$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa File: 643b16f3-0003-312a-b913-39d2058a3ec7.roa (raw, json) Hash identifier: A/itXOwtxc0tA0xXvGNX6fShiaWao1V3TFyLEtncimc= Subject key identifier: E5:44:9B:4F:B4:EA:52:A3:CB:B4:8B:8E:84:66:ED:CF:FD:41:82:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9A24B1912D5736B42380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 40717 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9a:24:b1:91:2d:57:36:b4:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=95e8a736-ea8b-4073-b678-e39fc435f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:de:8e:01:5f:fc:91:cd:70:e2:70:45:70: 7b:ba:6f:01:71:18:6c:70:93:fb:70:ae:b5:da:2f: bf:e9:11:a4:0e:ff:aa:99:4b:68:15:d0:ca:f2:f3: ce:0f:11:af:de:e9:ae:17:f6:59:98:0a:7b:98:92: 91:b1:07:93:85:e8:d3:3c:de:2c:56:67:83:95:5f: b2:6d:33:aa:58:ff:08:38:a7:1c:08:64:46:34:d5: d4:37:35:b8:14:f0:45:e8:54:d7:97:6a:1a:42:4d: e6:bd:41:f1:cb:56:90:66:f8:d3:d1:e4:32:b5:c2: 15:4c:8d:e5:91:9d:16:47:5b:a5:bb:a4:cc:a3:77: 30:f3:2e:e0:ab:f1:bc:70:5d:c4:c4:2f:b5:4f:50: 55:2a:39:25:ee:64:41:7b:ab:30:41:c3:ee:ad:d8: e0:60:31:2a:b5:62:a0:10:c9:ca:3a:ec:d4:e1:fc: fb:51:9c:a0:31:f1:02:b1:2a:25:74:78:b8:55:fe: 30:f5:c0:7c:46:3f:1c:3d:26:96:2c:39:fd:cd:26: 11:4a:e4:af:97:d8:91:27:52:80:4f:53:80:17:80: 27:d8:92:ae:88:aa:a3:62:60:26:50:53:70:13:06: 39:7d:d7:79:78:33:50:2f:d5:f7:86:18:76:7f:0d: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:9B:4F:B4:EA:52:A3:CB:B4:8B:8E:84:66:ED:CF:FD:41:82:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/643b16f3-0003-312a-b913-39d2058a3ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:01:d2:f0:6c:b3:5e:39:ac:71:cd:53:a6:05:16:dc:62:fe: 3a:f0:c3:bd:43:4a:a9:74:25:c5:dc:f7:3e:4d:46:30:ee:2b: 4e:eb:f1:2e:c2:e4:2d:3e:2a:14:62:e1:7c:3a:31:ef:7f:d5: 84:83:b5:c3:e9:86:69:44:d5:df:17:9f:6f:fa:d4:cc:88:d3: 87:e8:50:80:06:ed:f8:36:35:45:34:3e:b5:0f:c8:e0:1e:8b: 7a:9e:73:11:af:7d:fe:cd:c8:a2:31:14:ab:46:b3:c1:65:15: f6:2b:fd:e8:d0:d8:bd:ae:63:9c:20:40:65:d3:40:d9:19:9c: 24:9f:ad:40:b5:68:81:1f:d3:10:c1:5b:aa:10:22:a4:32:d3: 43:a9:83:ce:7e:23:8c:a5:5c:ff:98:b3:82:ee:05:3d:f4:25: 94:92:4d:71:ad:ff:e0:da:a3:32:1b:f4:15:ba:0f:76:f3:41: a0:54:ec:a8:6e:71:8c:76:96:30:f1:39:38:df:e1:7d:8f:7b: f3:c5:eb:e6:a1:6c:d1:8c:67:df:3a:47:02:a3:9a:4b:72:af: 50:c1:86:cb:2f:34:28:f1:c3:a0:22:1b:90:e3:2e:27:68:31: 52:c9:48:2d:02:c9:b9:68:f3:c3:81:56:c5:fd:8a:96:90:3a: 70:58:91:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6poksZEtVza0I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTVlOGE3MzYtZWE4Yi00MDczLWI2NzgtZTM5ZmM0MzVmNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPfejgFf/JHNcOJwRXB7um8BcRhscJP7cK61 2i+/6RGkDv+qmUtoFdDK8vPODxGv3umuF/ZZmAp7mJKRsQeThejTPN4sVmeDlV+y bTOqWP8IOKccCGRGNNXUNzW4FPBF6FTXl2oaQk3mvUHxy1aQZvjT0eQytcIVTI3l kZ0WR1ulu6TMo3cw8y7gq/G8cF3ExC+1T1BVKjkl7mRBe6swQcPurdjgYDEqtWKg EMnKOuzU4fz7UZygMfECsSoldHi4Vf4w9cB8Rj8cPSaWLDn9zSYRSuSvl9iRJ1KA T1OAF4An2JKuiKqjYmAmUFNwEwY5fdd5eDNQL9X3hhh2fw1ZXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOVEm0+06lKjy7SLjoRm7c/9QYKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjQzYjE2ZjMtMDAwMy0z MTJhLWI5MTMtMzlkMjA1OGEzZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjAdLwbLNeOaxxzVOmBRbcYv468MO9Q0qpdCXF 3Pc+TUYw7itO6/EuwuQtPioUYuF8OjHvf9WEg7XD6YZpRNXfF59v+tTMiNOH6FCA Bu34NjVFND61D8jgHot6nnMRr33+zciiMRSrRrPBZRX2K/3o0Ni9rmOcIEBl00DZ GZwkn61AtWiBH9MQwVuqECKkMtNDqYPOfiOMpVz/mLOC7gU99CWUkk1xrf/g2qMy G/QVug9280GgVOyobnGMdpYw8Tk43+F9j3vzxevmoWzRjGffOkcCo5pLcq9QwYbL LzQo8cOgIhuQ4y4naDFSyUgtAsm5aPPDgVbF/YqWkDpwWJF6 -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:06 2026 by rpki-client