$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa File: 526b3a19-ab1a-36ab-b6ad-46405ac52802.roa (raw, json) Hash identifier: gpmhxCpN5MjrhoH82dCWD85dmDeRoK5GC5lcd0dGH7I= Subject key identifier: 6B:39:81:36:FC:21:B3:A9:4A:14:5C:85:28:73:FE:06:2B:21:3E:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A9476D470B54FEE8F4680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396572 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:94:76:d4:70:b5:4f:ee:8f:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=56a17e0c-fa85-451f-811a-9984bde0cde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:51:7a:f3:d0:64:71:d9:b6:2d:76:f0:81: 90:e8:92:7a:ca:de:7c:ab:5f:75:ef:56:35:65:bb: c5:e9:6f:0e:e1:7a:bb:7d:76:20:41:e3:96:2d:76: a4:b2:48:01:5f:f8:f4:e8:09:b0:e5:79:da:a8:5b: 34:14:cc:1a:94:e5:ea:dc:74:41:57:38:5e:52:da: 60:cf:9a:4c:5c:b8:50:11:86:4f:c7:10:c6:53:44: 1d:5c:fc:d7:97:ee:f0:f3:92:75:a9:cd:04:f2:f3: b3:39:64:c3:e9:25:f8:a7:56:6b:43:cb:39:53:d8: be:33:a7:63:a8:74:61:57:e9:06:43:37:c3:cc:9f: f5:ce:c9:12:35:94:42:f9:ef:4c:d4:73:32:cb:e9: de:1a:e9:93:3a:4a:f5:c2:5a:d8:6e:10:38:d7:39: b4:db:c9:9d:e6:06:b5:40:b3:5f:33:51:41:ad:23: 62:9c:db:ef:be:86:81:a7:d1:8d:43:9c:41:cb:b4: c1:03:25:e7:65:e7:9f:8d:68:3a:db:c3:21:16:04: 79:cb:63:b2:ba:5c:f1:de:88:a7:a9:57:c6:1e:7a: f6:44:a2:5c:f5:08:1a:18:66:84:d1:46:f2:cc:a2: b3:34:1a:4f:41:cc:9f:a0:a5:ae:70:98:9f:36:47: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:39:81:36:FC:21:B3:A9:4A:14:5C:85:28:73:FE:06:2B:21:3E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e6:0f:10:cd:0f:77:4f:b2:af:d3:4d:2e:60:bb:de:4e:48: 21:a1:20:87:0b:0d:f0:15:f1:99:2f:ae:97:85:6a:f1:73:e6: 0d:89:5d:b3:02:82:a5:45:62:34:b8:da:a0:7f:16:1b:01:67: 6c:24:46:a1:02:d5:80:0a:cb:21:79:b5:23:b6:62:42:de:dd: 08:f1:05:c0:20:33:1f:57:6a:83:0d:32:77:10:6a:25:59:b1: bb:0e:fd:cb:cd:5f:67:5b:94:19:fb:5a:75:70:da:05:29:a7: a8:bc:28:29:8b:d7:7e:14:a7:74:de:83:83:4d:31:d8:b6:63: 84:0a:aa:ac:8b:06:28:0b:54:4e:ea:ff:e7:74:3d:6d:6e:f8: 1f:e7:ec:a2:7e:72:39:36:44:1a:9b:d6:c6:c4:49:52:43:f8: 19:7f:22:9d:4a:ad:00:28:7b:32:a1:4d:e0:a4:a9:1c:80:0f: 49:7f:f5:0a:71:73:c5:c6:79:fe:92:6d:4e:3e:da:f5:02:e3: c0:67:61:27:ee:eb:03:e6:ba:14:df:00:b5:3a:8f:64:40:99: cf:d2:29:b1:02:12:bb:87:03:a2:75:0d:4f:bf:7f:de:5f:19: 3b:17:5f:2b:b0:61:c2:90:e7:60:e2:e9:4c:a6:43:59:90:18: 96:e2:cb:11 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apR21HC1T+6PRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NTZhMTdlMGMtZmE4NS00NTFmLTgxMWEtOTk4NGJkZTBjZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc1RevPQZHHZti128IGQ6JJ6yt58q19171Y1 ZbvF6W8O4Xq7fXYgQeOWLXakskgBX/j06Amw5XnaqFs0FMwalOXq3HRBVzheUtpg z5pMXLhQEYZPxxDGU0QdXPzXl+7w85J1qc0E8vOzOWTD6SX4p1ZrQ8s5U9i+M6dj qHRhV+kGQzfDzJ/1zskSNZRC+e9M1HMyy+neGumTOkr1wlrYbhA41zm028md5ga1 QLNfM1FBrSNinNvvvoaBp9GNQ5xBy7TBAyXnZeefjWg628MhFgR5y2Oyulzx3oin qVfGHnr2RKJc9QgaGGaE0UbyzKKzNBpPQcyfoKWucJifNkeZQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGs5gTb8IbOpShRchShz/gYrIT5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI2YjNhMTktYWIxYS0z NmFiLWI2YWQtNDY0MDVhYzUyODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBN5g8QzQ93T7Kv000uYLveTkghoSCHCw3wFfGZ L66XhWrxc+YNiV2zAoKlRWI0uNqgfxYbAWdsJEahAtWACsshebUjtmJC3t0I8QXA IDMfV2qDDTJ3EGolWbG7Dv3LzV9nW5QZ+1p1cNoFKaeovCgpi9d+FKd03oODTTHY tmOECqqsiwYoC1RO6v/ndD1tbvgf5+yifnI5NkQam9bGxElSQ/gZfyKdSq0AKHsy oU3gpKkcgA9Jf/UKcXPFxnn+km1OPtr1AuPAZ2En7usD5roU3wC1Oo9kQJnP0imx AhK7hwOidQ1Pv3/eXxk7F18rsGHCkOdg4ulMpkNZkBiW4ssR -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:17 2026 by rpki-client