$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa File: a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa (raw, json) Hash identifier: GN2ly1q39yFHDNnDUhvOx6CKyPegCSKqnN8Zrwm5y/Q= Subject key identifier: 7B:3A:86:51:27:05:A5:D5:96:9F:77:54:07:4C:25:9D:CB:EF:2A:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA99C99DBD88CB58BAFF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396587 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:99:c9:9d:bd:88:cb:58:ba:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=1461e955-437d-4896-bb22-be866c8fb97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:53:9b:da:3d:ab:47:34:f8:92:55:e9:e7: 9f:d6:39:e9:4b:5f:c1:19:46:74:92:31:ad:43:20: c1:69:98:8e:0d:be:4c:a5:81:d9:07:44:67:cb:1e: 1d:1e:17:4c:05:8f:7b:96:7d:b7:c4:10:31:ec:2e: 9a:b1:97:b8:e5:c9:40:13:82:d9:47:5b:0b:86:0f: 4e:be:48:4a:65:e6:64:41:8a:56:b0:9e:d0:e3:39: db:af:b5:a6:05:f0:1d:f9:5e:77:79:f2:ea:9e:5a: 45:17:66:9a:2d:39:88:12:2d:91:6d:06:d4:8d:a0: 3a:14:05:52:00:c3:23:76:69:e7:e3:df:1c:53:ce: ed:cc:55:b3:e6:b3:b6:80:98:a4:3e:33:76:c7:ec: 14:5b:5f:d9:6a:13:d7:0c:c7:a6:6e:b0:44:0e:bd: 9e:09:10:32:26:db:38:ed:fa:19:70:eb:bf:ae:38: 5b:85:7e:0f:c1:42:4b:c3:29:2b:ed:aa:3a:38:fc: f6:6c:87:59:cb:dc:dc:0c:65:e3:8e:6d:66:6d:89: 5c:b8:b6:c8:a7:e6:7a:d8:7e:1b:45:6b:d4:e3:d6: de:f6:ea:92:83:aa:cb:7c:b7:1c:5c:5d:6b:56:f1: 0c:ba:e4:f1:50:23:6b:a2:8e:b8:69:04:0f:b8:c1: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:86:51:27:05:A5:D5:96:9F:77:54:07:4C:25:9D:CB:EF:2A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bf:34:95:c6:55:8c:6c:65:94:fe:ac:87:eb:25:5c:29:41: 7c:5e:75:0d:21:a2:08:16:f0:13:85:84:be:f6:64:cd:2b:46: 50:56:59:19:e4:53:fc:9a:dc:6b:23:56:76:54:4d:bc:70:e2: 75:4d:ff:7d:82:ad:96:2e:a5:b1:1d:88:95:bf:ad:95:89:fa: 2d:72:36:18:7a:75:51:4e:ae:7f:d7:61:26:be:a7:ce:18:ac: cb:bd:1d:46:72:30:c0:12:4d:85:c4:ac:53:79:f0:dc:97:d7: 11:9d:d6:39:91:6c:3d:c1:4a:34:d4:eb:6b:36:07:e0:2f:8a: 3f:d3:23:01:33:f3:dc:f5:9d:3c:6f:df:f3:f4:8d:92:20:94: d5:b9:d4:d3:01:74:d9:f3:64:72:f6:92:af:4e:41:fe:da:b8: cc:e2:d0:3c:40:24:89:91:23:33:c1:90:7b:6f:a2:5c:a5:d2: ae:71:6f:93:77:0b:d9:6a:1e:e9:33:a6:55:96:56:61:9e:3b: d4:48:02:88:ab:3e:0f:b8:f1:93:97:a6:da:ad:9d:6f:6c:2e: 74:10:c2:5a:2f:a6:50:81:c2:71:4c:29:14:12:7e:fa:cf:c3: ad:6e:ea:f7:0d:2b:41:9d:de:a4:be:8f:b6:be:37:6b:26:fb: 80:39:14:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pnJnb2Iy1i6/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTQ2MWU5NTUtNDM3ZC00ODk2LWJiMjItYmU4NjZjOGZiOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBdTm9o9q0c0+JJV6eef1jnpS1/BGUZ0kjGt QyDBaZiODb5MpYHZB0Rnyx4dHhdMBY97ln23xBAx7C6asZe45clAE4LZR1sLhg9O vkhKZeZkQYpWsJ7Q4znbr7WmBfAd+V53efLqnlpFF2aaLTmIEi2RbQbUjaA6FAVS AMMjdmnn498cU87tzFWz5rO2gJikPjN2x+wUW1/ZahPXDMembrBEDr2eCRAyJts4 7foZcOu/rjhbhX4PwUJLwykr7ao6OPz2bIdZy9zcDGXjjm1mbYlcuLbIp+Z62H4b RWvU49be9uqSg6rLfLccXF1rVvEMuuTxUCNroo64aQQPuMHfhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHs6hlEnBaXVlp93VAdMJZ3L7yqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZmMzlkNDAtZjJkMS0z NGQ3LTllYzMtNmEwNTdkYjAwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+vzSVxlWMbGWU/qyH6yVcKUF8XnUNIaIIFvAT hYS+9mTNK0ZQVlkZ5FP8mtxrI1Z2VE28cOJ1Tf99gq2WLqWxHYiVv62VifotcjYY enVRTq5/12EmvqfOGKzLvR1GcjDAEk2FxKxTefDcl9cRndY5kWw9wUo01OtrNgfg L4o/0yMBM/Pc9Z08b9/z9I2SIJTVudTTAXTZ82Ry9pKvTkH+2rjM4tA8QCSJkSMz wZB7b6JcpdKucW+TdwvZah7pM6ZVllZhnjvUSAKIqz4PuPGTl6barZ1vbC50EMJa L6ZQgcJxTCkUEn76z8Otbur3DStBnd6kvo+2vjdrJvuAORQF -----END CERTIFICATE-----Generated at Fri Apr 17 03:28:20 2026 by rpki-client