$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa File: 4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa (raw, json) Hash identifier: PVBkCfNF6EJa6i2ztZ+ZbnG9aTrsyR5bI/xTjWJycdo= Subject key identifier: A6:74:48:69:0C:CD:5E:92:06:5F:93:83:BF:FD:A0:E5:13:70:62:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A93F657F6B7008AD6AC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396608 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:93:f6:57:f6:b7:00:8a:d6:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=c4e6a49f-e34e-44fa-ae79-08f1e34f3097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:0f:5d:c9:18:d6:ca:34:cc:af:47:4e:3a: fc:71:93:1e:c4:33:11:77:33:7c:2b:6f:33:cb:37: f5:38:ab:a9:e7:6a:45:91:e2:94:9f:1c:47:7a:8e: 2b:08:27:71:54:28:b1:b3:1e:be:16:32:0a:b0:7e: d1:3c:48:fa:2e:85:b5:03:5f:a0:4d:70:fa:59:a6: 5f:ae:9f:0a:65:87:11:84:06:b9:ca:2f:73:d7:67: 54:3f:37:da:b9:23:42:84:3c:02:ce:af:17:51:4f: 1b:d3:06:f1:17:e2:3e:e2:f2:ca:ed:eb:f1:41:b0: 18:42:95:4f:0e:1c:3a:85:53:da:3b:45:ed:04:dc: a9:40:65:c9:cd:7e:dc:e0:5d:74:38:75:bc:8e:90: df:77:81:d3:40:7e:c2:7b:ed:b8:cd:28:c1:0a:2f: 4b:58:ec:b6:37:df:6f:3a:79:63:82:3b:11:58:4f: d3:64:04:48:10:35:3e:07:24:50:d7:e1:96:54:fb: 6e:73:8c:48:51:c5:21:1a:1b:fd:96:a3:71:6e:f3: 1a:b6:41:8b:73:a1:c1:49:cb:32:a2:80:b7:88:ee: 65:96:dd:e3:c0:1f:a2:18:8a:92:7b:4b:68:63:06: c7:2d:11:8a:5f:c2:ca:a1:b9:a2:fd:4f:32:31:fd: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:48:69:0C:CD:5E:92:06:5F:93:83:BF:FD:A0:E5:13:70:62:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe2a3cd-b31f-34db-8d2d-6e6423e27a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3b:1b:86:9b:7f:93:bf:35:32:a7:46:cd:49:78:f7:dd:c6: cf:73:ac:01:a2:0f:aa:62:07:03:c4:5d:b4:97:40:35:e7:87: e5:7e:0d:e9:fe:99:86:03:0f:fd:4e:00:b4:97:f5:af:f1:13: 27:4e:3e:e8:31:25:02:93:b0:2f:5d:09:65:45:29:1c:19:3e: 61:af:c3:9f:4e:7c:40:7f:7a:7d:73:ad:5f:0b:e6:47:a0:85: 34:4c:e1:82:ce:8c:12:fb:e0:cb:74:c7:b1:30:7c:4f:1d:b0: 4b:19:10:79:a8:d6:5d:63:92:97:90:03:b0:95:14:b6:65:43: bb:32:9c:0b:47:28:b4:42:d5:68:aa:d2:d5:5e:0e:ad:39:1e: ab:99:03:87:b1:17:c9:5e:c6:47:fa:46:2f:ee:02:ed:60:3a: 52:78:07:a6:ba:5b:dd:9f:ec:4d:49:53:30:e3:6a:e2:cd:2f: 1f:93:9e:c2:1c:e7:36:1f:43:50:b4:0b:2c:83:bf:8b:c7:58: 20:5d:38:f9:ef:d1:3e:6c:7b:a3:f9:ad:25:40:68:7e:1f:d2: 7e:26:0c:3e:75:61:28:e9:a8:4c:94:a5:12:27:cf:3e:9c:0b: 5a:ac:ee:54:db:83:c8:8d:05:d8:e1:1f:39:8f:4b:b5:1a:b4: 7c:30:43:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apP2V/a3AIrWrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YzRlNmE0OWYtZTM0ZS00NGZhLWFlNzktMDhmMWUzNGYzMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMsPXckY1so0zK9HTjr8cZMexDMRdzN8K28z yzf1OKup52pFkeKUnxxHeo4rCCdxVCixsx6+FjIKsH7RPEj6LoW1A1+gTXD6WaZf rp8KZYcRhAa5yi9z12dUPzfauSNChDwCzq8XUU8b0wbxF+I+4vLK7evxQbAYQpVP Dhw6hVPaO0XtBNypQGXJzX7c4F10OHW8jpDfd4HTQH7Ce+24zSjBCi9LWOy2N99v OnljgjsRWE/TZARIEDU+ByRQ1+GWVPtuc4xIUcUhGhv9lqNxbvMatkGLc6HBScsy ooC3iO5llt3jwB+iGIqSe0toYwbHLRGKX8LKobmi/U8yMf0CYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKZ0SGkMzV6SBl+Tg7/9oOUTcGIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlMmEzY2QtYjMxZi0z NGRiLThkMmQtNmU2NDIzZTI3YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4OxuGm3+TvzUyp0bNSXj33cbPc6wBog+qYgcD xF20l0A154flfg3p/pmGAw/9TgC0l/Wv8RMnTj7oMSUCk7AvXQllRSkcGT5hr8Of TnxAf3p9c61fC+ZHoIU0TOGCzowS++DLdMexMHxPHbBLGRB5qNZdY5KXkAOwlRS2 ZUO7MpwLRyi0QtVoqtLVXg6tOR6rmQOHsRfJXsZH+kYv7gLtYDpSeAemulvdn+xN SVMw42rizS8fk57CHOc2H0NQtAssg7+Lx1ggXTj579E+bHuj+a0lQGh+H9J+Jgw+ dWEo6ahMlKUSJ88+nAtarO5U24PIjQXY4R85j0u1GrR8MEPh -----END CERTIFICATE-----Generated at Fri Apr 17 05:31:07 2026 by rpki-client