$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa File: 4ad182e9-358b-30a8-9be5-a8e305941580.roa (raw, json) Hash identifier: rrFam7dUIiCjdN2J9aqUTtO1ebDn0KuxOA7zXBSscbM= Subject key identifier: 13:FB:5E:D7:29:F3:E5:E2:40:2F:3E:40:AF:12:B6:DC:A6:1D:00:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D67DFF72F4B41E74FA4FD7A68 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 7342 IP address blocks: 2620:74:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:f7:2f:4b:41:e7:4f:a4:fd:7a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=a47ffc38-96cb-4fa1-bf53-ceddbf56bebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:d7:07:05:06:61:3a:8e:30:d7:49:92:11: 7d:93:24:49:3a:03:62:01:e9:a0:88:aa:37:90:d3: ae:2d:5e:10:8f:0f:f3:5f:d7:29:10:7c:34:c7:19: 5f:57:dd:a3:28:9b:98:cc:a4:c6:6b:1d:77:9f:10: 9b:1c:8b:c0:9c:01:6d:4b:b4:6b:23:85:48:df:c7: b4:8b:3d:f7:aa:4f:73:91:c2:3a:0e:64:98:7c:52: f2:59:8f:ef:8c:16:3b:6f:3a:e0:e3:d6:00:33:55: 92:ce:6a:9f:52:5c:53:17:3c:8c:76:ee:fe:82:5f: f2:50:ad:43:1c:47:e2:2d:e4:35:78:ba:c2:f2:e9: 13:6e:59:14:a8:6c:d2:69:73:49:d2:94:05:93:ed: 1c:c7:ad:8d:1e:b7:61:93:f7:d1:ea:2f:28:ce:13: 29:49:6a:2b:da:af:2e:e5:d8:de:46:1d:cc:5e:ca: e7:d8:96:91:d5:d0:a4:8b:ad:f4:42:be:79:26:97: 54:fd:cd:56:09:51:26:fc:c9:94:1c:9a:cf:88:d8: 02:29:24:76:17:28:30:cd:0e:ae:59:e4:d7:53:2c: ae:01:15:d0:c7:1c:73:d4:d1:c4:31:11:0f:b2:42: f7:b7:59:a5:11:62:2d:ce:73:d8:4d:b9:80:4d:e2: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:5E:D7:29:F3:E5:E2:40:2F:3E:40:AF:12:B6:DC:A6:1D:00:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ad182e9-358b-30a8-9be5-a8e305941580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:23:b8:60:5a:59:08:5d:29:a8:76:a6:0f:f6:5d:8f:1a:7e: 5f:27:b4:f3:ac:aa:77:85:e9:d4:1d:7d:8f:ab:30:ba:3f:46: 04:e1:da:d1:d1:cc:38:0b:4a:5d:1a:c5:a1:13:08:d3:40:e6: 25:7a:e0:34:90:16:f7:01:6e:4c:ae:bb:92:b1:78:05:3a:0e: 5e:22:70:69:50:7f:84:7e:5f:46:9d:e3:90:83:3b:31:df:cd: dd:08:61:7e:0b:29:3b:d6:c5:77:a2:d4:36:a4:71:09:ce:e9: 3b:f1:42:4b:9d:12:6b:e3:61:3c:e9:57:74:2c:f9:c6:27:2f: 5f:f1:9b:86:ef:0d:4a:b9:5b:0a:8d:90:d9:dd:f0:ae:03:4f: 25:2a:04:1d:a5:42:ba:e2:50:94:5f:f7:d8:6b:01:72:52:00: 4e:fc:c0:dd:d3:92:91:84:78:4d:c7:0a:3b:e0:b6:c6:2d:80: 0c:c8:99:59:73:c5:6a:78:24:53:1e:b5:cc:4e:89:fc:e1:63: 0c:79:ae:45:d0:ef:c2:2e:c7:b6:d5:6b:ba:30:ce:c2:d1:6d: ba:5e:d8:b8:3c:7c:94:df:eb:8e:ab:06:72:f6:12:b6:14:0f: 57:56:66:fa:b3:ad:f2:88:3e:9c:c3:b5:1c:26:66:91:9f:78: ad:12:10:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n3/cvS0HnT6T9emgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YTQ3ZmZjMzgtOTZjYi00ZmExLWJmNTMtY2VkZGJmNTZiZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS/XBwUGYTqOMNdJkhF9kyRJOgNiAemgiKo3 kNOuLV4Qjw/zX9cpEHw0xxlfV92jKJuYzKTGax13nxCbHIvAnAFtS7RrI4VI38e0 iz33qk9zkcI6DmSYfFLyWY/vjBY7bzrg49YAM1WSzmqfUlxTFzyMdu7+gl/yUK1D HEfiLeQ1eLrC8ukTblkUqGzSaXNJ0pQFk+0cx62NHrdhk/fR6i8ozhMpSWor2q8u 5djeRh3MXsrn2JaR1dCki630Qr55JpdU/c1WCVEm/MmUHJrPiNgCKSR2FygwzQ6u WeTXUyyuARXQxxxz1NHEMREPskL3t1mlEWItznPYTbmATeIW7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBP7Xtcp8+XiQC8+QK8SttymHQC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkMTgyZTktMzU4Yi0z MGE4LTliZTUtYThlMzA1OTQxNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUjuGBaWQhdKah2pg/2XY8afl8ntPOsqneF6dQdfY+rMLo/RgTh 2tHRzDgLSl0axaETCNNA5iV64DSQFvcBbkyuu5KxeAU6Dl4icGlQf4R+X0ad45CD OzHfzd0IYX4LKTvWxXei1DakcQnO6TvxQkudEmvjYTzpV3Qs+cYnL1/xm4bvDUq5 WwqNkNnd8K4DTyUqBB2lQrriUJRf99hrAXJSAE78wN3TkpGEeE3HCjvgtsYtgAzI mVlzxWp4JFMetcxOifzhYwx5rkXQ78Iux7bVa7owzsLRbbpe2Lg8fJTf646rBnL2 ErYUD1dWZvqzrfKIPpzDtRwmZpGfeK0SEKQ= -----END CERTIFICATE-----Generated at Fri Apr 17 03:17:57 2026 by rpki-client