$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa File: 42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa (raw, json) Hash identifier: tZpFsyfr+LMHEwWTX2qjkDx3X30HfsXFhu/R41mV7Eo= Subject key identifier: 37:61:E7:2F:70:A8:DB:13:90:F6:EB:6A:88:7A:1B:77:D8:A1:84:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A9820A277CEDCDF68C6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396564 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:98:20:a2:77:ce:dc:df:68:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=853743aa-6532-4727-8e16-cab809828e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:2d:f0:d5:cc:55:bd:d9:82:22:63:cb:44: 32:ba:9d:eb:a3:e2:04:9a:f5:a2:28:20:61:62:35: 53:da:62:f5:14:bd:bd:31:d5:48:27:1c:ed:8f:1b: 95:b9:f2:e8:9b:aa:d7:10:4b:c1:e3:ee:fb:6b:8c: b6:ab:fb:bc:29:9b:91:e4:bb:fb:82:9b:fd:cd:ec: 95:a8:e1:49:fb:a6:17:42:38:ea:a9:2c:23:a9:b6: d9:c9:54:8a:2a:10:e0:ef:37:d6:b0:45:ad:ab:b5: 23:c9:c5:be:49:87:e8:67:21:8a:2e:01:eb:40:7d: f6:83:36:19:15:88:07:ff:ab:1c:cb:69:8a:2d:09: 15:02:85:60:8b:34:39:b9:3c:2b:99:2e:62:7c:cc: 9f:ea:18:30:0f:f1:19:2d:9b:54:64:eb:c8:9f:14: 5a:d5:aa:e3:d9:ff:d4:87:8e:31:5b:56:32:45:79: de:d3:b7:8a:81:c1:d3:0c:bb:61:e5:28:52:57:17: 8a:bd:d5:ff:df:50:73:a6:0e:d7:94:b5:45:2b:65: dd:5b:a0:01:37:6e:27:b1:38:b0:13:8d:a5:cf:da: 8e:29:be:54:35:26:37:52:52:06:c9:60:0a:18:fe: 98:f2:78:a5:da:dd:ef:e2:93:38:f9:91:0f:f7:50: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:E7:2F:70:A8:DB:13:90:F6:EB:6A:88:7A:1B:77:D8:A1:84:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:46:ee:2d:e6:08:6b:85:39:fb:37:60:10:9f:d5:9d:96:97: 71:e0:cd:76:bb:4b:40:a0:f9:f6:b4:df:0f:84:b7:26:bc:bd: 7c:4e:01:f7:a4:d4:3a:8f:aa:e4:4d:27:78:34:7d:52:e8:3d: 5b:98:74:3e:9f:84:f8:96:2c:8c:05:5d:c8:03:3f:fb:2b:fe: 25:e3:4e:61:55:d8:54:83:8b:4e:43:cd:97:99:ee:c3:93:55: a5:7f:5e:31:ca:aa:e5:9d:f2:3d:b8:cf:8f:c6:7e:0e:73:74: b4:61:72:42:eb:29:52:0a:cb:cc:17:4f:79:67:bb:71:6d:41: 6b:18:71:58:c5:dc:70:38:97:ad:71:8f:5e:d8:74:9d:f3:2c: 74:24:d0:a7:21:59:ff:9a:36:1e:ca:f9:89:36:04:b6:a0:a7: 72:a9:07:a7:ad:0f:07:08:8a:d5:b0:85:d3:a4:e8:53:cb:1e: c8:fb:e2:55:75:71:47:d6:9d:6f:32:9b:3e:5e:0c:70:7d:4a: 16:7d:59:38:95:a4:83:55:2f:66:66:1b:f6:58:96:9f:63:7c: 3a:d2:f2:2d:c6:05:54:09:cd:32:21:2b:a9:44:26:da:3b:a8: 62:a8:0d:a3:61:e6:1a:3f:4b:6a:f4:04:a0:03:1a:cc:3a:e6: c4:bf:65:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apggonfO3N9oxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ODUzNzQzYWEtNjUzMi00NzI3LThlMTYtY2FiODA5ODI4ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Mt8NXMVb3ZgiJjy0Qyup3ro+IEmvWiKCBh YjVT2mL1FL29MdVIJxztjxuVufLom6rXEEvB4+77a4y2q/u8KZuR5Lv7gpv9zeyV qOFJ+6YXQjjqqSwjqbbZyVSKKhDg7zfWsEWtq7UjycW+SYfoZyGKLgHrQH32gzYZ FYgH/6scy2mKLQkVAoVgizQ5uTwrmS5ifMyf6hgwD/EZLZtUZOvInxRa1arj2f/U h44xW1YyRXne07eKgcHTDLth5ShSVxeKvdX/31Bzpg7XlLVFK2XdW6ABN24nsTiw E42lz9qOKb5UNSY3UlIGyWAKGP6Y8nil2t3v4pM4+ZEP91A/OwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDdh5y9wqNsTkPbraoh6G3fYoYSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJiM2I5OGYtNTNkNS0z NGFhLWJlM2YtZjVlMzFkNWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMRu4t5ghrhTn7N2AQn9Wdlpdx4M12u0tAoPn2 tN8PhLcmvL18TgH3pNQ6j6rkTSd4NH1S6D1bmHQ+n4T4liyMBV3IAz/7K/4l405h VdhUg4tOQ82Xme7Dk1Wlf14xyqrlnfI9uM+Pxn4Oc3S0YXJC6ylSCsvMF095Z7tx bUFrGHFYxdxwOJetcY9e2HSd8yx0JNCnIVn/mjYeyvmJNgS2oKdyqQenrQ8HCIrV sIXTpOhTyx7I++JVdXFH1p1vMps+XgxwfUoWfVk4laSDVS9mZhv2WJafY3w60vIt xgVUCc0yISupRCbaO6hiqA2jYeYaP0tq9ASgAxrMOubEv2Vh -----END CERTIFICATE-----Generated at Fri Apr 17 11:35:06 2026 by rpki-client