:1a:7d:9a:dc:25: dd:1c:82:8e:c1:b1:55:67:5c:51:e5:62:db:94:d4:27:3b:22: ca:cd:72:4d:ae:8a:2b:c2:13:30:7e:ba:42:71:2d:b4:b6:1d: 6e:da:28:c9:ad:1e:ae:56:99:46:09:ad:c2:1a:67:9e:d8:35: 44:5e:67:c9:e0:e7:9e:be:27:87:cd:bb:a1:a1:9d:53:32:b5: f8:91:ea:60:75:0b:e4:63:dd:43:75:eb:05:04:80:46:48:b1: b1:71:17:79:89:9e:e0:bc:c1:22:a1:7e:84:9b:a1:ef:d1:7b: 45:4a:04:91:64:d7:9b:0f:ba:48:a0:ec:29:f8:b1:07:63:3d: 66:20:7f:b7:f6:97:45:6b:e6:6c:31:42:0e:6b:0f:87:c6:30: 01:c4:c8:f6:7b:79:4a:90:79:87:ba:37:3f:bf:25:ba:89:dc: 77:9e:39:da:75:10:6a:4c:a5:ba:cc:f1:f2:f2:30:a4:ec:d7: 83:54:4f:d0:33:6b:c4:0a:87:be:42:ad:2c:90:6f:1a:75:e9: 5b:15:68:f8:2d:f3:d5:da:88:28:43:85:6b:30:7b:b3:3a:29: 88:72:b9:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apUeU2Oj/g58bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NzQ0YmQ3OTItOGI2MC00ZWZiLWI4MGQtNzRmMzM2MjhmMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvCUHB6+gCKIWrbTx6qIcHZMclnuhNXO/PpJ GBDZYh3uuocDtCRA0ZQIzxQ0uhR9qMXaHGof2tVwoMF7CFY9MpUi1wX3fkvSS0kq HDnXOo8LJPhVeEXrD3szwgwkJFPQWE0twzDtWVLZH8TjVVBfCHIcIgoOVJH3KXSF l4VycPcOVa5YlsEpJqtcTbACAfXyOvAfQU38d98BPf8X3A+/0U7+GHkhdSxy59EN c4bp/2zDKarHFRXtJzli6VwDc4JZdrJhtNhJsXroFPqx5hitPrtS2BBGoaOs859M 8ej2vfbKg+dqyHsffP4tmfm29gqe3gi4JkIckp67i4orzCC6HQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBMUKNXWS5qPYMw0uDDkvlsP+dtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NjRjNjAtZDJlNC0z YjkyLWEyZTItYzg4ZjFkZWZjZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLgU+scigWILUif+oWFuYHmiKY6ofky4Mm2c3D fXQpGn2a3CXdHIKOwbFVZ1xR5WLblNQnOyLKzXJNroorwhMwfrpCcS20th1u2ijJ rR6uVplGCa3CGmee2DVEXmfJ4OeevieHzbuhoZ1TMrX4kepgdQvkY91DdesFBIBG SLGxcRd5iZ7gvMEioX6Em6Hv0XtFSgSRZNebD7pIoOwp+LEHYz1mIH+39pdFa+Zs MUIOaw+HxjABxMj2e3lKkHmHujc/vyW6idx3njnadRBqTKW6zPHy8jCk7NeDVE/Q M2vECoe+Qq0skG8adelbFWj4LfPV2ogoQ4VrMHuzOimIcrmk -----END CERTIFICATE-----Generated at Fri Apr 17 05:35:55 2026 by rpki-client