$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa File: 5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa (raw, json) Hash identifier: fo+PneKTIE3LgdsloplWTKxe4m771KRQYH8apiEcT7o= Subject key identifier: 29:06:EC:94:AE:42:AE:00:B8:90:6E:D1:F5:98:A8:E2:53:7E:0B:F4 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D98BAB47FB5A43359C1F02080 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 1288 IP address blocks: 2620:171:75::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b4:7f:b5:a4:33:59:c1:f0:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=5e246176-8e09-4d1f-903e-ed7426121e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:14:10:73:7f:e3:24:7e:f2:55:00:9d:5c:9a: 22:57:aa:bf:60:11:85:b6:f5:02:90:e3:3b:78:9e: 47:9f:58:38:89:ce:2a:76:9a:8d:d1:80:e9:c2:19: 42:22:17:35:ac:f4:4d:f9:c5:eb:8a:80:83:fe:39: da:f7:68:74:2d:15:3d:06:c9:17:87:4c:f1:74:56: 51:20:72:bb:3b:b1:b2:4f:11:c1:df:af:73:20:30: f7:2b:7f:0d:ad:34:75:00:d4:1d:ef:c5:36:96:cf: b4:cd:85:c1:0f:f4:c8:90:a3:dc:53:32:6e:9b:67: 4b:c9:d5:8e:7e:b8:9a:85:69:01:51:57:f6:02:c1: c1:93:4d:1b:27:88:75:3b:84:1c:58:48:df:25:94: 05:5d:9d:b8:28:66:f6:58:2d:ec:0a:8d:ba:91:16: 33:79:ba:00:60:d1:cc:d2:91:ff:36:86:2a:b8:b3: cc:b3:6b:c7:8e:70:67:6d:eb:09:5d:ba:fc:3c:7f: fb:c1:ac:b8:8f:66:67:05:a6:68:3d:2e:a2:9c:14: 44:44:04:dd:a4:17:5f:71:f3:df:34:36:3b:a7:db: c4:ef:de:46:75:7b:2d:51:cc:0b:7a:f4:86:58:e2: b4:9f:0f:08:2f:9f:d9:7f:83:6c:a9:04:3c:58:f6: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:06:EC:94:AE:42:AE:00:B8:90:6E:D1:F5:98:A8:E2:53:7E:0B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5dcc2090-7a9e-38f2-8569-8bc593c08a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:75::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:47:ac:5c:fd:4f:6c:28:04:cd:e5:b7:fc:c2:f8:26:df: 6a:ec:b5:37:e6:40:7d:dd:32:95:a7:13:fd:97:72:25:cf:79: fe:15:d6:e5:61:d5:c0:15:44:0d:3d:cb:42:a4:0f:39:1d:a4: 07:c1:d0:08:3a:7b:a8:cf:63:2a:3f:13:df:bf:82:1b:98:c9: 21:85:21:f4:7f:ab:55:f3:d7:47:cb:12:ee:e9:40:e7:0c:54: a2:62:c5:60:a5:ca:c6:87:38:09:a6:c9:c4:df:32:39:8d:eb: 85:a6:f3:5f:d9:66:bb:4e:bc:9c:c1:ba:16:ee:40:5b:5c:30: 5f:1c:21:7e:8f:13:d5:a3:02:7b:86:a1:b3:08:db:ed:f4:d0: 1e:ad:82:b8:18:44:f5:67:44:58:f9:89:1d:66:74:02:c5:50: c4:ec:7d:e4:0f:9d:a6:7e:f6:72:f9:72:28:28:c5:3c:01:13: 6a:a3:3b:5a:b5:1c:75:bc:8f:8d:f5:25:0d:9c:71:da:59:25: 93:84:e0:0a:ff:7a:ab:24:a0:8a:c1:c4:02:84:46:28:49:98: 03:57:96:e4:fc:e5:5b:7f:8a:9c:fa:5a:0a:68:96:bf:76:3d: cb:3a:92:09:53:f5:52:7f:a3:56:d0:31:08:8c:da:22:a5:d5: 95:25:31:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2YurR/taQzWcHwIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NWUyNDYxNzYtOGUwOS00ZDFmLTkwM2UtZWQ3NDI2MTIxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RQQc3/jJH7yVQCdXJoiV6q/YBGFtvUCkOM7 eJ5Hn1g4ic4qdpqN0YDpwhlCIhc1rPRN+cXrioCD/jna92h0LRU9BskXh0zxdFZR IHK7O7GyTxHB369zIDD3K38NrTR1ANQd78U2ls+0zYXBD/TIkKPcUzJum2dLydWO friahWkBUVf2AsHBk00bJ4h1O4QcWEjfJZQFXZ24KGb2WC3sCo26kRYzeboAYNHM 0pH/NoYquLPMs2vHjnBnbesJXbr8PH/7way4j2ZnBaZoPS6inBRERATdpBdfcfPf NDY7p9vE795GdXstUcwLevSGWOK0nw8IL5/Zf4NsqQQ8WPZdDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkG7JSuQq4AuJBu0fWYqOJTfgv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNWRjYzIwOTAtN2E5ZS0z OGYyLTg1NjktOGJjNTkzYzA4YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABcQB1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9eR6xc/U9sKATN5bf8wvgm32rstTfmQH3dMpWnE/2XciXPef4V 1uVh1cAVRA09y0KkDzkdpAfB0Ag6e6jPYyo/E9+/ghuYySGFIfR/q1Xz10fLEu7p QOcMVKJixWClysaHOAmmycTfMjmN64Wm81/ZZrtOvJzBuhbuQFtcMF8cIX6PE9Wj AnuGobMI2+300B6tgrgYRPVnRFj5iR1mdALFUMTsfeQPnaZ+9nL5cigoxTwBE2qj O1q1HHW8j431JQ2ccdpZJZOE4Ar/eqskoIrBxAKERihJmANXluT85Vt/ipz6Wgpo lr92Pcs6kglT9VJ/o1bQMQiM2iKl1ZUlMbs= -----END CERTIFICATE-----Generated at Sun May 3 04:29:16 2026 by rpki-client