$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa File: bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa (raw, json) Hash identifier: 5O6df7L10dVlMOBsyLfNJL9sjpidgfzkhFL/QZo8emM= Subject key identifier: 29:55:9C:48:7C:A8:F9:45:AF:47:F7:44:13:CA:95:80:AC:47:2D:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A9305A2FA9E0634624880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396614 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:93:05:a2:fa:9e:06:34:62:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=06d03cf9-f39b-4997-9dca-b942d85cd963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:45:f4:60:9c:dc:c0:5a:da:8c:2d:cc:41: a8:5e:bc:58:c3:50:d0:4e:e4:cb:20:b9:0f:79:61: fb:49:2d:bd:12:9d:37:da:02:41:dc:0b:2f:9c:56: 76:dc:33:51:c9:e5:21:d0:2c:a3:85:94:ff:7b:64: 1d:49:19:09:9c:41:f5:cc:7f:ea:a2:55:00:8e:12: 51:65:d0:14:53:b2:d9:8e:23:c4:5f:7c:f8:41:ff: 45:14:00:81:e7:c4:79:64:80:fe:e9:10:9f:ee:b5: a1:af:4c:99:59:c8:e8:b7:82:2a:1b:e7:ab:aa:36: 63:f6:12:aa:19:d7:b3:99:64:af:00:c4:74:b2:55: 3f:ad:28:91:a2:1b:dd:8e:fa:f8:9f:ef:96:cf:f3: 05:c9:6d:8d:b9:5d:ab:21:56:b3:b5:6d:04:bb:a1: 63:8e:16:73:24:61:c9:8c:0a:e9:72:d8:f5:95:53: 7b:31:e5:94:0e:19:f1:2d:f1:30:79:10:b6:52:88: 1d:51:36:da:b8:81:a5:47:26:a2:da:f5:b3:9f:ef: 80:fd:f7:36:b3:3e:d8:af:f3:59:0d:1b:57:69:30: 13:0e:5f:7d:cc:1c:db:3a:ac:17:9c:7f:af:fd:bb: 86:31:9e:f1:28:78:be:46:4d:be:5c:05:fd:85:80: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:55:9C:48:7C:A8:F9:45:AF:47:F7:44:13:CA:95:80:AC:47:2D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd6ba1ac-8bcc-39d5-90ae-820cf7924122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d9:5e:b5:59:03:b2:f8:70:a3:0f:57:7d:de:a0:87:5c:39: 64:5c:85:44:b6:6c:3f:31:f9:df:2d:44:a0:49:3a:ef:9b:36: 32:af:49:a9:6b:e9:7e:37:63:f4:3e:67:39:b5:5d:e3:2a:79: 2a:e3:e0:c7:a3:61:fe:04:da:1f:cf:af:8b:68:84:9d:34:b4: e2:26:9e:04:2a:6e:bc:83:9f:33:1f:17:91:d9:54:8c:28:e1: 51:4e:0f:57:71:89:e5:96:89:b6:2e:f9:ee:16:56:26:ee:1b: 1e:de:52:d6:9d:26:b0:04:4a:97:65:d1:4c:09:fa:23:f2:6d: 13:95:9e:20:61:fd:7e:8a:00:11:94:15:2d:84:77:55:b6:2a: fa:5f:57:50:57:47:bb:97:65:e1:c8:13:bb:85:de:03:4c:44: 07:cd:8e:87:ec:40:9c:f0:71:bf:25:e2:1a:33:0e:e6:e1:15: 4b:de:d6:a4:f9:1e:c3:7a:bf:61:67:96:47:93:a9:71:ff:04: ea:c8:43:b3:0a:cb:e6:47:03:c0:cc:63:7a:42:16:fa:f8:89: db:48:71:15:50:48:32:92:be:30:48:15:5e:03:44:a9:f6:3c: 58:ce:e1:e6:79:5c:ae:60:3e:d8:ca:fe:a6:41:ce:6e:42:5e: cb:7d:27:f5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apMFovqeBjRiSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MDZkMDNjZjktZjM5Yi00OTk3LTlkY2EtYjk0MmQ4NWNkOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumRF9GCc3MBa2owtzEGoXrxYw1DQTuTLILkP eWH7SS29Ep032gJB3AsvnFZ23DNRyeUh0CyjhZT/e2QdSRkJnEH1zH/qolUAjhJR ZdAUU7LZjiPEX3z4Qf9FFACB58R5ZID+6RCf7rWhr0yZWcjot4IqG+erqjZj9hKq GdezmWSvAMR0slU/rSiRohvdjvr4n++Wz/MFyW2NuV2rIVaztW0Eu6FjjhZzJGHJ jArpctj1lVN7MeWUDhnxLfEweRC2UogdUTbauIGlRyai2vWzn++A/fc2sz7Yr/NZ DRtXaTATDl99zBzbOqwXnH+v/buGMZ7xKHi+Rk2+XAX9hYDPhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFClVnEh8qPlFr0f3RBPKlYCsRy0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ2YmExYWMtOGJjYy0z OWQ1LTkwYWUtODIwY2Y3OTI0MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAl2V61WQOy+HCjD1d93qCHXDlkXIVEtmw/Mfnf LUSgSTrvmzYyr0mpa+l+N2P0Pmc5tV3jKnkq4+DHo2H+BNofz6+LaISdNLTiJp4E Km68g58zHxeR2VSMKOFRTg9XcYnllom2LvnuFlYm7hse3lLWnSawBEqXZdFMCfoj 8m0TlZ4gYf1+igARlBUthHdVtir6X1dQV0e7l2XhyBO7hd4DTEQHzY6H7ECc8HG/ JeIaMw7m4RVL3tak+R7Der9hZ5ZHk6lx/wTqyEOzCsvmRwPAzGN6Qhb6+InbSHEV UEgykr4wSBVeA0Sp9jxYzuHmeVyuYD7Yyv6mQc5uQl7LfSf1 -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:07 2026 by rpki-client