$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7108abf7-714a-345c-bfc6-f2289f3ee1dc.roa File: 7108abf7-714a-345c-bfc6-f2289f3ee1dc.roa (raw, json) Hash identifier: QTOTZZk+6aFoSohrdWSuc1ZuBCT6JcCagS+MOc9Tz/o= Subject key identifier: 43:FC:6D:B5:AC:AC:17:53:A7:C1:F9:CB:9E:57:E1:6A:57:EC:CF:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A93C3E6D64A426B5BAEA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7108abf7-714a-345c-bfc6-f2289f3ee1dc.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396573 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:93:c3:e6:d6:4a:42:6b:5b:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=ff8853ed-9ec3-4014-ae11-a7b97d24a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:ea:52:84:2b:50:25:e8:70:24:8f:dc:2d: d3:ba:24:58:5d:be:a4:46:65:a6:5e:47:96:e9:d1: 53:86:75:e7:c0:0b:3c:b2:33:3a:42:b0:9f:81:8c: 5d:15:1a:d8:b8:13:40:e6:46:bc:a3:9b:38:a8:4a: 25:ed:87:4c:14:a3:da:f5:8f:19:b4:50:54:f9:65: f2:53:46:05:01:57:d0:30:6e:89:16:33:56:23:35: 25:bc:f7:ac:3c:35:11:6a:92:8d:ad:d6:9c:88:d3: 6c:54:6e:92:8c:eb:19:0e:02:69:28:a6:58:8e:80: 40:85:3a:bf:a6:b7:4b:e0:ac:b9:1d:1a:a9:56:83: ff:a4:6e:22:4d:59:65:d8:40:47:4b:04:2b:d0:c5: 93:07:5f:12:4d:c7:1a:bc:2c:e9:3f:f5:d4:3d:9d: c1:22:aa:27:02:1c:96:99:9c:03:f7:a3:48:51:95: 59:47:85:53:ab:48:19:94:23:0f:69:07:a2:1b:cc: df:2c:77:22:75:75:88:87:8a:da:b2:f5:a1:49:63: 1f:04:90:50:e6:a9:85:f2:3f:f3:2b:c8:c2:34:53: ef:03:b2:38:a8:10:96:11:3f:66:3b:c6:bb:0a:14: bb:f4:6d:63:09:70:cc:89:56:ed:ac:aa:1b:23:d6: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:6D:B5:AC:AC:17:53:A7:C1:F9:CB:9E:57:E1:6A:57:EC:CF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7108abf7-714a-345c-bfc6-f2289f3ee1dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0e:eb:f4:16:af:65:b4:4c:77:09:bc:ea:e5:f4:0e:59:51: 9c:e6:79:e1:55:f4:e4:94:74:ca:2f:21:22:a2:e1:75:c1:0f: 32:d1:a4:bf:5e:01:71:34:90:d1:fb:f8:ee:f4:4b:14:cb:24: 10:e4:ae:e0:53:5a:6e:02:c4:83:cb:bb:90:76:06:9f:90:ea: e2:77:81:27:f2:00:3c:3b:4a:7c:6e:30:a2:32:3b:32:ba:b1: 40:da:8c:57:ee:dc:ba:45:3d:f5:d4:0f:75:b8:7b:67:c3:39: 92:40:c7:83:30:f8:c1:ff:36:47:7e:ce:24:d5:82:56:e7:95: 32:04:db:d7:77:3c:35:3b:21:2c:5c:7e:73:f2:bf:56:22:d2: 43:f7:ad:c3:dd:d2:8a:b4:8d:0d:20:4a:3a:d7:d3:1c:17:7f: 0b:ca:97:bb:a6:8c:69:5a:93:7a:2e:0d:30:03:99:49:12:4e: da:7c:6c:ea:af:9c:5e:87:08:76:f2:02:29:e7:a3:d3:1c:a9: 6e:e5:3d:82:44:7f:fb:18:f7:6d:be:21:bd:31:25:12:bd:69: c8:85:ed:a8:8f:97:47:ef:0e:56:df:8a:c9:e2:2a:2d:17:75: de:c4:6c:74:dc:5c:f0:68:56:c0:cb:36:e7:50:55:49:5f:3e: f4:17:f8:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apPD5tZKQmtbrqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZmY4ODUzZWQtOWVjMy00MDE0LWFlMTEtYTdiOTdkMjRhODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44XqUoQrUCXocCSP3C3TuiRYXb6kRmWmXkeW 6dFThnXnwAs8sjM6QrCfgYxdFRrYuBNA5ka8o5s4qEol7YdMFKPa9Y8ZtFBU+WXy U0YFAVfQMG6JFjNWIzUlvPesPDURapKNrdaciNNsVG6SjOsZDgJpKKZYjoBAhTq/ prdL4Ky5HRqpVoP/pG4iTVll2EBHSwQr0MWTB18STccavCzpP/XUPZ3BIqonAhyW mZwD96NIUZVZR4VTq0gZlCMPaQeiG8zfLHcidXWIh4rasvWhSWMfBJBQ5qmF8j/z K8jCNFPvA7I4qBCWET9mO8a7ChS79G1jCXDMiVbtrKobI9Y9kQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEP8bbWsrBdTp8H5y55X4WpX7M93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzEwOGFiZjctNzE0YS0z NDVjLWJmYzYtZjIyODlmM2VlMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMDuv0Fq9ltEx3Cbzq5fQOWVGc5nnhVfTklHTK LyEiouF1wQ8y0aS/XgFxNJDR+/ju9EsUyyQQ5K7gU1puAsSDy7uQdgafkOrid4En 8gA8O0p8bjCiMjsyurFA2oxX7ty6RT311A91uHtnwzmSQMeDMPjB/zZHfs4k1YJW 55UyBNvXdzw1OyEsXH5z8r9WItJD963D3dKKtI0NIEo619McF38Lype7poxpWpN6 Lg0wA5lJEk7afGzqr5xehwh28gIp56PTHKlu5T2CRH/7GPdtviG9MSUSvWnIhe2o j5dH7w5W34rJ4iotF3XexGx03FzwaFbAyzbnUFVJXz70F/i7 -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:03 2026 by rpki-client