$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/305570b2-adfa-3c17-80df-7c753f2f5fcd.roa File: 305570b2-adfa-3c17-80df-7c753f2f5fcd.roa (raw, json) Hash identifier: kLR7o4uvGBGXtJsFaathDtnLfQZRo+RsPd+f9TsOVXo= Subject key identifier: 94:52:2E:BA:A7:F7:9E:AC:C8:D6:D7:80:30:87:09:7F:02:C1:74:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A9773B3016B362E83D160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/305570b2-adfa-3c17-80df-7c753f2f5fcd.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396581 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:97:73:b3:01:6b:36:2e:83:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=6d5c469e-ae5e-4e76-b5da-f27bf315b695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:61:07:64:4f:cc:60:70:bc:bb:bc:fb:1b: 36:65:04:9a:c8:53:8a:9f:85:60:0d:37:bc:10:13: fe:29:ee:62:89:28:00:42:50:72:e7:3b:6b:36:f0: 66:e0:53:a3:89:86:1f:ab:ca:cf:e9:b4:4b:85:0d: e3:9a:13:29:fc:26:6b:c8:a5:78:1a:7e:50:03:93: 99:12:22:89:9c:90:86:b9:8e:5e:00:bb:75:ac:08: 0f:e6:7e:31:0f:99:85:f3:f7:0c:ed:3f:0e:73:bc: e6:2c:22:a3:d6:5d:b2:cc:23:8b:0c:36:15:1c:c3: 78:1f:21:cf:4c:1f:41:38:90:59:27:b8:44:0d:cf: 3b:6a:7e:67:66:d6:2f:b1:83:1b:5e:91:77:60:b2: 94:d8:95:db:ac:83:d3:a6:5b:32:31:69:5f:2e:42: cf:94:59:28:c0:d2:a6:9d:21:59:57:be:67:97:f8: f1:34:a7:21:e0:0b:4c:4d:f0:dc:4a:a2:77:9a:f7: 24:84:58:4b:82:f8:0d:dd:58:c1:99:62:a5:e9:28: f9:7f:0f:66:7a:78:02:d7:2b:32:c3:f9:bf:7d:c0: bc:9a:62:37:dc:1d:2a:92:45:44:29:d1:dc:55:a6: 7e:f0:43:9b:8d:c1:a9:29:1b:ba:b2:ef:e5:4d:e5: ab:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:52:2E:BA:A7:F7:9E:AC:C8:D6:D7:80:30:87:09:7F:02:C1:74:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/305570b2-adfa-3c17-80df-7c753f2f5fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:24:54:ac:a2:09:59:55:27:4a:4b:85:d8:d3:71:e2:9b:b2: c7:53:b2:86:47:03:26:41:49:dd:1f:8b:cd:05:97:49:28:8c: 97:0d:5c:98:f1:a6:95:26:77:92:78:86:1b:b0:e5:f8:0f:8b: db:bb:e5:54:f1:4f:4a:fb:08:d2:1f:9f:ac:b5:9e:a5:48:12: e8:12:7b:8d:25:a3:43:27:fc:51:c8:59:1a:39:87:84:cb:28: 52:09:4c:a6:40:59:39:f4:3a:99:65:ee:e9:7b:36:8c:b4:89: f5:60:76:d7:2f:dd:ff:25:2f:64:2c:32:00:b4:cd:6d:ed:70: ac:e9:8e:c5:38:01:85:7d:a8:5a:59:6d:c3:ed:30:c9:e9:70: 03:f2:4e:d9:3b:1a:4b:30:2a:e5:f3:34:5f:89:65:ed:69:04: 1b:d7:6b:c8:d1:f1:3a:d5:b5:61:ae:6e:72:cb:96:e8:20:8e: 7f:a2:12:15:38:8d:d4:7e:9a:cd:9e:38:b4:e6:5f:98:d0:4b: 02:c0:e2:5f:65:c7:d9:ec:31:76:90:5d:43:38:c4:fe:f1:a7: 07:77:f6:fb:70:b6:65:70:db:79:3e:d1:32:2a:c0:79:ac:01: 78:76:59:b8:e4:81:5b:15:fd:5c:49:9b:ea:53:6a:b8:ac:2e: 66:ad:25:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apdzswFrNi6D0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NmQ1YzQ2OWUtYWU1ZS00ZTc2LWI1ZGEtZjI3YmYzMTViNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2NhB2RPzGBwvLu8+xs2ZQSayFOKn4VgDTe8 EBP+Ke5iiSgAQlBy5ztrNvBm4FOjiYYfq8rP6bRLhQ3jmhMp/CZryKV4Gn5QA5OZ EiKJnJCGuY5eALt1rAgP5n4xD5mF8/cM7T8Oc7zmLCKj1l2yzCOLDDYVHMN4HyHP TB9BOJBZJ7hEDc87an5nZtYvsYMbXpF3YLKU2JXbrIPTplsyMWlfLkLPlFkowNKm nSFZV75nl/jxNKch4AtMTfDcSqJ3mvckhFhLgvgN3VjBmWKl6Sj5fw9mengC1ysy w/m/fcC8mmI33B0qkkVEKdHcVaZ+8EObjcGpKRu6su/lTeWrHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJRSLrqn956syNbXgDCHCX8CwXTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA1NTcwYjItYWRmYS0z YzE3LTgwZGYtN2M3NTNmMmY1ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhJFSsoglZVSdKS4XY03Him7LHU7KGRwMmQUnd H4vNBZdJKIyXDVyY8aaVJneSeIYbsOX4D4vbu+VU8U9K+wjSH5+stZ6lSBLoEnuN JaNDJ/xRyFkaOYeEyyhSCUymQFk59DqZZe7pezaMtIn1YHbXL93/JS9kLDIAtM1t 7XCs6Y7FOAGFfahaWW3D7TDJ6XAD8k7ZOxpLMCrl8zRfiWXtaQQb12vI0fE61bVh rm5yy5boII5/ohIVOI3UfprNnji05l+Y0EsCwOJfZcfZ7DF2kF1DOMT+8acHd/b7 cLZlcNt5PtEyKsB5rAF4dlm45IFbFf1cSZvqU2q4rC5mrSUr -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:39 2026 by rpki-client