$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa File: a099164e-5f34-35c4-bf82-e25c0813663b.roa (raw, json) Hash identifier: 7Ow9fYvg9CoyAnHNuhptpFnkboLbPrYtMpNfslZXUwA= Subject key identifier: 0F:EC:86:41:0E:F7:B5:6B:04:0B:16:3D:D6:63:B4:A2:B7:F9:FB:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D75D54A3DFC6B5CF739770900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 7342 IP address blocks: 2620:74:58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4a:3d:fc:6b:5c:f7:39:77:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=8c0ac64c-8987-41d2-8d9a-e63d2e589a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:d7:b2:91:93:06:77:36:61:fe:a3:dd:01: 0f:9c:83:31:55:0c:c2:a1:ca:43:46:4a:93:95:5f: 0c:d5:d0:8e:7f:bf:8d:e3:32:95:4a:e7:16:bc:4c: e7:cb:50:73:ec:40:5c:0f:46:ab:92:5e:79:fe:20: a9:e8:76:29:5f:3b:23:3d:03:1d:b1:de:af:d7:c4: ca:4e:85:49:68:f7:bb:d5:79:ae:25:5b:16:f8:ac: 45:a5:1a:44:33:e4:ff:cd:ad:41:c6:ef:60:bf:55: 43:c7:45:33:fa:d0:d7:31:66:8c:f1:26:41:fa:29: 80:45:a1:64:19:36:01:2f:91:53:ce:91:dd:dc:00: b3:c3:c6:e7:fa:cd:ed:8b:d5:dc:84:40:6e:de:ce: 8a:b7:2e:7c:da:cf:24:d3:92:90:70:f5:ef:df:c1: c1:b9:9a:a1:25:e7:b6:72:7f:32:dc:49:5b:3d:ad: 91:58:39:b7:12:3a:32:af:fd:b0:3d:1d:30:18:21: 7a:b5:e9:a6:31:cf:7e:35:74:fe:63:f3:e5:22:41: af:2a:de:8e:e8:6a:c7:6e:f5:3c:56:8b:f9:a3:5d: 21:ae:94:fd:9e:23:35:30:f6:c6:2f:4e:42:4b:4e: 2c:7c:66:40:71:92:b2:08:c5:fb:9f:c3:1e:90:27: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EC:86:41:0E:F7:B5:6B:04:0B:16:3D:D6:63:B4:A2:B7:F9:FB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a099164e-5f34-35c4-bf82-e25c0813663b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:58::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:0f:d3:95:e1:1d:29:ce:61:e9:6f:77:c0:8b:d2:2c:32: 75:c5:e3:3c:c4:35:09:d5:4a:1e:77:1b:0f:37:89:0e:e8:85: f7:e3:bf:a4:fd:cc:59:eb:ca:49:c3:52:30:47:df:ed:34:57: bd:70:dc:a1:b6:2b:f2:a7:5a:a9:4d:f4:b6:fd:23:18:7a:46: 9d:3b:60:c2:04:e5:42:f8:86:0a:12:ad:11:a5:cb:33:34:13: 0f:7b:b8:0a:89:eb:d3:8b:69:60:28:bb:a5:64:e9:71:9c:e9: cb:29:7f:63:1c:49:35:ce:b5:c3:8e:df:47:26:2b:be:eb:32: 4a:0c:2a:4f:14:3e:a3:ca:d4:5e:4c:c7:71:47:51:00:a9:42: 1b:28:c2:55:51:7f:a7:83:c0:f2:cd:63:5b:0d:6b:7e:48:69: fa:f3:26:0f:57:0c:a4:26:f6:5c:d6:47:68:dd:85:e6:b3:fc: 48:84:e2:fa:69:2e:0c:cf:a6:09:d2:39:f1:a8:4c:63:ed:13: 72:69:19:b7:01:f2:ee:2e:c0:2f:99:1b:fa:4e:9c:dd:36:99: c8:9d:dc:fd:cb:d6:24:97:ce:a6:58:d4:7b:a9:38:34:90:fb: 4c:d7:40:94:71:58:2c:d1:b6:75:b2:b7:8f:f5:8c:2e:fc:85: bb:cf:51:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111Uo9/Gtc9zl3CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk OGMwYWM2NGMtODk4Ny00MWQyLThkOWEtZTYzZDJlNTg5YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43XspGTBnc2Yf6j3QEPnIMxVQzCocpDRkqT lV8M1dCOf7+N4zKVSucWvEzny1Bz7EBcD0arkl55/iCp6HYpXzsjPQMdsd6v18TK ToVJaPe71XmuJVsW+KxFpRpEM+T/za1Bxu9gv1VDx0Uz+tDXMWaM8SZB+imARaFk GTYBL5FTzpHd3ACzw8bn+s3ti9XchEBu3s6Kty582s8k05KQcPXv38HBuZqhJee2 cn8y3ElbPa2RWDm3Ejoyr/2wPR0wGCF6temmMc9+NXT+Y/PlIkGvKt6O6GrHbvU8 Vov5o10hrpT9niM1MPbGL05CS04sfGZAcZKyCMX7n8MekCc5owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA/shkEO97VrBAsWPdZjtKK3+fusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5OTE2NGUtNWYzNC0z NWM0LWJmODItZTI1YzA4MTM2NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElRD9OV4R0pzmHpb3fAi9IsMnXF4zzENQnVSh53Gw83iQ7ohffj v6T9zFnryknDUjBH3+00V71w3KG2K/KnWqlN9Lb9Ixh6Rp07YMIE5UL4hgoSrRGl yzM0Ew97uAqJ69OLaWAou6Vk6XGc6cspf2McSTXOtcOO30cmK77rMkoMKk8UPqPK 1F5Mx3FHUQCpQhsowlVRf6eDwPLNY1sNa35IafrzJg9XDKQm9lzWR2jdheaz/EiE 4vppLgzPpgnSOfGoTGPtE3JpGbcB8u4uwC+ZG/pOnN02mcid3P3L1iSXzqZY1Hup ODSQ+0zXQJRxWCzRtnWyt4/1jC78hbvPUV0= -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:50 2026 by rpki-client