$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa File: f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa (raw, json) Hash identifier: rVm+a3lsqjNN0lk9OgnVJU8Jrm53oxJhTJWIbv3rUX0= Subject key identifier: 20:EC:2D:2E:E1:40:17:32:25:CA:03:DB:5E:62:33:42:D9:3E:A2:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA96F0FFC989498191CD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396827 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:96:f0:ff:c9:89:49:81:91:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=dcf7e2d5-d312-4191-b98f-3ed4df016b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:c7:e0:9b:90:e0:f0:1f:7c:4f:d3:7e:5e: 6c:3b:9e:4e:e7:ec:01:d7:09:7f:30:cc:cf:db:ca: d2:f5:da:31:98:0d:bf:3d:5d:98:f8:bc:bd:75:b0: 86:d7:a6:8e:46:53:73:09:c8:4b:1d:69:88:22:87: 42:11:26:4f:6f:69:0c:02:c4:5f:fe:3b:8f:a2:31: ab:88:15:00:fd:12:03:ed:6e:5c:ac:1b:ba:e1:3d: 6e:13:66:92:95:d3:e4:96:fb:3b:de:e8:9a:27:0e: 1b:f2:45:8d:14:a7:34:4f:ad:c9:1a:40:6f:90:03: 50:cb:97:ad:52:ca:14:da:d9:75:9c:ab:31:56:73: ad:27:d0:fe:3f:79:4f:fa:d2:ff:38:3b:8a:f4:b1: c5:28:5d:78:fc:66:1e:94:48:8e:0a:cf:5a:b2:cd: d6:02:b2:e3:7e:12:d3:bb:c8:8b:78:13:d2:88:68: db:28:8a:0a:ba:97:f7:82:98:7a:bd:1c:c3:ce:8c: 64:d0:d7:d6:02:62:ed:44:2b:43:0c:45:9e:32:ae: 19:0b:0d:4b:3c:f8:cb:30:c2:da:e0:a3:e8:38:e4: d6:e7:0e:ed:f5:b6:8f:77:95:52:61:52:13:a7:57: 28:77:d3:51:17:99:ef:86:fb:ad:ff:d1:44:ff:0f: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EC:2D:2E:E1:40:17:32:25:CA:03:DB:5E:62:33:42:D9:3E:A2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:77:0a:b4:d7:9e:71:6e:aa:e2:40:5c:c3:08:c9:48:15: 55:d4:ac:7d:c0:7c:dd:63:0a:4f:3d:64:0d:c2:4e:6e:6f:1a: 18:35:e6:f8:ab:ed:18:47:77:87:96:a7:56:b9:cb:0b:0b:b9: 90:b6:d9:ce:c7:ff:fa:0a:9d:f9:04:02:3f:d7:93:73:3b:26: 5e:d5:08:0e:fd:bd:93:17:1c:83:f7:b6:83:1e:43:43:21:a8: 43:cf:78:ed:d8:73:3a:6f:8e:ad:ca:d0:68:5a:6c:dd:05:68: 14:ad:dd:8c:ce:fb:b3:f3:14:06:b2:e0:ad:db:94:6f:a1:8d: 79:5c:82:07:a6:1a:1a:e0:bb:1f:11:f5:1b:2a:f3:d9:be:bc: 77:35:57:8b:1c:28:69:2d:d3:b1:79:19:94:76:32:03:f7:97: 7e:91:f8:b0:e8:e9:ea:52:fe:45:e5:97:16:04:a2:fa:53:dc: b7:09:fd:db:7e:55:d3:2b:79:a1:d3:c3:d5:1e:c1:5c:c9:9c: 62:89:3b:d6:ea:fb:c1:e3:d2:d7:39:b2:68:19:d9:fe:d6:4c: a0:30:94:da:d7:94:40:d3:6a:2e:c3:24:a3:fa:30:05:8e:4b: fc:e3:dc:0a:02:dd:a1:41:84:62:27:93:3c:56:ac:53:01:ee: 2c:63:81:b1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pbw/8mJSYGRzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGNmN2UyZDUtZDMxMi00MTkxLWI5OGYtM2VkNGRmMDE2YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmjH4JuQ4PAffE/Tfl5sO55O5+wB1wl/MMzP 28rS9doxmA2/PV2Y+Ly9dbCG16aORlNzCchLHWmIIodCESZPb2kMAsRf/juPojGr iBUA/RID7W5crBu64T1uE2aSldPklvs73uiaJw4b8kWNFKc0T63JGkBvkANQy5et UsoU2tl1nKsxVnOtJ9D+P3lP+tL/ODuK9LHFKF14/GYelEiOCs9ass3WArLjfhLT u8iLeBPSiGjbKIoKupf3gph6vRzDzoxk0NfWAmLtRCtDDEWeMq4ZCw1LPPjLMMLa 4KPoOOTW5w7t9baPd5VSYVITp1cod9NRF5nvhvut/9FE/w8NwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCDsLS7hQBcyJcoD215iM0LZPqJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdjZmUxNTUtOGNjOC0z MjE5LWJlM2UtYWVlOGNiNzhiNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxQncKtNeecW6q4kBcwwjJSBVV1Kx9wHzdYwpP PWQNwk5ubxoYNeb4q+0YR3eHlqdWucsLC7mQttnOx//6Cp35BAI/15NzOyZe1QgO /b2TFxyD97aDHkNDIahDz3jt2HM6b46tytBoWmzdBWgUrd2Mzvuz8xQGsuCt25Rv oY15XIIHphoa4LsfEfUbKvPZvrx3NVeLHChpLdOxeRmUdjID95d+kfiw6OnqUv5F 5ZcWBKL6U9y3Cf3bflXTK3mh08PVHsFcyZxiiTvW6vvB49LXObJoGdn+1kygMJTa 15RA02ouwySj+jAFjkv849wKAt2hQYRiJ5M8VqxTAe4sY4Gx -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:05 2026 by rpki-client