$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa File: bb107715-bde9-34d7-b228-8c2cf8726e3b.roa (raw, json) Hash identifier: gcBbdft4nHH1pQph+alVRQuqoDvbdCl1WQuozicdvBE= Subject key identifier: 2D:9A:3B:D8:70:88:0D:90:FF:8F:0F:A0:17:CA:AD:81:A7:5D:E3:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A974147A8E197D8AF3F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396606 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:97:41:47:a8:e1:97:d8:af:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=10e25cc4-fcdf-45a7-8a42-90248bb04fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:0b:cb:91:46:bc:f1:be:f9:36:61:a3:9b: b0:7d:15:7d:89:54:9d:6b:1f:34:6e:53:a3:5b:45: ce:7e:c2:5e:d7:7f:98:dc:6b:9b:af:fc:db:3b:76: 44:03:13:7e:e5:ed:fb:d4:25:0a:03:46:c4:78:95: 86:a3:51:19:72:df:c7:e8:43:32:f2:12:a2:d6:82: 88:13:b7:bf:16:13:c4:e3:83:66:bd:db:87:4b:ef: f2:63:c5:c8:9e:ed:ce:a8:dd:3e:d9:9a:d2:c0:20: ea:cd:0e:ab:bd:4d:57:4b:51:d6:5f:7e:ad:bd:3d: 78:42:52:b5:f6:dd:f7:98:e1:41:23:2a:87:cb:db: 4c:80:48:a9:38:92:b0:7b:60:b5:64:51:d3:dd:f4: be:11:1c:f9:06:31:0d:85:5d:83:21:b5:8f:5d:9e: 8b:57:62:04:57:ea:b3:36:8d:4b:fa:91:98:66:9b: d8:94:fc:30:3e:f7:bd:fd:92:65:3d:30:03:81:19: 52:31:b7:e0:8d:c2:47:71:5a:d7:b1:46:6f:2e:18: e1:f9:94:b1:04:0c:3e:1f:94:a8:3f:bb:cf:fa:6a: a4:52:7f:43:80:2e:c2:28:56:22:e1:01:8a:b4:b6: 2f:50:be:bd:3a:2e:ea:d6:4d:1d:f1:46:72:15:d8: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:3B:D8:70:88:0D:90:FF:8F:0F:A0:17:CA:AD:81:A7:5D:E3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb107715-bde9-34d7-b228-8c2cf8726e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:32:5c:f5:af:1f:73:30:ed:84:f4:26:9f:29:5b:1b:7d:94: 10:9d:30:5a:2f:81:22:01:3f:9d:57:52:2a:72:38:ad:02:ca: b0:0f:8e:4f:7f:27:98:d7:99:2d:70:29:65:5e:de:ad:8e:2a: b2:bf:9b:ec:22:cb:4c:f6:58:9f:c3:d5:8b:16:15:d3:00:0b: bb:f1:81:1d:22:b1:54:02:cf:2e:91:51:8e:ad:04:67:0d:a2: d4:60:bf:82:f9:b0:3d:0f:ec:af:c4:9d:2c:f0:3a:b2:49:d7: 2c:9c:a7:6b:48:66:35:22:11:83:4f:fb:3e:26:7d:3b:bb:4f: a7:e7:51:60:60:fe:21:4d:61:a1:23:1d:13:a9:e5:b6:45:e6: 17:05:23:94:e3:0b:6c:f3:5c:1e:fa:2d:1e:d8:e8:9f:f9:a5: d4:02:77:13:19:fd:9d:29:9a:b0:21:88:68:18:83:0f:05:05: 0e:dd:c7:23:eb:a2:3e:98:7e:24:63:d0:25:bf:96:be:8c:5b: db:ec:d9:6b:30:ae:66:38:67:99:17:5f:ef:17:c9:93:b9:35: ee:04:21:71:9d:23:62:ab:70:23:c9:f2:8d:9a:34:8e:c7:b9: cd:ab:5c:19:dd:bf:7a:75:3f:1d:23:1c:56:db:84:71:43:49: 87:5a:25:85 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apdBR6jhl9ivPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MTBlMjVjYzQtZmNkZi00NWE3LThhNDItOTAyNDhiYjA0ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnakLy5FGvPG++TZho5uwfRV9iVSdax80blOj W0XOfsJe13+Y3Gubr/zbO3ZEAxN+5e371CUKA0bEeJWGo1EZct/H6EMy8hKi1oKI E7e/FhPE44NmvduHS+/yY8XInu3OqN0+2ZrSwCDqzQ6rvU1XS1HWX36tvT14QlK1 9t33mOFBIyqHy9tMgEipOJKwe2C1ZFHT3fS+ERz5BjENhV2DIbWPXZ6LV2IEV+qz No1L+pGYZpvYlPwwPve9/ZJlPTADgRlSMbfgjcJHcVrXsUZvLhjh+ZSxBAw+H5So P7vP+mqkUn9DgC7CKFYi4QGKtLYvUL69Oi7q1k0d8UZyFdiVrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC2aO9hwiA2Q/48PoBfKrYGnXeP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmIxMDc3MTUtYmRlOS0z NGQ3LWIyMjgtOGMyY2Y4NzI2ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXMlz1rx9zMO2E9CafKVsbfZQQnTBaL4EiAT+d V1IqcjitAsqwD45PfyeY15ktcCllXt6tjiqyv5vsIstM9lifw9WLFhXTAAu78YEd IrFUAs8ukVGOrQRnDaLUYL+C+bA9D+yvxJ0s8DqySdcsnKdrSGY1IhGDT/s+Jn07 u0+n51FgYP4hTWGhIx0TqeW2ReYXBSOU4wts81we+i0e2Oif+aXUAncTGf2dKZqw IYhoGIMPBQUO3ccj66I+mH4kY9Alv5a+jFvb7NlrMK5mOGeZF1/vF8mTuTXuBCFx nSNiq3AjyfKNmjSOx7nNq1wZ3b96dT8dIxxW24RxQ0mHWiWF -----END CERTIFICATE-----Generated at Sun Apr 19 08:23:34 2026 by rpki-client