$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa File: 0859e3de-d7bd-3f51-b107-036347946467.roa (raw, json) Hash identifier: vrem4pwKk0bLsqjijriOMXDoTZswm9sdaAsnsK8AcHc= Subject key identifier: 63:3E:38:0E:23:1E:84:F0:54:03:12:F8:26:D1:6F:98:17:5D:D1:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091264AFFE233E97CF79B3A4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396602 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:64:af:fe:23:3e:97:cf:79:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=0ef4ac5b-27e6-46b8-bab5-b6e241172580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:3a:0f:ae:24:eb:57:be:6d:6c:f4:19:05: 8d:ba:28:5e:60:5b:c7:2a:bc:dd:62:8e:41:ba:a1: 8e:06:41:91:0a:d5:bb:1c:76:46:32:3d:82:03:08: 2c:8d:3b:54:89:e5:23:44:0c:e4:b6:93:36:21:f9: 52:4c:5b:24:27:4a:a3:3d:30:08:09:bd:2e:81:61: a9:85:82:75:cf:70:6b:26:54:46:5c:19:90:36:a6: 52:1d:d4:53:7a:23:af:5c:cc:f2:4a:6d:67:93:f0: 96:07:a4:92:99:9b:5c:c7:6b:49:8a:5d:71:62:41: a9:3c:d6:22:bd:ca:94:99:8b:ca:e3:8c:1f:f7:fb: 6c:fc:f1:df:78:cf:42:8c:c6:f5:f3:d4:48:24:0e: 2c:46:59:dc:32:bc:65:7b:28:c8:36:62:91:2f:4d: c1:51:25:1c:ba:fb:8d:93:a2:e7:cc:7d:d6:98:ab: 2a:74:fe:b5:c3:a4:7b:e1:08:9a:34:2b:83:8a:05: 69:ef:3f:bf:31:59:a5:16:0f:31:b4:05:cd:c8:ac: 38:66:93:96:08:47:1f:25:1f:d8:28:3d:90:da:97: 2e:bb:5b:e9:32:ac:f0:70:4c:ad:5a:3d:5e:05:5f: e0:b5:06:bd:62:4b:63:54:42:5e:dd:4f:92:7a:0c: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:38:0E:23:1E:84:F0:54:03:12:F8:26:D1:6F:98:17:5D:D1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0859e3de-d7bd-3f51-b107-036347946467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6d:51:5d:a5:87:01:ee:35:4c:f0:f9:57:2e:36:e3:e4:f4: de:25:a5:63:39:e2:69:b2:b6:8f:d1:9f:66:5c:e1:49:ac:94: ad:f6:6a:0f:cb:ea:0e:fc:e7:db:c4:40:82:ab:dc:e0:98:0b: c2:c9:1b:ea:21:13:83:12:88:00:ad:bc:b6:8b:5c:de:94:d9: 59:cc:7b:e5:d1:1e:cc:24:13:0b:56:57:7c:c6:5a:ea:8e:28: 21:6b:24:f9:37:d6:92:d8:14:1c:46:80:39:cb:9f:2b:3c:08: c0:6b:ac:cf:67:58:a5:ec:b1:8f:9e:cd:98:5e:9d:c6:d8:46: 51:6e:ab:03:12:8f:c0:da:57:e0:02:57:ef:da:40:27:54:d2: c9:db:d4:fc:40:5a:29:aa:45:e9:4c:dd:e4:ac:c8:67:dd:13: 97:78:2c:b3:19:1a:76:b6:6f:24:b4:d3:07:f1:b3:7c:b2:cd: 67:f4:5b:e9:57:7d:29:09:b7:53:7a:e7:d7:f1:3e:fd:ce:0e: 2b:ae:2c:f0:a0:b5:5a:c2:8f:b4:22:24:a1:1a:9f:aa:f5:30: b9:7c:d9:29:72:5f:87:f0:0e:16:70:ce:9d:34:63:9f:93:2c: 7b:f5:f4:49:b9:60:87:82:ea:e6:6c:3d:2a:f8:4f:f4:bb:f3: 0e:46:20:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmSv/iM+l895s6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGVmNGFjNWItMjdlNi00NmI4LWJhYjUtYjZlMjQxMTcyNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivU6D64k61e+bWz0GQWNuiheYFvHKrzdYo5B uqGOBkGRCtW7HHZGMj2CAwgsjTtUieUjRAzktpM2IflSTFskJ0qjPTAICb0ugWGp hYJ1z3BrJlRGXBmQNqZSHdRTeiOvXMzySm1nk/CWB6SSmZtcx2tJil1xYkGpPNYi vcqUmYvK44wf9/ts/PHfeM9CjMb189RIJA4sRlncMrxleyjINmKRL03BUSUcuvuN k6LnzH3WmKsqdP61w6R74QiaNCuDigVp7z+/MVmlFg8xtAXNyKw4ZpOWCEcfJR/Y KD2Q2pcuu1vpMqzwcEytWj1eBV/gtQa9YktjVEJe3U+SegydIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGM+OA4jHoTwVAMS+CbRb5gXXdGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg1OWUzZGUtZDdiZC0z ZjUxLWIxMDctMDM2MzQ3OTQ2NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdtUV2lhwHuNUzw+VcuNuPk9N4lpWM54mmyto/Rn2Zc4UmslK32 ag/L6g7859vEQIKr3OCYC8LJG+ohE4MSiACtvLaLXN6U2VnMe+XRHswkEwtWV3zG WuqOKCFrJPk31pLYFBxGgDnLnys8CMBrrM9nWKXssY+ezZhencbYRlFuqwMSj8Da V+ACV+/aQCdU0snb1PxAWimqRelM3eSsyGfdE5d4LLMZGna2byS00wfxs3yyzWf0 W+lXfSkJt1N659fxPv3ODiuuLPCgtVrCj7QiJKEan6r1MLl82SlyX4fwDhZwzp00 Y5+TLHv19Em5YIeC6uZsPSr4T/S78w5GIAw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:55 2026 by rpki-client