$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa File: a09a28bf-d9c9-33fd-820a-99762c1beb00.roa (raw, json) Hash identifier: jotqs3mKL4aG1/cpnTueOM2E+pJoJlOj3GYYVmLkrv4= Subject key identifier: 86:C7:96:A1:3D:8C:4D:12:95:EA:F7:72:91:54:CA:BE:DC:FC:9A:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A954F154B1A8554D63490 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396596 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:95:4f:15:4b:1a:85:54:d6:34:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=0820148f-4e30-494a-8242-7d502b9a1f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:02:8a:44:09:b7:f2:a7:a6:72:2f:c4:ae: c6:b0:86:5b:5e:41:3a:f6:75:a0:81:33:78:ed:8e: 3f:40:a8:7f:f2:69:a2:25:0f:fc:4a:5a:71:25:43: b1:f6:ba:63:fe:69:b0:b2:78:68:74:03:6b:d9:03: d2:6b:e8:e5:64:49:ed:53:a4:b9:0d:55:a5:2c:00: 6c:36:e5:ec:1f:e6:46:90:b5:b8:70:3a:d9:0d:38: a0:60:16:c9:85:8b:e8:84:fc:99:08:89:c8:fc:d3: f9:bc:cf:64:1c:36:05:d8:c7:13:8d:b5:e7:ef:6b: 86:ee:77:9d:98:0d:b1:a9:55:b0:bf:de:03:51:00: 9b:14:71:0e:a6:3d:be:36:8e:19:3c:eb:71:44:00: 3c:7f:4e:17:6d:1f:36:f9:81:bc:d6:a5:ca:e5:2e: b3:51:35:ae:99:13:8c:c1:36:6f:af:8b:b1:e7:26: 62:f5:dc:f5:24:c3:44:cf:c5:fb:b9:42:e1:62:98: 7b:6b:59:da:f4:8b:8a:87:db:96:9d:3a:86:84:92: cd:20:33:eb:40:1b:0b:12:c5:71:d6:35:0c:62:ed: 80:66:6b:2c:97:f8:1a:cd:f8:d5:eb:03:1b:5e:7d: 92:7d:d5:2d:00:fc:a4:7c:1b:26:76:bc:32:06:3b: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C7:96:A1:3D:8C:4D:12:95:EA:F7:72:91:54:CA:BE:DC:FC:9A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:00:33:b2:4d:f2:0b:6b:03:99:c2:3c:f7:aa:32:e3:1f:20: db:a3:4f:8f:ef:f3:2f:a6:c6:fb:e3:85:cc:c0:e7:c7:60:99: a7:10:e9:c7:bc:4a:5d:2a:f5:e9:07:c1:28:d5:fc:56:7a:aa: c4:96:89:9d:30:1f:5e:d8:cf:65:4f:a0:6b:19:ad:9a:ba:d2: e8:49:f3:01:0f:c1:69:49:2d:ba:fe:d6:59:f3:f0:38:d2:ed: 93:f0:28:63:0b:98:25:78:3f:57:fd:67:cb:46:38:33:5c:20: 6c:31:62:b5:d8:f1:3a:91:a1:16:30:40:dc:63:43:45:f2:52: 01:a4:5c:19:e4:89:81:33:08:9b:ea:f9:39:7e:2a:fb:fa:00: d8:0c:75:48:0e:8b:b9:15:36:eb:7e:84:fe:01:5b:73:ad:33: f0:95:2e:24:50:f0:be:f8:2e:c5:89:c0:20:0b:08:ae:fb:ec: 65:ad:b1:c1:e3:4e:1a:cf:f1:f4:5c:65:77:eb:83:f2:b1:21: ec:81:81:c2:5e:b3:4f:32:36:11:5a:df:06:b2:3a:fe:97:db: 61:d4:f8:00:ad:05:ac:ef:4d:f0:a2:17:29:09:ec:c4:8a:81: d9:47:c5:16:f7:ed:33:7d:6f:04:fb:98:72:e8:18:e6:75:c4: a0:ab:4c:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apVPFUsahVTWNJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MDgyMDE0OGYtNGUzMC00OTRhLTgyNDItN2Q1MDJiOWExZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoasCikQJt/KnpnIvxK7GsIZbXkE69nWggTN4 7Y4/QKh/8mmiJQ/8SlpxJUOx9rpj/mmwsnhodANr2QPSa+jlZEntU6S5DVWlLABs NuXsH+ZGkLW4cDrZDTigYBbJhYvohPyZCInI/NP5vM9kHDYF2McTjbXn72uG7ned mA2xqVWwv94DUQCbFHEOpj2+No4ZPOtxRAA8f04XbR82+YG81qXK5S6zUTWumROM wTZvr4ux5yZi9dz1JMNEz8X7uULhYph7a1na9IuKh9uWnTqGhJLNIDPrQBsLEsVx 1jUMYu2AZmssl/gazfjV6wMbXn2SfdUtAPykfBsmdrwyBjvKVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIbHlqE9jE0Sler3cpFUyr7c/JrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5YTI4YmYtZDljOS0z M2ZkLTgyMGEtOTk3NjJjMWJlYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApADOyTfILawOZwjz3qjLjHyDbo0+P7/Mvpsb7 44XMwOfHYJmnEOnHvEpdKvXpB8Eo1fxWeqrElomdMB9e2M9lT6BrGa2autLoSfMB D8FpSS26/tZZ8/A40u2T8ChjC5gleD9X/WfLRjgzXCBsMWK12PE6kaEWMEDcY0NF 8lIBpFwZ5ImBMwib6vk5fir7+gDYDHVIDou5FTbrfoT+AVtzrTPwlS4kUPC++C7F icAgCwiu++xlrbHB404az/H0XGV364PysSHsgYHCXrNPMjYRWt8Gsjr+l9th1PgA rQWs703wohcpCezEioHZR8UW9+0zfW8E+5hy6BjmdcSgq0xm -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:47 2026 by rpki-client