$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa File: be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json) Hash identifier: XdJLiUeEZM8Vrp6XWuV/HZeSSpbrT9UEEf0b2QrO2F4= Subject key identifier: 4B:6D:A2:0B:FD:EE:16:67:AE:04:50:FD:25:F8:96:40:21:A9:5B:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D83CACFFE86ABDD6630406200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 7342 IP address blocks: 2620:74:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:cf:fe:86:ab:dd:66:30:40:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=72dc4a3c-36f2-422e-95d8-27c88b9f7c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:d7:23:13:8a:e1:d1:9a:46:00:6f:a8:e9: 91:4e:30:0b:38:7b:91:a6:45:d8:01:3b:e6:50:6d: 53:2e:36:8b:2b:75:46:ff:a9:89:16:e4:69:b5:37: b4:fe:00:7d:b0:9e:72:28:4e:89:16:0c:a9:42:f9: 3c:58:06:e0:1e:7e:36:a7:7a:fb:43:11:97:b3:22: ac:3f:cf:b0:63:30:94:28:81:7b:19:da:38:a9:11: 7d:21:fc:c7:e7:c1:0a:83:d2:00:af:17:b8:81:f6: b7:0c:f4:e4:ea:3a:2f:6f:93:80:3f:d0:6d:48:3d: 88:1c:e2:20:73:71:12:e5:38:89:10:77:5d:b9:68: e0:b2:7b:7c:44:c5:33:57:0c:b9:6f:9e:9b:58:0e: 50:7c:98:ea:bd:d6:8a:c9:85:a7:04:f2:d1:c7:db: f2:8c:fb:50:0e:7c:77:a1:8a:b0:0f:a2:ca:40:c5: d0:26:d0:f7:bd:5d:22:64:a7:ff:f3:cf:f9:28:09: e9:cb:f6:02:77:51:c8:14:3e:be:2b:5f:73:51:e5: f6:fa:63:d1:e4:d3:fc:c5:ba:63:7a:fd:e9:15:b9: 88:35:7e:7f:bd:d0:46:3c:2b:77:cf:03:7b:56:62: 00:32:af:2e:25:32:78:24:30:a2:1d:9d:0a:a0:4f: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:A2:0B:FD:EE:16:67:AE:04:50:FD:25:F8:96:40:21:A9:5B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:98:89:64:4a:70:2a:f5:75:f3:e1:45:cf:d5:11:c5:44:95: 25:a1:25:d2:6a:e4:07:b5:35:1b:6b:07:17:b5:44:01:e0:86: a5:a0:e7:34:85:b7:3d:b8:5c:d0:c7:e2:64:84:f5:1b:e6:37: b1:94:86:9f:d4:73:c5:e8:65:0c:ec:0e:96:42:6f:98:04:fe: 01:05:d9:d4:15:24:63:36:dd:97:f5:e2:4f:7d:2e:c7:69:46: dd:9d:da:38:21:00:93:d0:4e:4f:ce:b2:52:f9:b2:0b:80:e9: 71:23:7f:8e:9d:63:c7:04:96:aa:3a:35:a3:2f:c1:4e:ba:c2: b5:b1:3c:f2:a6:9f:ec:a3:90:2c:93:2d:01:39:47:83:f0:43: 7e:4f:d4:fd:82:7d:fc:23:1f:32:8f:97:65:15:95:e7:32:2a: 8b:2e:70:08:7f:0a:28:e5:22:8b:24:8e:48:11:0a:56:7c:07: 20:82:24:ae:56:c2:05:a3:0f:2e:8a:94:a6:39:0b:ce:7d:7f: 2a:07:58:f4:89:24:59:6f:9a:68:d5:d6:51:e9:b3:bd:05:e5: 4c:b2:58:94:a0:37:e4:11:cc:75:f2:19:be:eb:78:b9:7a:47: d6:42:00:fc:28:7a:d4:c3:76:5d:bc:53:67:8b:3d:d2:80:aa: 0a:bc:2a:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Dys/+hqvdZjBAYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk NzJkYzRhM2MtMzZmMi00MjJlLTk1ZDgtMjdjODhiOWY3YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RTXIxOK4dGaRgBvqOmRTjALOHuRpkXYATvm UG1TLjaLK3VG/6mJFuRptTe0/gB9sJ5yKE6JFgypQvk8WAbgHn42p3r7QxGXsyKs P8+wYzCUKIF7Gdo4qRF9IfzH58EKg9IArxe4gfa3DPTk6jovb5OAP9BtSD2IHOIg c3ES5TiJEHdduWjgsnt8RMUzVwy5b56bWA5QfJjqvdaKyYWnBPLRx9vyjPtQDnx3 oYqwD6LKQMXQJtD3vV0iZKf/88/5KAnpy/YCd1HIFD6+K19zUeX2+mPR5NP8xbpj ev3pFbmINX5/vdBGPCt3zwN7VmIAMq8uJTJ4JDCiHZ0KoE9orQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEttogv97hZnrgRQ/SX4lkAhqVu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU4YjBiYTQtNGM5OC0z ODc5LTgxMDMtY2ExYTU1NDA4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWYiWRKcCr1dfPhRc/VEcVElSWhJdJq5Ae1NRtrBxe1RAHghqWg 5zSFtz24XNDH4mSE9RvmN7GUhp/Uc8XoZQzsDpZCb5gE/gEF2dQVJGM23Zf14k99 LsdpRt2d2jghAJPQTk/OslL5sguA6XEjf46dY8cElqo6NaMvwU66wrWxPPKmn+yj kCyTLQE5R4PwQ35P1P2CffwjHzKPl2UVlecyKosucAh/CijlIoskjkgRClZ8ByCC JK5WwgWjDy6KlKY5C859fyoHWPSJJFlvmmjV1lHps70F5UyyWJSgN+QRzHXyGb7r eLl6R9ZCAPwoetTDdl28U2eLPdKAqgq8Kq4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:55 2026 by rpki-client