$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/077abf8b-4810-3691-a1a6-d0f322155ade.roa File: 077abf8b-4810-3691-a1a6-d0f322155ade.roa (raw, json) Hash identifier: hjzfjggmw+kpe6SHqvEi2E/ki1cBijQaDVW1R/LAyIA= Subject key identifier: 88:83:E1:1B:39:32:43:44:4C:F5:4B:06:43:25:6C:2A:D5:9F:58:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D359FDEB3BC4BC837E1F2BEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/077abf8b-4810-3691-a1a6-d0f322155ade.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 2620:74:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:de:b3:bc:4b:c8:37:e1:f2:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b6199dec-6b54-49ac-8996-b6548e165c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:ee:c7:5f:7e:2a:29:ff:ac:3d:f9:5b:7b: 42:85:6c:7e:88:ac:35:e6:c8:13:30:1e:80:50:3b: 04:f9:b2:26:75:6e:62:b2:37:da:5f:2e:22:0a:43: da:57:5e:65:92:8e:ef:c0:b3:f2:1a:a5:1d:cb:89: ad:09:99:39:00:15:ed:1b:eb:fa:8c:64:2d:64:da: fc:f1:3e:a1:07:d3:83:15:5d:f7:12:43:fb:f6:e2: e3:af:18:0a:eb:4a:82:ca:d6:d7:71:16:ae:8b:a8: 41:1f:07:7b:75:fd:c2:2b:8b:c0:04:8d:3b:0b:87: f7:dc:80:ed:8c:ac:da:42:5a:5f:50:d6:9c:44:11: c1:34:0a:f0:89:f1:70:21:17:72:f3:14:25:cc:2c: f0:87:48:98:35:49:ad:92:e7:a3:ac:69:19:cd:06: 7c:e7:87:36:3d:c1:21:62:07:ac:79:af:7e:a3:a1: 0a:b1:d6:7e:ab:70:a1:77:96:67:10:03:53:c8:92: 04:59:d0:9d:94:07:63:36:c1:2a:8f:0f:0c:5c:9c: 49:89:7b:d4:ed:5f:94:cc:4c:de:13:5a:70:f9:27: 92:63:b8:d5:4c:68:b7:35:46:ca:4c:b5:54:b0:c9: ec:e2:36:be:48:a1:ce:6e:4c:f7:05:d7:ee:ed:59: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:E1:1B:39:32:43:44:4C:F5:4B:06:43:25:6C:2A:D5:9F:58:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/077abf8b-4810-3691-a1a6-d0f322155ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:20:ab:41:3a:34:33:90:a7:af:12:43:35:b8:74:de:12:35: a4:1e:f1:1a:77:bc:1f:75:5b:fe:45:fe:e7:a2:b1:ea:e5:26: 66:9f:c8:73:85:05:ea:d6:ed:42:a7:ef:71:48:53:a4:67:d3: de:ed:ff:a9:0e:e9:89:01:08:25:df:81:55:0c:93:1c:6e:9e: ca:62:30:53:f6:7b:38:9b:dd:cd:8f:58:31:d2:b4:fb:fd:e9: 96:43:0d:e7:98:9c:44:1d:0c:01:83:e9:50:55:96:06:33:27: 3d:40:84:26:a6:17:34:33:b7:d0:61:bd:db:77:6d:6b:77:d3: 56:ec:49:9a:91:5c:2c:8d:8d:83:16:05:00:80:c6:cd:8c:83: de:c6:5e:ec:32:f5:ad:c6:0c:8c:47:7f:3a:62:14:d2:0e:31: bf:6f:ab:4e:af:55:65:9b:7e:ec:c8:6e:1c:44:4a:01:65:d7: 15:23:74:f5:6f:f2:dc:eb:e2:21:73:df:11:f6:5d:43:45:ca: f4:9e:25:52:cd:94:29:a7:bb:76:cd:be:ff:c8:94:84:8f:c5: 9d:61:dc:c0:2a:e7:09:5f:e3:22:93:1d:d1:87:ba:da:ac:72: 5d:d2:9d:6b:4c:49:53:e1:04:b8:64:4e:ed:51:22:df:0d:3a: e5:7a:53:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n96zvEvIN+HyvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjYxOTlkZWMtNmI1NC00OWFjLTg5OTYtYjY1NDhlMTY1YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKvux19+Kin/rD35W3tChWx+iKw15sgTMB6A UDsE+bImdW5isjfaXy4iCkPaV15lko7vwLPyGqUdy4mtCZk5ABXtG+v6jGQtZNr8 8T6hB9ODFV33EkP79uLjrxgK60qCytbXcRaui6hBHwd7df3CK4vABI07C4f33IDt jKzaQlpfUNacRBHBNArwifFwIRdy8xQlzCzwh0iYNUmtkuejrGkZzQZ854c2PcEh Ygesea9+o6EKsdZ+q3Chd5ZnEANTyJIEWdCdlAdjNsEqjw8MXJxJiXvU7V+UzEze E1pw+SeSY7jVTGi3NUbKTLVUsMns4ja+SKHObkz3Bdfu7Vm2rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiD4Rs5MkNETPVLBkMlbCrVn1hyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDc3YWJmOGItNDgxMC0z NjkxLWExYTYtZDBmMzIyMTU1YWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHAgq0E6NDOQp68SQzW4dN4SNaQe8Rp3vB91W/5F/ueiserlJmaf yHOFBerW7UKn73FIU6Rn097t/6kO6YkBCCXfgVUMkxxunspiMFP2ezib3c2PWDHS tPv96ZZDDeeYnEQdDAGD6VBVlgYzJz1AhCamFzQzt9Bhvdt3bWt301bsSZqRXCyN jYMWBQCAxs2Mg97GXuwy9a3GDIxHfzpiFNIOMb9vq06vVWWbfuzIbhxESgFl1xUj dPVv8tzr4iFz3xH2XUNFyvSeJVLNlCmnu3bNvv/IlISPxZ1h3MAq5wlf4yKTHdGH utqscl3SnWtMSVPhBLhkTu1RIt8NOuV6UwE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:07 2026 by rpki-client