$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa File: dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json) Hash identifier: CZJVI7eznE8MovirqnLYVkJeK7fMkAH52Drj50AgdKw= Subject key identifier: 2B:33:97:45:2C:7B:78:E6:D8:21:81:13:00:48:05:C0:DC:2B:E4:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D83CABF21BCF824388BA82220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 7342 IP address blocks: 2620:74:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:bf:21:bc:f8:24:38:8b:a8:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=aa34ad38-b15f-4d10-a4a4-916258a4de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:09:47:69:2e:d5:45:33:c2:c3:bc:ae:e4: 22:cd:eb:87:e6:63:d4:5a:c4:19:10:fd:d6:b0:7d: 9c:e4:7a:be:03:14:80:19:22:06:a2:cf:fd:76:3a: 60:c7:5b:dd:df:38:13:82:53:50:b7:1f:8c:bc:45: 1e:d8:e8:93:27:2e:1d:2c:3d:12:63:2f:fd:c9:8d: f2:3e:79:5b:99:0f:bd:32:2b:2c:50:a6:15:c9:65: 14:b1:f5:3d:29:64:36:c4:66:b6:bc:79:a4:2d:b2: eb:17:9f:93:19:33:2b:57:6c:63:7d:71:c7:2a:77: aa:5a:57:84:98:d8:30:54:2f:2f:81:e6:08:50:94: 44:05:a0:09:bc:94:06:5b:3a:b2:76:6a:c4:b4:6a: 1c:b8:7b:64:d8:82:86:e4:58:39:35:75:9e:b1:ad: c8:c7:44:68:fc:d4:50:3a:8d:00:63:04:0a:5e:95: 86:d9:d6:ac:59:ea:f8:b0:44:79:e5:b1:c2:0d:7b: e5:84:4d:54:18:7d:fc:92:5b:95:67:c4:56:a8:b3: 02:6f:51:f3:c4:18:27:ef:83:60:b6:ff:2c:e0:bb: 79:b1:91:08:35:0e:3b:68:86:8c:4a:7b:ec:53:4e: db:a4:80:9e:e1:a8:d9:16:5f:8e:b3:8e:44:f7:e6: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:97:45:2C:7B:78:E6:D8:21:81:13:00:48:05:C0:DC:2B:E4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e1:ab:1e:14:54:56:2b:af:7c:bc:b0:92:65:37:f8:d8:23: fc:65:e7:c3:2f:4a:c6:f8:bd:c8:2f:25:50:a4:14:8a:d3:5b: 97:cc:a1:7b:8f:cc:1c:03:c2:46:f9:01:62:b4:e7:5f:14:15: 51:67:34:14:27:b3:c6:30:28:61:0d:67:f0:3b:3e:79:d0:47: 79:38:a0:32:94:35:4b:4e:62:b6:94:27:f6:4b:dd:50:17:6b: 22:d5:93:79:f7:eb:11:73:81:a2:0b:01:c9:65:3d:09:1c:7d: b0:f8:29:9b:0a:ad:93:09:42:26:92:7b:dd:fc:40:dc:0e:25: a7:92:94:a5:36:40:8f:ff:c4:da:3f:58:7f:fe:1f:77:c8:2a: ea:d6:84:fa:55:90:18:36:f4:77:aa:96:60:7e:4e:e6:a9:dc: 1e:a7:4c:4d:46:b6:aa:3c:b7:f2:04:0d:92:c6:17:71:a9:3c: 97:73:92:92:48:3b:08:9b:f1:c7:f2:0f:69:b2:47:ec:0a:c9: f4:82:a7:8a:ed:e2:06:b4:4f:17:7a:66:4f:03:c6:73:81:02: bf:84:e5:de:04:73:37:db:dc:05:0b:74:13:a1:24:23:78:08: 71:5c:f0:7a:e7:1e:eb:96:09:ec:a8:bd:93:46:f9:d6:8e:e2: 65:82:39:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Dyr8hvPgkOIuoIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YWEzNGFkMzgtYjE1Zi00ZDEwLWE0YTQtOTE2MjU4YTRkZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlIJR2ku1UUzwsO8ruQizeuH5mPUWsQZEP3W sH2c5Hq+AxSAGSIGos/9djpgx1vd3zgTglNQtx+MvEUe2OiTJy4dLD0SYy/9yY3y PnlbmQ+9MissUKYVyWUUsfU9KWQ2xGa2vHmkLbLrF5+TGTMrV2xjfXHHKneqWleE mNgwVC8vgeYIUJREBaAJvJQGWzqydmrEtGocuHtk2IKG5Fg5NXWesa3Ix0Ro/NRQ Oo0AYwQKXpWG2dasWer4sER55bHCDXvlhE1UGH38kluVZ8RWqLMCb1HzxBgn74Ng tv8s4Lt5sZEINQ47aIaMSnvsU07bpICe4ajZFl+Os45E9+YYkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCszl0Use3jm2CGBEwBIBcDcK+SfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQyMjA5ZjMtMzdjZS0z MmQ2LTk3ZWMtM2Q5OWZmYzZkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfhqx4UVFYrr3y8sJJlN/jYI/xl58MvSsb4vcgvJVCkFIrTW5fM oXuPzBwDwkb5AWK0518UFVFnNBQns8YwKGENZ/A7PnnQR3k4oDKUNUtOYraUJ/ZL 3VAXayLVk3n36xFzgaILAcllPQkcfbD4KZsKrZMJQiaSe938QNwOJaeSlKU2QI// xNo/WH/+H3fIKurWhPpVkBg29HeqlmB+Tuap3B6nTE1Gtqo8t/IEDZLGF3GpPJdz kpJIOwib8cfyD2myR+wKyfSCp4rt4ga0Txd6Zk8DxnOBAr+E5d4Eczfb3AULdBOh JCN4CHFc8HrnHuuWCeyovZNG+daO4mWCOTk= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:33 2026 by rpki-client