$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa File: dc7fb0d9-5156-38a1-a545-728baab0d293.roa (raw, json) Hash identifier: 2aO5NYQMvjpPwB1mzrL6xtztFabiYf+HSs5VPEYhdW0= Subject key identifier: 09:2A:91:3B:9F:39:59:06:08:8B:E2:DE:29:4B:C0:B9:5B:69:90:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D7B6A975922A2ED923AD234E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 397206 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:97:59:22:a2:ed:92:3a:d2:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=3c404e61-9be3-4c27-bb34-2ef45a3a7065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:e6:45:eb:27:e1:a1:79:85:62:20:67:de: 8e:c9:8f:ca:b1:3f:12:9a:36:db:f8:d1:0c:b9:76: 11:21:8f:4b:6a:3e:f1:85:7b:a5:0e:8a:b4:01:7d: c8:9e:c2:86:53:b2:03:6e:8d:88:42:c2:67:51:a3: 86:e2:62:0b:54:ac:2e:14:2e:87:3b:26:be:c2:1d: 0e:80:ba:5e:dc:05:56:03:6b:d6:10:96:87:d1:3c: a2:4b:b4:97:84:7a:d0:23:f9:55:48:15:b4:ce:a0: af:5f:bd:7f:c9:f7:db:a9:93:46:b9:a7:0b:0f:eb: 94:54:ad:6f:cd:e2:23:f2:6b:05:37:17:98:a6:5d: e8:ba:98:51:03:55:a5:ba:46:a6:8d:f1:d9:15:ab: 2b:80:6a:41:88:b5:c2:af:3e:89:83:61:26:53:4c: 66:0e:69:d4:42:a5:d9:b0:fd:21:44:fb:3d:97:0e: b2:10:3a:79:91:89:d5:f2:af:29:40:06:06:df:3c: a2:c8:73:7d:50:ef:e3:8b:c0:24:d2:18:81:7c:4e: 71:4d:11:85:4a:12:f9:28:c7:3e:6f:3f:3f:9b:80: 9b:81:08:fb:2f:33:26:14:28:42:9c:c5:e0:a4:60: cb:c7:44:f4:d1:fe:a5:48:59:73:42:36:4f:d6:0e: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:91:3B:9F:39:59:06:08:8B:E2:DE:29:4B:C0:B9:5B:69:90:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc7fb0d9-5156-38a1-a545-728baab0d293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1a:24:04:bd:94:55:c0:43:99:06:b0:01:e8:10:9f:3c:8b: db:c4:83:f9:54:d5:59:17:b2:f5:8e:49:8f:53:4e:70:fa:bb: 75:48:e0:40:ef:b2:4a:bd:13:24:ec:a7:4d:17:49:42:12:0b: f0:24:27:c5:be:bd:0a:08:ab:8f:cd:4d:24:b5:5a:bf:35:d6: 79:54:1e:bd:ba:ec:f0:66:6b:66:1b:af:75:82:9c:15:14:77: f7:47:27:7c:e0:14:a1:54:15:88:ba:8a:48:87:4d:da:d6:22: 9d:a4:92:51:4c:30:9b:7c:d6:26:7e:fc:69:a8:4c:85:95:0e: 03:24:23:4b:df:f2:56:d0:ec:16:08:5c:4d:75:fd:04:5d:72: 68:2c:dc:eb:71:88:34:89:52:12:1b:44:f3:b4:47:29:2f:f8: 2f:42:29:57:18:c7:a1:12:26:96:e2:15:72:27:da:ba:ed:75: 64:32:57:87:76:06:61:7c:f4:99:00:56:8c:6b:7e:6f:8c:b1: 50:a5:5a:48:7b:4e:d4:3d:ef:e0:5b:da:39:37:5e:73:b1:2c: a5:e4:81:33:5a:4a:ca:6a:a3:ee:9b:7e:0d:05:06:c3:9d:e0: fd:ab:34:7e:00:63:fe:8e:05:26:95:f6:0d:62:e7:3a:5b:85: 34:1a:d5:5e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE17apdZIqLtkjrSNOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk M2M0MDRlNjEtOWJlMy00YzI3LWJiMzQtMmVmNDVhM2E3MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7fmResn4aF5hWIgZ96OyY/KsT8Smjbb+NEM uXYRIY9Laj7xhXulDoq0AX3InsKGU7IDbo2IQsJnUaOG4mILVKwuFC6HOya+wh0O gLpe3AVWA2vWEJaH0TyiS7SXhHrQI/lVSBW0zqCvX71/yffbqZNGuacLD+uUVK1v zeIj8msFNxeYpl3ouphRA1WlukamjfHZFasrgGpBiLXCrz6Jg2EmU0xmDmnUQqXZ sP0hRPs9lw6yEDp5kYnV8q8pQAYG3zyiyHN9UO/ji8Ak0hiBfE5xTRGFShL5KMc+ bz8/m4CbgQj7LzMmFChCnMXgpGDLx0T00f6lSFlzQjZP1g4HiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAkqkTufOVkGCIvi3ilLwLlbaZDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGM3ZmIwZDktNTE1Ni0z OGExLWE1NDUtNzI4YmFhYjBkMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNGiQEvZRVwEOZBrAB6BCfPIvbxIP5VNVZF7L1 jkmPU05w+rt1SOBA77JKvRMk7KdNF0lCEgvwJCfFvr0KCKuPzU0ktVq/NdZ5VB69 uuzwZmtmG691gpwVFHf3Ryd84BShVBWIuopIh03a1iKdpJJRTDCbfNYmfvxpqEyF lQ4DJCNL3/JW0OwWCFxNdf0EXXJoLNzrcYg0iVISG0TztEcpL/gvQilXGMehEiaW 4hVyJ9q67XVkMleHdgZhfPSZAFaMa35vjLFQpVpIe07UPe/gW9o5N15zsSyl5IEz WkrKaqPum34NBQbDneD9qzR+AGP+jgUmlfYNYuc6W4U0GtVe -----END CERTIFICATE-----Generated at Fri Apr 17 10:48:36 2026 by rpki-client