$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa File: b33653a3-e943-3203-996f-6057a0402e41.roa (raw, json) Hash identifier: E6Qo7tnNtc4U3c6Jiawzznm4V5koExWJGKpo1zOB1js= Subject key identifier: 11:FB:57:B4:BB:3E:8D:1F:1F:EF:7D:B4:77:BD:69:C2:FE:FE:FC:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA97AFD7D4E319D2749800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396584 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:97:af:d7:d4:e3:19:d2:74:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=52394ba4-f49f-49f7-97e9-fce8a13a6f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:52:1c:0c:62:9c:ad:95:ff:7b:42:78:69: bf:42:a7:fd:9d:5c:41:5e:77:7b:16:a8:1b:a0:5f: 55:5b:0e:35:3e:18:74:97:ef:20:c3:09:c7:61:0c: 15:1e:62:d1:8b:e2:65:8c:cc:2f:0e:cd:94:c3:87: ff:f6:62:1e:ba:56:57:93:90:a1:ec:e9:4b:71:cc: f0:d9:69:40:6a:85:22:07:bc:6d:18:e4:48:24:65: 70:16:4a:ca:df:ce:b1:c9:d9:96:ed:be:4d:46:9f: 7d:e0:4e:70:a9:af:4f:b3:69:00:3a:7d:6a:bc:f8: 50:80:dd:52:c3:72:6b:c6:3e:d3:12:15:78:50:e9: 64:85:ba:24:45:1c:b9:94:18:75:da:94:a3:24:d4: d8:f1:94:46:81:e6:b8:e4:ac:c4:08:0d:0c:64:56: 64:f9:5b:b4:8d:b0:47:1f:5b:04:bd:60:a0:50:8d: b2:3d:7b:ec:5b:bb:ba:3d:90:13:d6:b5:dd:7e:3d: af:d8:bf:2e:b2:09:b9:dc:2f:5c:2d:ec:f4:f9:b1: 2c:e0:6d:80:5c:1f:45:1f:b5:b6:80:47:07:22:f4: 3e:74:70:07:55:de:9e:05:4c:70:51:d4:5c:2e:bf: ca:1f:21:4c:78:15:3a:4b:aa:94:a0:10:8d:46:c4: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:57:B4:BB:3E:8D:1F:1F:EF:7D:B4:77:BD:69:C2:FE:FE:FC:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b33653a3-e943-3203-996f-6057a0402e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:48:f6:b7:40:a7:bf:56:a3:01:d4:02:2d:75:2e:34:a6:a3: 5d:34:c6:b6:20:64:b5:18:da:5a:33:36:16:3b:db:59:e3:44: ee:08:57:cf:0f:ba:47:e3:c5:b5:df:7f:06:e7:ee:1b:eb:64: ec:7f:d4:67:3e:c8:db:fb:76:da:e0:71:8f:4f:6a:4b:e3:e2: 64:7a:69:9b:43:84:9e:b5:af:46:5e:0b:53:dd:e2:ea:34:d0: 24:38:c0:2d:94:4d:18:87:ad:92:e3:91:d1:b5:07:f7:30:44: 3a:62:7c:d6:a2:0b:18:49:7d:8a:78:86:5f:bf:5f:0a:54:d9: d3:ee:b5:af:90:10:f3:70:b3:32:02:9c:5f:0c:70:0c:ef:46: 12:9c:be:7a:68:6a:73:39:94:db:6a:cc:1e:93:40:da:c5:6a: fc:39:38:b7:b1:92:63:15:be:e5:81:9f:89:60:50:a2:42:28: 88:12:e7:63:5c:56:82:fc:2d:97:f8:ff:13:55:f9:85:bf:17: b6:6b:9d:47:d2:32:1a:7f:b8:ea:a6:f5:4d:cc:68:fc:64:98: a0:f8:0e:69:50:7b:4b:39:b3:a3:99:20:bb:35:e8:54:cc:f4: 57:07:27:9b:b6:43:b9:22:66:ed:20:a7:43:1d:13:f6:0a:80: b6:93:e2:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pev19TjGdJ0mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTIzOTRiYTQtZjQ5Zi00OWY3LTk3ZTktZmNlOGExM2E2ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5SHAxinK2V/3tCeGm/Qqf9nVxBXnd7Fqgb oF9VWw41Phh0l+8gwwnHYQwVHmLRi+JljMwvDs2Uw4f/9mIeulZXk5Ch7OlLcczw 2WlAaoUiB7xtGORIJGVwFkrK386xydmW7b5NRp994E5wqa9Ps2kAOn1qvPhQgN1S w3Jrxj7TEhV4UOlkhbokRRy5lBh12pSjJNTY8ZRGgea45KzECA0MZFZk+Vu0jbBH H1sEvWCgUI2yPXvsW7u6PZAT1rXdfj2v2L8usgm53C9cLez0+bEs4G2AXB9FH7W2 gEcHIvQ+dHAHVd6eBUxwUdRcLr/KHyFMeBU6S6qUoBCNRsSkvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBH7V7S7Po0fH+99tHe9acL+/vzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMzNjUzYTMtZTk0My0z MjAzLTk5NmYtNjA1N2EwNDAyZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANSPa3QKe/VqMB1AItdS40pqNdNMa2IGS1GNpa MzYWO9tZ40TuCFfPD7pH48W1338G5+4b62Tsf9RnPsjb+3ba4HGPT2pL4+Jkemmb Q4Seta9GXgtT3eLqNNAkOMAtlE0Yh62S45HRtQf3MEQ6YnzWogsYSX2KeIZfv18K VNnT7rWvkBDzcLMyApxfDHAM70YSnL56aGpzOZTbaswek0DaxWr8OTi3sZJjFb7l gZ+JYFCiQiiIEudjXFaC/C2X+P8TVfmFvxe2a51H0jIaf7jqpvVNzGj8ZJig+A5p UHtLObOjmSC7NehUzPRXByebtkO5ImbtIKdDHRP2CoC2k+Ik -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:45 2026 by rpki-client