$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa File: c1ed2970-2690-38aa-b433-78dfcb1be478.roa (raw, json) Hash identifier: jXZsV928YE1Lk2t09n2Fe4n05G1lEXzh/O1Lfq6vzvU= Subject key identifier: 70:9F:4C:88:94:73:27:0E:5A:D2:4A:EA:F6:74:47:71:7C:A5:37:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A95A919B7A0331E435300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 396546 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:95:a9:19:b7:a0:33:1e:43:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=d95c9a1f-19d8-458f-b698-035a3b8fd7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:1a:30:9c:70:72:cc:6e:e7:e7:60:f2:c5: 8a:70:71:47:58:83:98:a3:de:ca:6e:00:4d:24:6d: 6c:33:00:60:9c:93:21:99:44:59:2a:cd:4a:a2:0e: f9:9c:96:48:50:6e:93:57:c4:7e:41:74:56:92:0c: 24:a0:0d:44:a6:24:75:0b:fc:62:30:31:33:dd:1e: 44:95:bf:64:06:7d:e2:a2:8b:96:9e:50:7f:28:41: de:44:24:ed:e3:4f:70:d0:59:06:1e:c7:63:e7:e8: 57:7b:7f:0c:b8:43:bf:2b:f8:bd:87:8b:32:ee:79: 46:db:0f:0c:dd:1f:ba:65:7c:27:c9:18:2f:ab:f6: 67:59:9e:ae:34:56:87:8f:1d:ca:ff:78:43:20:7a: c4:14:de:25:01:e6:f2:92:58:ae:87:2c:86:2b:be: c5:54:02:86:7c:d1:76:64:de:24:bf:af:0e:d1:dd: da:53:fe:14:dd:87:e6:34:12:4f:9e:45:0d:30:79: 53:6f:c6:24:bf:92:be:1d:a0:40:39:24:c2:eb:e8: 30:57:82:54:9a:cf:25:cc:58:e2:e5:a7:1f:e3:78: 62:c2:18:c7:8d:a5:96:6a:ee:a8:71:8d:50:1a:ff: 62:3e:f9:2f:4f:71:9e:8a:77:be:e0:1e:2f:64:e6: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9F:4C:88:94:73:27:0E:5A:D2:4A:EA:F6:74:47:71:7C:A5:37:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1c:54:76:40:83:57:e5:35:32:4b:26:d1:1c:54:9d:4c:be: 15:d3:69:5e:0f:c7:e1:80:49:e9:fb:27:19:61:9a:e7:cc:64: 10:9e:8b:d0:f6:b7:88:db:8c:cb:47:16:d1:dc:f3:33:77:4a: fd:9f:27:f5:6f:aa:50:d3:f7:37:f1:7c:41:50:16:eb:5d:57: 9e:9c:b4:41:58:e1:b7:04:5f:cb:59:75:f1:22:b9:1a:56:e2: 31:f5:02:67:6a:cc:1b:e1:c5:ee:18:b3:61:2c:1d:c0:d6:10: c0:db:29:1c:ae:5a:75:c6:f0:dd:f5:12:44:74:de:4a:51:c8: 78:a7:b0:e1:00:6b:a5:3a:7f:ac:c8:d0:82:96:87:79:54:23: d6:38:a0:67:08:a4:a0:80:d2:e7:60:01:5e:e7:a1:f7:c6:ff: 96:d1:fa:0f:09:51:ff:d4:78:17:38:32:53:76:84:4b:ad:bf: 23:34:29:6d:9f:c7:24:ef:17:2d:cd:49:4b:b4:89:62:b8:68: 58:96:96:33:43:42:d8:ea:0f:36:50:0d:a0:d1:d3:bd:24:08: f0:a2:63:26:53:ed:1a:8f:c3:8a:84:08:7c:c2:1e:93:ca:91: 75:12:75:05:1a:44:77:3f:cc:5c:86:01:36:cd:ce:90:a7:81: 54:ea:07:c3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apWpGbegMx5DUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZDk1YzlhMWYtMTlkOC00NThmLWI2OTgtMDM1YTNiOGZkN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYEaMJxwcsxu5+dg8sWKcHFHWIOYo97KbgBN JG1sMwBgnJMhmURZKs1Kog75nJZIUG6TV8R+QXRWkgwkoA1EpiR1C/xiMDEz3R5E lb9kBn3ioouWnlB/KEHeRCTt409w0FkGHsdj5+hXe38MuEO/K/i9h4sy7nlG2w8M 3R+6ZXwnyRgvq/ZnWZ6uNFaHjx3K/3hDIHrEFN4lAebykliuhyyGK77FVAKGfNF2 ZN4kv68O0d3aU/4U3YfmNBJPnkUNMHlTb8Ykv5K+HaBAOSTC6+gwV4JUms8lzFji 5acf43hiwhjHjaWWau6ocY1QGv9iPvkvT3Geine+4B4vZObW5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHCfTIiUcycOWtJK6vZ0R3F8pTdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFlZDI5NzAtMjY5MC0z OGFhLWI0MzMtNzhkZmNiMWJlNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDHFR2QINX5TUySybRHFSdTL4V02leD8fhgEnp +ycZYZrnzGQQnovQ9reI24zLRxbR3PMzd0r9nyf1b6pQ0/c38XxBUBbrXVeenLRB WOG3BF/LWXXxIrkaVuIx9QJnaswb4cXuGLNhLB3A1hDA2ykcrlp1xvDd9RJEdN5K Uch4p7DhAGulOn+syNCClod5VCPWOKBnCKSggNLnYAFe56H3xv+W0foPCVH/1HgX ODJTdoRLrb8jNCltn8ck7xctzUlLtIliuGhYlpYzQ0LY6g82UA2g0dO9JAjwomMm U+0aj8OKhAh8wh6TypF1EnUFGkR3P8xchgE2zc6Qp4FU6gfD -----END CERTIFICATE-----Generated at Fri Apr 17 10:09:44 2026 by rpki-client