$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa File: 78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa (raw, json) Hash identifier: Cwlz+h5Yl7KiYGB4ay3BYSvBN6ToRISN1RMGXcYr/0o= Subject key identifier: 33:4D:33:10:4B:37:8D:23:98:A9:9F:CF:C3:C8:CA:61:1E:8D:A1:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D75D54A5654C1C3EECB50D040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 7342 IP address blocks: 2620:74:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4a:56:54:c1:c3:ee:cb:50:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=d790460b-73ec-446c-bc62-510d9ce1587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:bc:d5:9f:22:35:5b:47:0b:56:66:2c:bb: a1:0b:b4:2b:c2:71:0b:62:ce:31:6c:6b:42:8f:97: bc:f8:60:70:11:6c:c8:1e:11:49:7e:06:67:f2:4c: 29:58:35:ad:68:52:17:94:67:f8:88:0d:60:4c:cf: 82:f0:2a:68:82:c7:82:ca:3a:7b:54:ab:8a:90:79: 8e:ec:b0:41:43:8d:55:24:f4:a8:0c:34:6b:88:5b: ec:f3:05:fd:0f:53:55:84:90:3d:07:6b:6a:7f:33: d2:87:f8:6c:7e:f7:ab:ec:58:13:f1:42:a0:f0:c2: 80:89:16:1c:cd:24:00:eb:7c:24:c4:39:72:22:b9: 8f:cb:cd:db:e5:b9:82:7f:f0:fc:36:fd:04:61:8c: 41:9f:c7:25:6d:fa:81:fe:60:73:e2:ee:33:b9:60: be:ed:7f:ce:10:8e:86:f7:1f:30:60:8c:5b:05:dc: 75:f2:c9:fe:30:dd:93:18:20:94:0a:29:68:c5:b8: 55:61:07:75:ed:d8:1d:12:1b:78:51:d3:04:9a:7f: 92:7d:f5:cb:b2:30:53:07:24:26:4a:68:5f:d9:7b: eb:a0:47:27:3c:1e:ae:e9:3c:2c:0a:4e:7e:c5:a8: 60:d2:d4:86:8c:a1:0f:49:71:d9:22:f4:73:2b:93: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:33:10:4B:37:8D:23:98:A9:9F:CF:C3:C8:CA:61:1E:8D:A1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:dd:78:b0:b2:b7:74:f2:a7:e9:f1:e4:9d:78:6d:3a:fd:12: 0f:f9:b6:e5:a0:48:16:b8:98:a4:7a:63:e3:43:94:7f:ba:54: 9a:8d:08:cb:fe:81:b6:5c:80:04:4b:f1:69:7d:21:59:79:ee: 5c:ed:7a:6e:3f:e4:6c:b8:ba:b9:e8:b2:32:ca:57:76:43:a7: d0:e2:f1:a7:64:dd:87:6e:58:1c:74:fd:74:63:f6:c8:2c:07: 8e:27:d1:ea:77:af:34:41:79:8d:c7:10:56:50:d5:b8:a6:d0: 01:7b:20:45:84:8c:b9:e0:de:58:ae:6a:0a:ad:8c:ef:08:88: 53:8e:75:b8:04:16:94:37:c2:68:98:4a:d3:ac:b3:3c:99:03: df:63:61:95:21:0f:9e:97:59:af:84:68:2b:51:2a:c6:9d:46: 90:ed:67:3d:2a:67:15:7a:fe:8d:c9:0f:a0:35:f9:9e:44:c8: ff:b2:fa:a0:05:eb:64:0b:3f:1b:5d:03:cc:e3:d5:40:36:a9: 2d:4a:92:eb:a2:74:8d:6a:c6:a9:5c:a2:74:f4:03:9a:4f:fc: c7:f9:43:79:9a:2f:f3:0d:4f:97:d3:20:a5:c7:47:f5:20:03: 41:e0:8a:df:df:0d:2f:14:1f:82:02:03:b2:30:04:a2:09:ee: b2:e5:74:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111UpWVMHD7stQ0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZDc5MDQ2MGItNzNlYy00NDZjLWJjNjItNTEwZDljZTE1ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MO81Z8iNVtHC1ZmLLuhC7QrwnELYs4xbGtC j5e8+GBwEWzIHhFJfgZn8kwpWDWtaFIXlGf4iA1gTM+C8CpogseCyjp7VKuKkHmO 7LBBQ41VJPSoDDRriFvs8wX9D1NVhJA9B2tqfzPSh/hsfver7FgT8UKg8MKAiRYc zSQA63wkxDlyIrmPy83b5bmCf/D8Nv0EYYxBn8clbfqB/mBz4u4zuWC+7X/OEI6G 9x8wYIxbBdx18sn+MN2TGCCUCiloxbhVYQd17dgdEht4UdMEmn+SffXLsjBTByQm Smhf2XvroEcnPB6u6TwsCk5+xahg0tSGjKEPSXHZIvRzK5P6QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNNMxBLN40jmKmfz8PIymEejaHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhmM2ZhMjktMTExNy0z YmZmLWE2NzAtMmQzM2Q0ZTIxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjdeLCyt3Typ+nx5J14bTr9Eg/5tuWgSBa4mKR6Y+NDlH+6VJqN CMv+gbZcgARL8Wl9IVl57lztem4/5Gy4urnosjLKV3ZDp9Di8adk3YduWBx0/XRj 9sgsB44n0ep3rzRBeY3HEFZQ1bim0AF7IEWEjLng3liuagqtjO8IiFOOdbgEFpQ3 wmiYStOsszyZA99jYZUhD56XWa+EaCtRKsadRpDtZz0qZxV6/o3JD6A1+Z5EyP+y +qAF62QLPxtdA8zj1UA2qS1KkuuidI1qxqlconT0A5pP/Mf5Q3maL/MNT5fTIKXH R/UgA0Hgit/fDS8UH4ICA7IwBKIJ7rLldLk= -----END CERTIFICATE-----Generated at Fri Apr 17 05:01:19 2026 by rpki-client