$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa File: 394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa (raw, json) Hash identifier: o53zY8AUJPGKofW/AZ6VOtTAQhCvhXI7pe21YTCeo58= Subject key identifier: F1:24:37:5F:36:01:92:9C:A5:C7:EC:B4:0C:84:E3:E2:56:91:85:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A95E87EC1F19CA2F37648 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396589 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:95:e8:7e:c1:f1:9c:a2:f3:76:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=3ca297b0-d239-4c77-a3a0-6171d9d6b789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:69:75:b4:84:1a:35:a7:ef:4d:87:26:c4: 58:89:c4:80:90:de:fd:07:c8:28:35:42:99:96:f1: da:07:e7:cd:99:81:5a:18:16:61:32:4d:eb:9d:09: bf:66:14:cf:fd:17:f1:63:80:97:6b:90:99:41:56: a3:4b:96:85:af:01:06:2b:b6:3b:29:56:f9:f7:3b: 05:80:ec:dc:b0:15:f3:e4:e8:44:0d:6d:f0:e1:e3: 74:94:7a:36:1b:43:44:1a:f5:27:3e:5e:a8:6c:a2: 6b:f4:a7:3c:29:f5:b8:43:5c:95:34:9c:3c:2c:a4: 42:45:f2:ef:98:41:2c:92:d0:3f:f6:0a:bc:d7:80: ff:39:b2:8c:3b:c2:bd:21:5b:b9:7a:58:24:be:f7: 64:9b:4d:a3:59:a8:c6:a1:eb:2f:06:19:3e:18:3f: c8:cc:ea:c7:d7:c2:07:6a:f5:ce:89:6c:6b:ab:06: eb:9b:46:f4:ff:f5:d4:da:23:57:75:f8:72:ec:6f: 10:55:d3:af:c2:fe:f0:a4:79:c8:3e:91:a3:36:d3: 35:e8:00:27:4d:da:4d:00:f6:f2:ba:92:c7:68:7e: 8a:f0:7b:ca:86:b7:00:39:5e:8f:57:8c:88:3a:7d: 99:20:74:d4:9f:b3:28:d1:42:0d:a6:4a:56:0b:66: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:37:5F:36:01:92:9C:A5:C7:EC:B4:0C:84:E3:E2:56:91:85:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/394cefc9-61c7-3ce1-a6ec-ea3ca1813194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:db:f0:bb:8d:d6:4e:9c:b6:f0:83:45:46:9b:ce:31:59:01: b5:ed:8b:46:97:37:44:0e:0e:65:71:64:f3:24:03:cd:f1:0b: 23:4a:76:b5:0c:b6:d0:0b:2c:f3:a9:c1:f4:84:e7:90:df:50: ae:93:04:f5:1d:af:83:02:b0:58:7a:e0:9a:64:b9:cd:e8:29: 26:9c:de:18:37:e1:4a:95:14:97:cb:0b:2e:64:9f:63:a1:cd: a8:53:9c:1d:df:c4:06:e6:03:de:12:b7:3e:37:73:e9:a5:f5: c9:17:dd:16:81:6b:13:7f:ea:39:19:32:90:93:4a:2b:93:c5: b2:87:04:a7:8d:c6:e3:83:70:93:f2:1d:11:65:4c:ae:3a:df: aa:6e:6f:ff:c2:b5:42:dd:fc:a8:04:01:dd:33:90:d6:b0:57: bf:87:65:cb:ac:86:3a:53:4f:18:22:bf:e3:44:bc:4c:4c:ea: dc:e2:ca:7c:84:50:fa:95:2f:c6:e0:62:69:ad:44:a8:b7:75: d0:7e:be:57:00:28:7d:a6:3c:29:a1:35:88:c1:96:58:5c:bb: 90:8a:e7:25:4d:6a:01:d2:5f:13:6c:51:3b:a5:ef:06:54:45: 42:aa:51:b4:4d:23:29:ed:35:22:70:54:c6:38:6c:97:62:23: be:44:92:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apXofsHxnKLzdkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk M2NhMjk3YjAtZDIzOS00Yzc3LWEzYTAtNjE3MWQ5ZDZiNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziJpdbSEGjWn702HJsRYicSAkN79B8goNUKZ lvHaB+fNmYFaGBZhMk3rnQm/ZhTP/RfxY4CXa5CZQVajS5aFrwEGK7Y7KVb59zsF gOzcsBXz5OhEDW3w4eN0lHo2G0NEGvUnPl6obKJr9Kc8KfW4Q1yVNJw8LKRCRfLv mEEsktA/9gq814D/ObKMO8K9IVu5elgkvvdkm02jWajGoesvBhk+GD/IzOrH18IH avXOiWxrqwbrm0b0//XU2iNXdfhy7G8QVdOvwv7wpHnIPpGjNtM16AAnTdpNAPby upLHaH6K8HvKhrcAOV6PV4yIOn2ZIHTUn7Mo0UINpkpWC2YZJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPEkN182AZKcpcfstAyE4+JWkYUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk0Y2VmYzktNjFjNy0z Y2UxLWE2ZWMtZWEzY2ExODEzMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAR2/C7jdZOnLbwg0VGm84xWQG17YtGlzdEDg5l cWTzJAPN8QsjSna1DLbQCyzzqcH0hOeQ31CukwT1Ha+DArBYeuCaZLnN6CkmnN4Y N+FKlRSXywsuZJ9joc2oU5wd38QG5gPeErc+N3PppfXJF90WgWsTf+o5GTKQk0or k8WyhwSnjcbjg3CT8h0RZUyuOt+qbm//wrVC3fyoBAHdM5DWsFe/h2XLrIY6U08Y Ir/jRLxMTOrc4sp8hFD6lS/G4GJprUSot3XQfr5XACh9pjwpoTWIwZZYXLuQiucl TWoB0l8TbFE7pe8GVEVCqlG0TSMp7TUicFTGOGyXYiO+RJKM -----END CERTIFICATE-----Generated at Fri Apr 17 11:15:09 2026 by rpki-client