$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa File: a3e480c9-7065-379a-a7a0-3741030cb8a7.roa (raw, json) Hash identifier: g5zp7/cFi8Q6qzn6rIyoU0pNm29XLxABNettDc+qozw= Subject key identifier: A3:92:99:59:01:49:3E:D0:26:4D:AF:CF:4F:A6:8C:A4:04:C3:9E:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA96ABA020BE8E2871B580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396596 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:96:ab:a0:20:be:8e:28:71:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5c3a7a40-7a11-4404-ae27-9369f027a73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:08:cd:e4:6b:33:ca:91:2a:fd:77:6f:ac: f9:c8:e7:92:c8:39:f1:6f:7b:43:d1:12:47:f4:d4: db:4f:3c:3e:a1:bb:bb:8c:d7:a4:88:38:69:7d:7b: 5e:3c:9d:77:f6:f3:63:ff:11:1d:41:ac:ab:03:7a: 4c:b0:58:f0:59:00:0b:71:49:26:b8:20:30:3a:1d: ec:2c:76:4f:22:61:24:09:70:f5:01:53:85:f5:66: 18:aa:26:89:74:a7:69:c4:b1:bc:4c:fe:5f:79:ea: c1:49:8b:01:b5:b1:f7:f1:5d:57:44:2a:96:eb:8d: e4:bb:76:b1:4e:83:68:5c:eb:7b:59:41:67:de:33: 9f:d9:df:73:09:18:b5:c2:42:de:94:27:a1:5a:95: 82:b6:f2:37:1d:70:4c:79:eb:ee:27:9d:c4:35:c4: ed:62:34:bd:93:57:a6:57:2f:42:39:ea:b9:a7:8c: e4:26:b2:b5:fc:97:4b:39:b5:5d:08:57:12:8b:24: 04:a2:fd:1a:fa:87:23:47:ea:5d:db:8d:0e:0c:41: 01:e5:64:16:f6:d6:af:01:2b:ba:e2:f1:01:4a:02: 77:59:bf:27:42:a7:82:53:85:82:fe:3d:d1:b7:93: f9:a1:ab:12:00:a7:53:5f:60:e0:dd:56:cc:58:ae: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:92:99:59:01:49:3E:D0:26:4D:AF:CF:4F:A6:8C:A4:04:C3:9E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:aa:d6:5e:09:3b:1a:b7:bf:26:85:e9:cd:f6:ef:61:21:6e: c1:52:75:90:f4:8c:dc:4e:ab:c8:75:f8:d4:b8:ac:89:6a:2f: e3:e1:c8:30:41:f9:a5:87:a5:30:74:db:8e:ab:6e:af:32:0d: a4:90:78:ec:2f:05:7e:08:0d:2e:a6:da:b5:7c:1e:de:4b:ea: 1e:32:ab:2e:20:06:e7:80:6e:ae:07:e6:7e:f3:ed:4c:49:66: c1:3f:cb:80:32:55:d3:72:6a:a6:c2:74:51:ed:57:7f:06:9b: bf:2e:cb:2c:30:82:c0:84:47:2a:7f:8a:79:9c:47:86:ff:b7: df:9b:09:1f:fb:5f:bf:62:6c:af:1c:cb:e0:f4:37:8f:da:b7: ba:68:cb:06:52:6c:c7:0d:10:a7:da:3e:80:0e:f0:b1:48:d3: c2:39:24:98:3d:33:5f:cc:3e:53:a2:eb:a3:99:28:51:eb:fb: 97:fe:a3:e7:20:a5:ce:57:62:12:62:bf:14:5a:c2:51:bc:61: 1d:a4:2e:9d:0e:67:b7:bc:96:67:b9:33:7e:38:06:0f:87:3c: e1:1b:62:a8:b7:b2:23:db:13:35:a1:9e:b5:fd:48:ef:3c:1a: 1d:8b:7f:a4:83:ae:ed:e5:7a:3a:3b:5b:bf:75:a3:56:ff:da: 39:2c:4b:5e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6paroCC+jihxtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NWMzYTdhNDAtN2ExMS00NDA0LWFlMjctOTM2OWYwMjdhNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiEIzeRrM8qRKv13b6z5yOeSyDnxb3tD0RJH 9NTbTzw+obu7jNekiDhpfXtePJ139vNj/xEdQayrA3pMsFjwWQALcUkmuCAwOh3s LHZPImEkCXD1AVOF9WYYqiaJdKdpxLG8TP5feerBSYsBtbH38V1XRCqW643ku3ax ToNoXOt7WUFn3jOf2d9zCRi1wkLelCehWpWCtvI3HXBMeevuJ53ENcTtYjS9k1em Vy9COeq5p4zkJrK1/JdLObVdCFcSiyQEov0a+ocjR+pd240ODEEB5WQW9tavASu6 4vEBSgJ3Wb8nQqeCU4WC/j3Rt5P5oasSAKdTX2Dg3VbMWK6CRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKOSmVkBST7QJk2vz0+mjKQEw55VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNlNDgwYzktNzA2NS0z NzlhLWE3YTAtMzc0MTAzMGNiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAEqtZeCTsat78mhenN9u9hIW7BUnWQ9IzcTqvI dfjUuKyJai/j4cgwQfmlh6UwdNuOq26vMg2kkHjsLwV+CA0uptq1fB7eS+oeMqsu IAbngG6uB+Z+8+1MSWbBP8uAMlXTcmqmwnRR7Vd/Bpu/LsssMILAhEcqf4p5nEeG /7ffmwkf+1+/YmyvHMvg9DeP2re6aMsGUmzHDRCn2j6ADvCxSNPCOSSYPTNfzD5T ouujmShR6/uX/qPnIKXOV2ISYr8UWsJRvGEdpC6dDme3vJZnuTN+OAYPhzzhG2Ko t7Ij2xM1oZ61/UjvPBodi3+kg67t5Xo6O1u/daNW/9o5LEte -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:59 2026 by rpki-client