$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa File: b228ac62-7a79-352e-9c29-196e7a6f8297.roa (raw, json) Hash identifier: L5cp4wdlExgFc1chXcTg1VbpscYUtxTMp6tWoqbPzXI= Subject key identifier: 42:17:E1:E7:FA:92:B3:3F:E6:EA:06:C8:63:A4:7E:13:A7:64:A6:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A92D3C911395F59775B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 36622 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:92:d3:c9:11:39:5f:59:77:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=3433e15a-5290-472f-9c0b-3767da3b4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:84:78:ac:e7:c9:b9:c8:e3:1a:ec:55:e8: ef:e5:f9:74:bc:2c:c3:a7:ce:1f:6d:f8:de:87:9f: 91:fb:7f:d1:6d:68:88:a2:9c:6a:12:b8:ac:73:75: bb:4f:e0:38:a1:6c:85:83:26:b2:b4:b3:54:03:49: c1:34:58:72:0f:77:a3:d9:93:22:af:bc:a2:cc:6b: 1d:89:b7:bd:f3:c4:d3:90:e1:b4:bd:13:64:7f:53: 46:9d:42:eb:fb:36:98:18:d2:2b:38:53:6a:ff:dd: 36:06:da:8a:7a:1e:4e:16:34:74:76:36:ee:94:44: 4a:66:c3:e8:0b:63:ba:9b:35:cd:83:78:b1:24:50: d9:a2:56:f1:69:28:98:80:d6:40:ec:0e:3d:95:cd: 8c:c6:91:0e:04:c3:61:db:6f:34:fc:61:f5:6b:28: 9b:09:72:e0:17:30:52:f8:e6:cf:44:e7:a3:85:42: 39:4c:d0:03:7f:8a:57:d5:9a:97:bc:bd:f6:f6:ef: 2b:de:15:80:e4:3d:43:cd:f1:40:df:0d:d4:ca:e7: 1b:65:95:c5:67:e5:53:da:c8:28:ec:0c:51:5f:69: 4b:e2:e6:ff:7a:46:aa:63:e8:0b:bd:06:bf:77:b9: df:6b:3a:cd:09:e2:99:21:0c:b1:75:50:ef:4f:75: 3d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:E1:E7:FA:92:B3:3F:E6:EA:06:C8:63:A4:7E:13:A7:64:A6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b228ac62-7a79-352e-9c29-196e7a6f8297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:81:50:6c:81:52:3b:5f:e8:f2:10:7f:8c:e7:e9:1f:41:46: 82:b6:db:08:04:f6:17:bd:43:e8:41:e5:48:7c:d4:f2:1b:fe: fd:77:65:2d:4e:f3:45:dc:f7:d0:69:72:f6:45:9b:fe:5a:1c: 61:96:8d:f4:83:c8:a2:48:d6:f7:ff:0a:51:91:a3:41:77:b1: ca:6e:71:3f:92:7a:a3:3f:35:9f:5d:3d:6e:73:56:e5:fe:f9: 8b:e7:5e:8b:d9:a2:4f:6e:3c:87:1b:2a:13:6a:c7:2f:01:db: e0:4b:ee:d7:a0:3f:d3:9f:39:bd:94:a5:22:84:bc:2c:4f:e4: 7e:47:4f:df:d3:bb:ce:95:04:d2:45:8d:a5:9c:62:97:56:93: 40:e6:d2:db:5e:77:a6:42:a8:47:cf:61:79:d7:4d:5c:d3:36: 7b:b6:8f:13:e0:52:7d:4a:0f:e3:eb:60:7e:10:a9:d2:da:5e: 39:11:82:ba:8a:c8:86:e3:4a:70:77:fe:8e:eb:a4:6a:d5:a5: bc:6d:9b:45:69:c5:0f:02:19:91:44:32:85:47:25:f9:89:18: f8:ab:b6:a4:72:21:71:c7:b2:56:8a:b6:98:8e:e1:4f:40:d4: 49:6b:7b:37:4f:f0:bf:f0:64:ad:3d:f8:6b:68:64:b8:25:ec: 0f:20:9e:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apLTyRE5X1l3WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MzQzM2UxNWEtNTI5MC00NzJmLTljMGItMzc2N2RhM2I0NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleuEeKznybnI4xrsVejv5fl0vCzDp84fbfje h5+R+3/RbWiIopxqErisc3W7T+A4oWyFgyaytLNUA0nBNFhyD3ej2ZMir7yizGsd ibe988TTkOG0vRNkf1NGnULr+zaYGNIrOFNq/902BtqKeh5OFjR0djbulERKZsPo C2O6mzXNg3ixJFDZolbxaSiYgNZA7A49lc2MxpEOBMNh2280/GH1ayibCXLgFzBS +ObPROejhUI5TNADf4pX1ZqXvL329u8r3hWA5D1DzfFA3w3UyucbZZXFZ+VT2sgo 7AxRX2lL4ub/ekaqY+gLvQa/d7nfazrNCeKZIQyxdVDvT3U9fQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEIX4ef6krM/5uoGyGOkfhOnZKbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyOGFjNjItN2E3OS0z NTJlLTljMjktMTk2ZTdhNmY4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9gVBsgVI7X+jyEH+M5+kfQUaCttsIBPYXvUPo QeVIfNTyG/79d2UtTvNF3PfQaXL2RZv+Whxhlo30g8iiSNb3/wpRkaNBd7HKbnE/ knqjPzWfXT1uc1bl/vmL516L2aJPbjyHGyoTascvAdvgS+7XoD/Tnzm9lKUihLws T+R+R0/f07vOlQTSRY2lnGKXVpNA5tLbXnemQqhHz2F5101c0zZ7to8T4FJ9Sg/j 62B+EKnS2l45EYK6isiG40pwd/6O66Rq1aW8bZtFacUPAhmRRDKFRyX5iRj4q7ak ciFxx7JWiraYjuFPQNRJa3s3T/C/8GStPfhraGS4JewPIJ6l -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:09 2026 by rpki-client