$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa File: d0214da0-08fe-312f-ac14-78ada0560a35.roa (raw, json) Hash identifier: uo6ZaMzFse25M1MSnLtYXXglhc8Ppa9AuSqVTORhEUs= Subject key identifier: 21:C2:B0:28:35:FD:DF:84:90:56:F7:F2:9E:54:40:3B:AE:C8:F5:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA98A8AD7912F251BDB980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396552 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:98:a8:ad:79:12:f2:51:bd:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=52af71be-b83f-497f-b6f5-f3fca500a53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:53:a1:01:7f:21:f2:3e:51:8b:41:53:3a: 66:7f:b1:93:84:9c:0a:5a:4f:21:67:b9:ed:d1:67: dc:e4:41:a9:cd:6c:b7:f4:17:3b:30:36:f3:c9:90: 48:0b:cc:58:1a:bc:69:0f:d0:87:33:5c:5a:7c:c4: e8:32:2e:09:93:d9:af:eb:80:87:46:a8:4a:9a:55: 78:66:24:03:52:d2:eb:00:1c:a8:df:79:92:9b:5e: 02:98:de:5f:75:f4:01:6b:e7:e8:2e:bd:30:37:92: 2a:a0:ea:1f:e6:80:4a:13:85:ac:5b:7a:fc:44:c8: e2:d8:b3:83:af:6f:cf:c0:32:c7:81:51:0b:07:9d: 31:a4:b4:bb:3d:f3:70:0b:1a:74:49:e9:0e:6c:27: 04:23:43:48:c4:01:b3:65:ff:d9:f7:7f:ae:1e:3e: c3:de:01:f7:d0:ee:b4:d7:31:16:99:c1:37:6b:db: 7b:bd:f0:c0:65:d4:9b:3f:aa:53:93:b6:80:d9:d5: 9e:0a:fe:74:30:16:7f:34:e9:10:b4:1f:a9:29:bd: b6:b4:a3:d3:09:c6:b7:b2:bf:12:78:b8:41:1b:2e: 5d:b7:8d:ec:65:e0:34:12:72:b1:96:29:16:0d:d2: 30:71:df:0b:ac:37:25:20:e2:16:b7:7d:0f:b7:5b: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:B0:28:35:FD:DF:84:90:56:F7:F2:9E:54:40:3B:AE:C8:F5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c5:91:29:96:0e:45:79:fe:7f:dc:41:d4:18:ef:0e:7d:5b: 89:a2:cc:65:9f:49:da:9d:e5:16:e0:b5:3a:13:9e:ce:89:04: 17:be:3e:66:1a:b9:69:41:03:43:a3:36:07:71:46:77:97:60: 8d:ac:10:66:23:84:3f:6a:68:2c:84:04:d0:4a:9a:8c:77:67: ba:27:a8:04:4c:c0:27:e2:87:17:d5:3d:64:f0:c9:d5:c1:9d: 83:39:6b:62:fe:ec:46:47:4a:00:ac:4d:2a:e6:d4:18:bc:51: f7:0d:95:4d:51:c3:ed:b1:ac:3b:cb:8f:bc:44:5d:5b:78:d0: d1:c2:c3:01:5b:4b:a1:da:d5:fe:6a:75:49:e1:76:43:53:d4: 1b:20:be:da:e3:03:60:99:61:80:fb:ed:eb:fd:b8:20:9e:cb: 2b:8b:d8:1e:75:2c:76:db:8f:97:ad:87:17:8a:d4:1e:eb:da: 52:aa:52:22:07:9e:6f:a8:35:c2:f6:de:de:e9:86:19:21:11: 1c:f3:45:5e:42:50:88:41:8c:eb:2e:b0:30:c2:bb:03:89:0f: fd:14:48:50:43:09:e2:00:ee:07:f6:1a:37:cb:61:bc:31:73: 7d:02:c5:27:c1:a0:a8:87:d8:13:b3:c8:8f:8d:c7:bb:57:e4: 58:7b:71:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6piorXkS8lG9uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTJhZjcxYmUtYjgzZi00OTdmLWI2ZjUtZjNmY2E1MDBhNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nBToQF/IfI+UYtBUzpmf7GThJwKWk8hZ7nt 0Wfc5EGpzWy39Bc7MDbzyZBIC8xYGrxpD9CHM1xafMToMi4Jk9mv64CHRqhKmlV4 ZiQDUtLrAByo33mSm14CmN5fdfQBa+foLr0wN5IqoOof5oBKE4WsW3r8RMji2LOD r2/PwDLHgVELB50xpLS7PfNwCxp0SekObCcEI0NIxAGzZf/Z93+uHj7D3gH30O60 1zEWmcE3a9t7vfDAZdSbP6pTk7aA2dWeCv50MBZ/NOkQtB+pKb22tKPTCca3sr8S eLhBGy5dt43sZeA0EnKxlikWDdIwcd8LrDclIOIWt30Pt1sF6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCHCsCg1/d+EkFb38p5UQDuuyPUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMTRkYTAtMDhmZS0z MTJmLWFjMTQtNzhhZGEwNTYwYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfxZEplg5Fef5/3EHUGO8OfVuJosxln0naneUW 4LU6E57OiQQXvj5mGrlpQQNDozYHcUZ3l2CNrBBmI4Q/amgshATQSpqMd2e6J6gE TMAn4ocX1T1k8MnVwZ2DOWti/uxGR0oArE0q5tQYvFH3DZVNUcPtsaw7y4+8RF1b eNDRwsMBW0uh2tX+anVJ4XZDU9QbIL7a4wNgmWGA++3r/bggnssri9gedSx224+X rYcXitQe69pSqlIiB55vqDXC9t7e6YYZIREc80VeQlCIQYzrLrAwwrsDiQ/9FEhQ QwniAO4H9ho3y2G8MXN9AsUnwaCoh9gTs8iPjce7V+RYe3GH -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:11 2026 by rpki-client