$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/025323fd-1278-3ee1-a8bc-7b99a803453e.roa File: 025323fd-1278-3ee1-a8bc-7b99a803453e.roa (raw, json) Hash identifier: AlhH/934PXp/ZWMyZ7NzUuuGxGRwcV8yO29Uio9qw44= Subject key identifier: 6D:C9:69:CB:E9:8F:4F:9B:99:3C:88:6B:C0:09:96:41:FC:3A:D5:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D09125080BA9901F9F8678B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/025323fd-1278-3ee1-a8bc-7b99a803453e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396578 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:50:80:ba:99:01:f9:f8:67:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=142af0e5-0660-4b4e-82c3-02acf5660b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:56:90:f5:b8:4c:41:66:34:38:9d:9c:5a: 90:30:51:39:43:e3:92:e1:69:35:89:43:0c:c4:52: 08:d6:c9:f8:f2:75:1f:70:a6:fb:f6:ed:84:dd:11: 46:2d:a5:d3:ec:0a:f4:2c:e9:95:75:01:0a:04:5e: 44:c6:95:3a:ab:51:13:ff:1d:d1:25:ba:9d:c2:5d: 9d:0e:ad:f2:96:b3:1e:fe:07:c3:7a:1e:71:c3:82: 47:a8:74:dd:d1:4c:be:fd:9f:05:02:3c:8c:2b:ff: bd:bf:97:53:ed:a0:43:7d:fe:56:b6:24:e6:2e:e9: 49:ad:38:68:5f:4e:a2:37:bd:be:f3:e7:a6:d0:10: 82:bb:1c:df:0d:ed:84:d7:d1:ae:3c:6a:45:2c:f2: 72:3c:30:fd:c6:06:76:24:93:71:b4:6d:e0:bd:5f: bd:4e:2a:5c:23:00:40:e9:1b:c0:be:af:9e:32:6d: ff:f4:31:c2:0a:89:8c:c8:99:80:c6:28:ae:bd:48: 74:2a:b7:dd:c6:9d:1b:43:da:d3:07:9f:c2:41:0f: 3b:b7:0c:36:a3:62:67:b6:11:0f:c9:53:3d:5d:04: ce:1c:8c:c1:58:fd:1e:8a:69:01:0a:36:d2:b5:62: e0:b3:71:5a:97:8e:dc:50:4a:17:49:59:00:9b:5c: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C9:69:CB:E9:8F:4F:9B:99:3C:88:6B:C0:09:96:41:FC:3A:D5:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/025323fd-1278-3ee1-a8bc-7b99a803453e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f7:69:07:31:d1:f0:2e:78:b5:12:29:01:f2:a7:11:e0:65: 66:ed:76:bb:c9:46:cb:86:81:94:e8:84:16:4a:1b:b6:d3:65: a1:eb:1a:03:5d:37:21:20:6b:8e:7d:b9:f4:14:1f:aa:b8:f6: ff:7e:4d:08:20:e4:6e:0f:25:cc:04:09:a3:89:8e:29:62:1e: f1:67:d6:65:d4:90:9d:29:74:61:1f:08:c5:72:b7:d3:5e:a0: 4b:ae:05:b9:57:19:b1:ea:ba:68:e0:c6:d9:d6:51:9e:54:67: 17:95:ec:97:62:f2:5b:37:5f:2f:5b:76:9f:db:af:55:72:72: 6e:72:78:b0:83:f4:36:8f:3a:0c:d0:b0:8b:2e:8f:dd:af:45: 0f:2b:50:b4:4e:5f:0b:1c:8e:b4:be:a8:46:8f:37:b0:d2:f2: 28:25:68:ff:73:9f:27:1d:b4:97:f4:8d:10:09:5c:61:b8:ac: 28:a0:ee:1e:82:1e:a5:59:89:f9:9b:5e:93:c8:c4:09:e7:6d: 2e:77:6e:05:75:27:28:5a:f7:6e:fd:30:48:08:78:ea:79:b8: 92:73:84:1c:1b:39:6b:03:b0:84:9d:aa:27:78:21:97:b1:56: 3c:61:63:8f:bd:77:87:d6:38:14:bf:c5:d5:cb:d3:4b:d6:48: 46:56:d9:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElCAupkB+fhniwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTQyYWYwZTUtMDY2MC00YjRlLTgyYzMtMDJhY2Y1NjYwYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxWkPW4TEFmNDidnFqQMFE5Q+OS4Wk1iUMM xFII1sn48nUfcKb79u2E3RFGLaXT7Ar0LOmVdQEKBF5ExpU6q1ET/x3RJbqdwl2d Dq3ylrMe/gfDeh5xw4JHqHTd0Uy+/Z8FAjyMK/+9v5dT7aBDff5WtiTmLulJrTho X06iN72+8+em0BCCuxzfDe2E19GuPGpFLPJyPDD9xgZ2JJNxtG3gvV+9TipcIwBA 6RvAvq+eMm3/9DHCComMyJmAxiiuvUh0Krfdxp0bQ9rTB5/CQQ87tww2o2JnthEP yVM9XQTOHIzBWP0eimkBCjbStWLgs3Fal47cUEoXSVkAm1yrHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3Jacvpj0+bmTyIa8AJlkH8OtWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDI1MzIzZmQtMTI3OC0z ZWUxLWE4YmMtN2I5OWE4MDM0NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP3aQcx0fAueLUSKQHypxHgZWbtdrvJRsuGgZTohBZKG7bTZaHr GgNdNyEga459ufQUH6q49v9+TQgg5G4PJcwECaOJjiliHvFn1mXUkJ0pdGEfCMVy t9NeoEuuBblXGbHqumjgxtnWUZ5UZxeV7Jdi8ls3Xy9bdp/br1Vycm5yeLCD9DaP OgzQsIsuj92vRQ8rULROXwscjrS+qEaPN7DS8iglaP9znycdtJf0jRAJXGG4rCig 7h6CHqVZifmbXpPIxAnnbS53bgV1Jyha9279MEgIeOp5uJJzhBwbOWsDsISdqid4 IZexVjxhY4+9d4fWOBS/xdXL00vWSEZW2f0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:57 2026 by rpki-client