$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa File: c426e094-0f31-30c1-bf59-1310513e6d6c.roa (raw, json) Hash identifier: gk1ZYec0w4WHONxjJWP7eXlQre9Neth9kS3pIbeQhbs= Subject key identifier: 5C:5B:DE:88:D4:87:24:90:09:4C:D4:75:2C:31:24:00:27:3A:39:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9AFE97D65ED11C042F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396546 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9a:fe:97:d6:5e:d1:1c:04:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=7bb01e55-c6a2-4409-9e49-588436d99223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:ce:e6:6e:f7:c5:b7:ea:94:d6:e8:7e:19: 8b:8f:89:a3:9d:75:02:20:d0:5c:2a:4c:d7:5b:ea: ac:d6:b6:c4:33:52:fc:26:2c:c2:18:be:c1:21:43: d1:9d:b7:69:01:93:16:08:16:c6:8b:85:3b:a0:94: e8:f1:bd:43:ff:5e:0e:52:99:80:87:ba:24:fb:6a: e8:cc:64:f4:8a:4b:35:0c:1c:f8:6c:08:c4:fa:eb: 54:93:9d:e4:64:1b:86:39:ac:5a:ab:8c:a7:8d:e5: 60:26:c3:9f:f8:42:20:25:55:2f:9a:16:2f:fa:a6: e3:2e:1e:ee:7b:f7:37:1d:d2:e5:10:69:8b:11:50: d2:5e:35:3e:5f:9e:68:78:a4:5a:05:e9:c9:00:c6: 96:f7:60:7f:c1:d2:f0:20:7e:67:de:74:4e:4c:f4: 8a:df:ef:15:43:8f:e5:7b:08:f8:1c:43:03:cc:a7: c9:7e:f9:93:17:4c:da:3c:56:61:0f:be:0d:69:72: 39:45:e8:e7:1e:63:c5:36:12:bf:1f:9c:87:1b:04: 90:40:0e:11:87:25:44:38:57:6d:b8:c2:72:c0:9b: b2:ce:6d:20:7c:e5:64:56:a8:0c:dc:12:49:0a:fc: a4:0a:06:3b:8b:c3:1a:c8:de:ca:2f:47:fe:ff:07: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:DE:88:D4:87:24:90:09:4C:D4:75:2C:31:24:00:27:3A:39:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c426e094-0f31-30c1-bf59-1310513e6d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:24:36:e0:57:f2:1c:4b:17:6b:c0:3b:27:96:23:b3:92:17: b9:76:c4:49:62:af:12:8f:67:80:87:93:29:32:9f:b9:91:cb: 93:c5:07:e9:41:f5:9a:56:6d:3f:51:37:1d:59:f0:46:21:96: f6:7f:46:55:84:98:f8:41:38:ad:56:5f:fb:15:d2:07:ca:38: c1:ad:da:ab:d2:cb:dc:20:c3:d2:0e:0b:f3:c6:3c:99:0a:44: fa:e3:6a:25:4d:eb:f3:10:5d:ea:e9:b5:61:49:af:73:2b:17: 15:2d:ce:e9:2d:b2:23:7d:bb:18:4e:37:a0:f7:45:24:cb:09: c3:7e:6f:cd:d1:44:22:6d:61:79:b7:97:dc:7f:d8:62:42:b4: f6:46:13:cf:c9:75:30:39:4c:6a:24:a6:a8:07:e5:83:21:bb: d7:f0:6f:5c:a5:4d:0f:5e:c4:a3:84:76:4c:31:02:ff:8e:4f: f2:13:f4:00:c4:b7:88:17:7a:97:83:a5:d8:e4:ec:45:fa:76: e1:66:59:f1:ee:5a:7b:1f:8a:79:c9:29:1c:15:c0:00:78:e2: 26:a5:44:a2:fd:a0:c1:9d:0e:a3:19:22:4f:f0:e5:16:63:53: 9e:4d:40:d0:6a:a6:05:5f:19:d4:b2:d0:45:a0:fa:21:cb:e3: d4:3f:4a:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pr+l9Ze0RwELwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk N2JiMDFlNTUtYzZhMi00NDA5LTllNDktNTg4NDM2ZDk5MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKzO5m73xbfqlNbofhmLj4mjnXUCINBcKkzX W+qs1rbEM1L8JizCGL7BIUPRnbdpAZMWCBbGi4U7oJTo8b1D/14OUpmAh7ok+2ro zGT0iks1DBz4bAjE+utUk53kZBuGOaxaq4ynjeVgJsOf+EIgJVUvmhYv+qbjLh7u e/c3HdLlEGmLEVDSXjU+X55oeKRaBenJAMaW92B/wdLwIH5n3nROTPSK3+8VQ4/l ewj4HEMDzKfJfvmTF0zaPFZhD74NaXI5RejnHmPFNhK/H5yHGwSQQA4RhyVEOFdt uMJywJuyzm0gfOVkVqgM3BJJCvykCgY7i8MayN7KL0f+/wdpvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFxb3ojUhySQCUzUdSwxJAAnOjlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQyNmUwOTQtMGYzMS0z MGMxLWJmNTktMTMxMDUxM2U2ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGJDbgV/IcSxdrwDsnliOzkhe5dsRJYq8Sj2eA h5MpMp+5kcuTxQfpQfWaVm0/UTcdWfBGIZb2f0ZVhJj4QTitVl/7FdIHyjjBrdqr 0svcIMPSDgvzxjyZCkT642olTevzEF3q6bVhSa9zKxcVLc7pLbIjfbsYTjeg90Uk ywnDfm/N0UQibWF5t5fcf9hiQrT2RhPPyXUwOUxqJKaoB+WDIbvX8G9cpU0PXsSj hHZMMQL/jk/yE/QAxLeIF3qXg6XY5OxF+nbhZlnx7lp7H4p5ySkcFcAAeOImpUSi /aDBnQ6jGSJP8OUWY1OeTUDQaqYFXxnUstBFoPohy+PUP0pf -----END CERTIFICATE-----Generated at Fri Apr 17 10:23:30 2026 by rpki-client