$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/070b838d-f44a-3a78-8c82-692ab97f82ad.roa File: 070b838d-f44a-3a78-8c82-692ab97f82ad.roa (raw, json) Hash identifier: roNR6reQOefBGYTlDRa70n4puSfxY5rvpCiQmVqK9OE= Subject key identifier: 11:86:A5:BF:A4:20:B2:D8:1E:68:3D:C3:13:2B:32:FD:AE:26:58:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA4FF4DC044ED1061AF780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/070b838d-f44a-3a78-8c82-692ab97f82ad.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 36632 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4f:f4:dc:04:4e:d1:06:1a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ad51bfa0-d39d-4a83-9f2b-65f5bf5bcda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:1d:61:7e:00:1a:d6:0f:90:2f:78:0b:01: a5:7a:4e:a5:10:87:e2:4b:d2:60:bf:6d:3e:78:0a: 53:6c:4f:59:be:95:53:c2:da:99:7d:0d:b8:a4:d0: 5f:26:22:0a:01:73:75:2c:49:2e:b1:29:63:51:3e: 84:1e:77:7f:f1:3a:54:32:5f:64:b4:a1:2c:01:2b: a0:30:12:d3:a1:71:9f:00:7b:bd:28:47:f4:6a:b4: b4:d2:89:ab:b7:03:82:88:7b:3c:f7:17:4c:9a:34: be:80:90:5d:22:9f:bd:0c:7a:a5:59:25:2b:50:6c: ad:54:aa:db:6a:87:a5:d2:a0:5a:a3:f9:fa:95:57: 14:4e:01:cf:84:b9:70:dc:aa:23:8a:d9:18:97:62: 7c:17:28:1e:ab:8a:c7:47:c8:50:c1:1e:81:6c:bc: 73:2c:f9:1f:81:25:fa:d3:f6:b9:b8:b0:0c:ba:96: ca:2a:6e:c4:e0:c0:10:43:24:40:64:02:4d:53:0b: 0c:c1:4e:07:a0:60:b2:43:c9:c4:94:08:55:dc:df: 80:64:29:23:bd:64:95:ff:61:bf:13:26:76:5e:8e: b5:98:28:f2:0e:ed:af:a5:61:0b:fc:41:cd:42:df: 69:b1:84:cc:c1:f8:b5:78:7d:8a:03:cb:a8:24:c0: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:86:A5:BF:A4:20:B2:D8:1E:68:3D:C3:13:2B:32:FD:AE:26:58:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/070b838d-f44a-3a78-8c82-692ab97f82ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ab:53:26:72:01:1f:25:bb:32:5c:41:7b:a9:54:4c:c0:0d: 29:ef:38:b7:b3:e0:f1:14:f6:18:8f:1a:ac:1a:43:7d:ee:7c: cb:34:ad:fa:b7:f3:b5:aa:2a:0d:55:49:59:dc:ea:ec:2e:38: 22:5e:19:62:80:07:4d:02:4d:91:8d:84:64:3a:54:bf:d0:03: 70:e6:5e:5d:db:f4:bf:16:9b:6d:96:41:a3:9f:a3:da:68:b3: c0:85:11:14:0e:d8:e5:f2:e6:61:05:34:10:4d:ed:76:ad:ce: 15:5f:fa:23:ef:3a:b1:a3:23:25:e6:5d:fd:82:da:ff:4f:45: 8a:ce:1b:8e:48:7c:62:ab:f5:e3:f5:3e:74:94:db:15:dc:10: 81:02:91:c4:fe:38:94:24:e7:56:7f:8d:fd:fb:c1:23:fd:0a: 0a:f4:fe:eb:4f:f3:ea:03:b1:f1:0e:d7:8b:5f:60:6b:e8:1e: 7b:04:9d:ff:03:e8:37:2d:de:14:bc:19:3b:42:66:51:dd:53: db:e3:0d:48:fb:f9:95:32:93:da:26:f1:95:b6:cd:db:8c:3a: e7:0d:04:57:ba:bc:c2:85:1f:3a:be:a9:3c:95:b8:c1:69:1d: a4:6f:fb:5b:00:08:10:4a:3a:ab:6e:53:d9:b7:1b:74:e9:b9: b5:fa:bd:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+k/03ARO0QYa94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YWQ1MWJmYTAtZDM5ZC00YTgzLTlmMmItNjVmNWJmNWJjZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+MdYX4AGtYPkC94CwGlek6lEIfiS9Jgv20+ eApTbE9ZvpVTwtqZfQ24pNBfJiIKAXN1LEkusSljUT6EHnd/8TpUMl9ktKEsASug MBLToXGfAHu9KEf0arS00omrtwOCiHs89xdMmjS+gJBdIp+9DHqlWSUrUGytVKrb aoel0qBao/n6lVcUTgHPhLlw3KojitkYl2J8Fygeq4rHR8hQwR6BbLxzLPkfgSX6 0/a5uLAMupbKKm7E4MAQQyRAZAJNUwsMwU4HoGCyQ8nElAhV3N+AZCkjvWSV/2G/ EyZ2Xo61mCjyDu2vpWEL/EHNQt9psYTMwfi1eH2KA8uoJMAgZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBGGpb+kILLYHmg9wxMrMv2uJliAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDcwYjgzOGQtZjQ0YS0z YTc4LThjODItNjkyYWI5N2Y4MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPq1MmcgEfJbsyXEF7qVRMwA0p7zi3s+DxFPYY jxqsGkN97nzLNK36t/O1qioNVUlZ3OrsLjgiXhligAdNAk2RjYRkOlS/0ANw5l5d 2/S/FpttlkGjn6PaaLPAhREUDtjl8uZhBTQQTe12rc4VX/oj7zqxoyMl5l39gtr/ T0WKzhuOSHxiq/Xj9T50lNsV3BCBApHE/jiUJOdWf439+8Ej/QoK9P7rT/PqA7Hx DteLX2Br6B57BJ3/A+g3Ld4UvBk7QmZR3VPb4w1I+/mVMpPaJvGVts3bjDrnDQRX urzChR86vqk8lbjBaR2kb/tbAAgQSjqrblPZtxt06bm1+r29 -----END CERTIFICATE-----Generated at Fri Mar 27 00:43:34 2026 by rpki-client