$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa File: 0697b4b5-f608-31ea-86a4-9f99a6da708b.roa (raw, json) Hash identifier: yLZgd36y5lKAFl8xhJW7hyOPRK5UQv10wten/3VIsbo= Subject key identifier: 99:28:8F:1D:33:66:B7:4C:AD:59:0B:5D:D5:6D:3D:F3:64:31:22:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B15783681E32144DEF20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397201 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b1:57:83:68:1e:32:14:4d:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=5af8165b-b862-4794-8371-24b2e1532d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:07:1b:dd:e5:ee:f5:1f:41:66:39:0e:91: b3:ed:11:13:93:3b:0d:f3:1a:3e:ea:ec:92:1b:a8: 4e:c0:69:2b:59:e6:2e:38:68:35:fc:dc:55:ee:a9: 3a:46:57:08:4f:33:0f:79:bc:a5:81:30:70:69:e1: 92:72:22:98:e1:6e:e6:d3:d8:18:c0:ef:1a:c9:81: 83:6b:cc:05:47:2e:ea:83:85:0a:d6:33:c8:42:86: 89:80:a3:e2:0c:d3:81:ef:96:05:14:f7:0d:75:7e: 15:45:b3:d4:1d:6c:3a:0a:85:78:a1:97:8e:b6:6e: 01:65:97:56:83:81:77:cf:86:69:99:f5:38:f3:dd: 70:bc:ae:38:71:3f:fe:89:01:ea:ff:96:7d:2f:e7: 35:c9:fe:9f:d3:bb:9e:12:aa:7c:b9:54:4a:52:f7: f4:1c:6a:2f:e8:50:bc:63:47:3f:e8:50:cb:f3:70: d8:e5:e3:6e:68:70:82:14:d4:c2:15:37:d8:bf:6b: 33:5b:43:5e:52:95:fe:f8:b3:a5:b8:f6:5e:dc:14: 14:89:89:ec:ec:81:ef:de:2e:ad:0b:0e:c9:a4:b9: f1:f3:47:a6:78:c4:31:8c:64:7c:d6:16:e0:88:84: 33:c2:e7:77:30:a9:a3:b0:10:8b:c7:17:17:a9:af: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:8F:1D:33:66:B7:4C:AD:59:0B:5D:D5:6D:3D:F3:64:31:22:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0697b4b5-f608-31ea-86a4-9f99a6da708b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0a:59:91:fc:4d:94:ef:c9:97:84:f8:2f:41:18:36:09:fd: 2e:67:ee:b6:dd:cb:7b:94:dc:db:9b:85:04:b2:32:25:aa:69: 1e:f6:68:4f:90:71:21:3f:bf:8e:77:e7:98:ad:ed:94:07:24: e8:67:c3:17:87:85:fe:6c:9f:6d:21:d8:4a:c1:6b:43:47:c0: fe:c0:8c:f1:af:a3:f9:50:27:3c:53:65:99:68:5c:61:1b:83: 72:65:e1:9c:95:c4:fd:82:7f:b7:38:16:6e:19:25:9d:e8:b6: f0:50:ee:f6:80:ff:40:54:5f:b1:d3:c4:7b:0b:89:75:9c:70: 0d:11:39:6f:bb:54:dd:f2:e5:87:87:d1:c4:74:b2:af:83:54: ea:01:9d:47:db:5e:95:41:e1:e8:a6:ac:a8:4c:84:df:60:03: ec:58:be:ea:dd:ce:8c:61:cd:ce:63:be:67:32:a1:62:aa:50: 59:e1:56:4d:aa:8a:01:04:a2:d0:b0:de:b7:1a:7a:3f:0d:f6: 67:79:37:2b:6e:c6:c8:1f:b1:fb:bf:41:2d:e4:9c:97:80:51: 93:9f:b0:7f:92:84:58:a1:2c:83:cb:f1:9b:2f:b0:2d:7b:c5: c7:9a:f9:a1:c1:92:e3:49:a8:38:9f:2d:d7:75:6c:63:9a:74: 8e:5a:40:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErFXg2geMhRN7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWFmODE2NWItYjg2Mi00Nzk0LTgzNzEtMjRiMmUxNTMyZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ4HG93l7vUfQWY5DpGz7RETkzsN8xo+6uyS G6hOwGkrWeYuOGg1/NxV7qk6RlcITzMPebylgTBwaeGSciKY4W7m09gYwO8ayYGD a8wFRy7qg4UK1jPIQoaJgKPiDNOB75YFFPcNdX4VRbPUHWw6CoV4oZeOtm4BZZdW g4F3z4ZpmfU4891wvK44cT/+iQHq/5Z9L+c1yf6f07ueEqp8uVRKUvf0HGov6FC8 Y0c/6FDL83DY5eNuaHCCFNTCFTfYv2szW0NeUpX++LOluPZe3BQUiYns7IHv3i6t Cw7JpLnx80emeMQxjGR81hbgiIQzwud3MKmjsBCLxxcXqa95dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkojx0zZrdMrVkLXdVtPfNkMSIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY5N2I0YjUtZjYwOC0z MWVhLTg2YTQtOWY5OWE2ZGE3MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwKWZH8TZTvyZeE+C9BGDYJ/S5n7rbdy3uU3NubhQSyMiWqaR72 aE+QcSE/v45355it7ZQHJOhnwxeHhf5sn20h2ErBa0NHwP7AjPGvo/lQJzxTZZlo XGEbg3Jl4ZyVxP2Cf7c4Fm4ZJZ3otvBQ7vaA/0BUX7HTxHsLiXWccA0ROW+7VN3y 5YeH0cR0sq+DVOoBnUfbXpVB4eimrKhMhN9gA+xYvurdzoxhzc5jvmcyoWKqUFnh Vk2qigEEotCw3rcaej8N9md5Nytuxsgfsfu/QS3knJeAUZOfsH+ShFihLIPL8Zsv sC17xcea+aHBkuNJqDifLdd1bGOadI5aQNI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:05 2026 by rpki-client