$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa File: 0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa (raw, json) Hash identifier: 6X1UtQiPHTCazjODx9Ik++1S9bEYHy6f3PKFj/OGX18= Subject key identifier: DF:84:F7:CD:AA:9F:3E:2E:DF:2E:04:CF:37:40:C9:25:D2:BF:52:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA57783A487171267381A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397204 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:57:78:3a:48:71:71:26:73:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=047149e8-cbb3-411f-9b8e-a84b573bad91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:fd:3e:52:fd:67:dd:79:60:81:c4:eb:69: b2:f0:d0:2e:50:3e:06:a0:8a:e1:13:31:28:79:a3: fb:0e:bb:42:ff:a1:98:ae:84:82:1a:41:27:a2:69: 9a:d9:7f:05:7d:7c:a8:a8:c7:ab:c6:b2:37:42:cc: a0:cc:4f:7e:52:6b:15:36:5f:65:af:a5:c6:5a:80: e6:b9:eb:d0:1f:e5:05:10:8a:54:66:31:07:09:22: c5:3f:03:17:e2:49:15:16:5c:aa:39:e2:6f:c0:b7: bb:c5:14:fe:0f:af:dc:f1:56:e0:9a:ba:d4:85:ef: 53:5e:eb:a6:08:50:e1:b7:2f:2a:8a:ea:f7:07:ac: ee:91:8c:6d:ae:7a:68:72:3c:30:c8:c7:f2:dd:67: fd:e9:f2:4e:2b:62:43:44:27:b0:da:19:b9:35:cd: f9:75:d8:d5:8f:f1:8a:e3:09:82:ac:0d:b9:db:b4: c5:33:5b:75:0b:c3:63:ac:9e:92:3a:fb:ce:09:93: 91:a9:b4:42:cd:49:d8:7e:ed:39:05:12:14:96:61: 22:2d:34:5e:df:51:92:88:fb:94:40:39:d5:80:ab: fb:8b:f8:e2:ef:65:5e:37:fe:d2:dc:61:5f:90:53: a2:04:4e:c6:2c:cc:ab:1f:7d:79:81:39:0c:ee:78: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:84:F7:CD:AA:9F:3E:2E:DF:2E:04:CF:37:40:C9:25:D2:BF:52:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:39:04:d9:d0:79:33:b0:6b:5b:a5:a0:e2:d1:8f:4e:42:01: 2a:0d:5d:8c:ac:64:bc:53:95:06:b1:35:59:3d:7c:13:ea:66: f0:98:17:06:13:56:f9:76:af:34:f1:35:d1:b6:c2:64:35:45: ba:d6:3a:c4:18:24:38:82:c5:84:b9:8f:06:3b:76:5d:b1:26: b2:07:e2:0e:47:63:6d:2c:8d:c8:2a:dc:1f:f2:5d:94:94:71: 43:77:85:af:89:97:bf:9d:9b:90:90:f4:f8:e0:36:fa:63:4b: 46:55:3c:69:76:c0:cc:50:b6:d7:9f:21:5e:b9:1e:6c:b1:83: bb:20:33:91:49:e3:67:71:16:ff:21:a6:d1:95:8f:6c:94:9a: 4b:7d:59:27:70:1b:44:2a:2d:b7:44:de:d6:a4:76:71:8e:8a: 70:23:7a:31:7e:f4:10:0f:b7:43:cf:23:f4:be:b1:70:61:db: c0:a6:af:6a:66:7c:70:c7:d5:02:67:44:e3:c7:6d:54:4c:ee: bc:15:26:93:5a:7f:0c:67:83:5d:71:9f:47:fc:c6:e5:fa:64: 75:d2:ae:24:e6:48:c7:41:43:43:b7:5b:f3:fe:92:d3:82:62: 1f:0b:95:90:ec:72:20:da:8b:26:50:77:e1:0c:3a:f9:77:74: 66:ff:70:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+ld4OkhxcSZzgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MDQ3MTQ5ZTgtY2JiMy00MTFmLTliOGUtYTg0YjU3M2JhZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWH9PlL9Z915YIHE62my8NAuUD4GoIrhEzEo eaP7DrtC/6GYroSCGkEnomma2X8FfXyoqMerxrI3QsygzE9+UmsVNl9lr6XGWoDm uevQH+UFEIpUZjEHCSLFPwMX4kkVFlyqOeJvwLe7xRT+D6/c8VbgmrrUhe9TXuum CFDhty8qiur3B6zukYxtrnpocjwwyMfy3Wf96fJOK2JDRCew2hm5Nc35ddjVj/GK 4wmCrA2527TFM1t1C8NjrJ6SOvvOCZORqbRCzUnYfu05BRIUlmEiLTRe31GSiPuU QDnVgKv7i/ji72VeN/7S3GFfkFOiBE7GLMyrH315gTkM7ngd1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN+E982qnz4u3y4EzzdAySXSv1IFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDAwOWIyYzctMTIwYS0z YzYwLWFjNzYtMDFmMTlmM2YzYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4OQTZ0HkzsGtbpaDi0Y9OQgEqDV2MrGS8U5UG sTVZPXwT6mbwmBcGE1b5dq808TXRtsJkNUW61jrEGCQ4gsWEuY8GO3ZdsSayB+IO R2NtLI3IKtwf8l2UlHFDd4WviZe/nZuQkPT44Db6Y0tGVTxpdsDMULbXnyFeuR5s sYO7IDORSeNncRb/IabRlY9slJpLfVkncBtEKi23RN7WpHZxjopwI3oxfvQQD7dD zyP0vrFwYdvApq9qZnxwx9UCZ0Tjx21UTO68FSaTWn8MZ4NdcZ9H/Mbl+mR10q4k 5kjHQUNDt1vz/pLTgmIfC5WQ7HIg2osmUHfhDDr5d3Rm/3DG -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:13 2026 by rpki-client