$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa File: 097efd9f-d710-3547-849e-b741805e971a.roa (raw, json) Hash identifier: C+jmzFxK6hSmLgEjMZvINNicZM/RjLL1N5Gk1qpyBfQ= Subject key identifier: D7:B6:A7:87:F9:92:30:63:2A:52:52:15:91:78:A3:04:B3:2C:96:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B0BBC0CC15889DC4EC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 36632 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:bb:c0:cc:15:88:9d:c4:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=98d0b3ed-67e8-4eb2-8b78-3c3d11bb203a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:d2:47:ff:41:cd:08:e3:7f:3e:24:2c:e7: d0:41:45:6c:54:a3:35:a9:b5:4c:2d:fe:27:95:07: 90:62:ef:5b:d2:4d:2a:37:e7:01:a8:84:de:91:c7: 8d:ab:b8:b5:3e:a2:95:4c:21:cf:bd:62:ff:74:28: bc:28:ac:ba:4b:a5:4e:8b:94:78:29:81:34:ad:30: 57:fc:4e:fb:1e:9f:3b:12:bd:ad:d7:1c:fa:fa:16: 99:b3:a5:da:cc:ba:c7:5d:4f:14:45:7a:eb:15:2f: 69:c4:37:d1:71:a0:18:0c:5d:ff:82:f2:a6:fa:ca: a0:85:58:1c:23:cc:d4:f7:7a:46:4a:4b:88:4b:d1: a6:d1:0f:a1:94:81:13:9b:47:59:fe:68:df:5d:68: 2e:1a:46:f4:fb:ee:84:4a:e7:65:13:39:b9:16:98: 4f:ed:6f:c2:a3:b8:06:39:62:0f:0d:92:4a:8e:bc: 4a:11:e0:5f:42:56:9c:bd:47:b2:b7:19:81:84:fb: e2:b5:6e:c9:06:b9:63:87:f8:ff:60:ba:6b:8b:ec: d1:43:bd:2d:02:d2:40:dd:3f:25:cf:dd:cd:08:8f: dd:68:e9:98:0c:af:4b:a5:da:b8:c7:eb:7d:dd:41: ef:6d:42:44:c7:b4:3d:84:d9:a4:87:b7:f2:4a:ec: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:A7:87:F9:92:30:63:2A:52:52:15:91:78:A3:04:B3:2C:96:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1a:8a:cb:f6:7f:5c:33:39:a0:64:12:d4:15:a1:e3:e0:60: b9:9b:43:a9:45:ed:6e:7b:68:62:7f:ec:44:aa:eb:0e:59:c0: 25:1d:86:7d:2f:0a:f8:d4:bb:f4:18:cd:09:47:83:41:12:1a: 68:6b:99:2c:aa:ba:93:8a:40:d5:46:2b:f8:a3:8e:76:53:5c: b6:ac:0f:fd:6d:97:ff:9a:ab:74:f6:2a:7d:23:71:c4:bc:60: 2a:0a:b2:b2:94:0f:a3:5c:fc:a5:fa:6a:38:84:0c:c6:c5:dd: 69:c5:51:64:3f:ee:78:20:08:f3:c7:0c:53:94:14:97:11:52: ca:a2:99:6d:c9:64:a6:32:df:b9:ba:9c:30:a1:ad:2a:4e:7b: 6b:13:1f:0b:93:a6:2d:83:e6:de:4a:7a:49:ed:55:29:ce:76: 37:58:1b:82:15:b1:24:9a:92:0d:fb:44:94:01:4c:4d:e2:47: 46:49:86:57:ae:39:61:f0:40:cf:3a:dd:ab:70:dc:33:4a:44: e3:d2:12:ad:6b:ab:e1:e7:79:26:f3:0f:f3:d0:c3:9e:44:09: 11:f5:25:4a:fe:59:a4:a9:92:19:98:44:d6:81:5e:12:42:cf: f2:2d:ad:3b:ec:aa:c5:2c:bd:79:1b:24:e1:6c:96:b6:58:f0: c5:dc:68:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bC7wMwViJ3E7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk OThkMGIzZWQtNjdlOC00ZWIyLThiNzgtM2MzZDExYmIyMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C/SR/9BzQjjfz4kLOfQQUVsVKM1qbVMLf4n lQeQYu9b0k0qN+cBqITekceNq7i1PqKVTCHPvWL/dCi8KKy6S6VOi5R4KYE0rTBX /E77Hp87Er2t1xz6+haZs6XazLrHXU8URXrrFS9pxDfRcaAYDF3/gvKm+sqghVgc I8zU93pGSkuIS9Gm0Q+hlIETm0dZ/mjfXWguGkb0++6ESudlEzm5FphP7W/Co7gG OWIPDZJKjrxKEeBfQlacvUeytxmBhPvitW7JBrljh/j/YLpri+zRQ70tAtJA3T8l z93NCI/daOmYDK9Lpdq4x+t93UHvbUJEx7Q9hNmkh7fySuwhiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNe2p4f5kjBjKlJSFZF4owSzLJaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk3ZWZkOWYtZDcxMC0z NTQ3LTg0OWUtYjc0MTgwNWU5NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUaisv2f1wzOaBkEtQVoePgYLmbQ6lF7W57aGJ/7ESq6w5ZwCUd hn0vCvjUu/QYzQlHg0ESGmhrmSyqupOKQNVGK/ijjnZTXLasD/1tl/+aq3T2Kn0j ccS8YCoKsrKUD6Nc/KX6ajiEDMbF3WnFUWQ/7nggCPPHDFOUFJcRUsqimW3JZKYy 37m6nDChrSpOe2sTHwuTpi2D5t5KekntVSnOdjdYG4IVsSSakg37RJQBTE3iR0ZJ hleuOWHwQM863atw3DNKROPSEq1rq+HneSbzD/PQw55ECRH1JUr+WaSpkhmYRNaB XhJCz/ItrTvsqsUsvXkbJOFslrZY8MXcaFg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:12:43 2026 by rpki-client