$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa File: 0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa (raw, json) Hash identifier: 4I6qTwvHRDEtPiQxd5goSeRbqo5Yb5couB3eUBzNaCQ= Subject key identifier: 79:E1:24:A3:FE:AE:24:D9:48:B1:83:1B:7C:D7:C5:AE:7D:F8:19:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5DD540E2C7CD73209A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396599 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5d:d5:40:e2:c7:cd:73:20:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4172b2fa-f50d-4458-aaff-6f8bfb1719f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:ba:5f:b9:25:ef:4d:8e:50:65:26:0d:b6: fa:0c:49:b8:bb:ea:ae:aa:f3:17:f3:06:7f:3c:88: 68:4a:ee:15:18:c3:66:27:06:69:ba:cb:64:ad:d0: 4e:81:b8:d2:72:f6:ce:64:9d:4c:95:68:25:ae:9e: cb:16:a6:1b:f9:90:4f:e2:7d:9d:cd:49:93:76:7c: 3c:ba:58:63:46:f1:a4:a1:0f:94:40:a1:01:ff:5e: e6:f8:1c:4e:b7:14:21:3f:fb:42:9f:76:cb:1e:04: e5:c1:10:16:ad:c4:e2:27:71:ba:8b:ba:86:69:bf: 2f:6c:b3:4a:f0:a3:1c:36:77:03:4c:fc:86:7b:30: fa:d2:df:75:21:9e:5b:da:7c:a3:25:cd:58:23:63: 74:66:fe:eb:18:fe:7e:ce:66:02:35:f5:0a:ed:07: 4b:cc:43:e8:5a:bd:90:f3:ae:8b:54:d7:9c:8f:47: 77:ff:2b:66:be:63:50:b2:1c:60:ba:4b:81:6c:d9: 6e:97:74:29:0c:6b:d1:95:9f:4d:e8:a2:5b:71:af: 4b:f5:a0:e1:b0:27:7d:19:0c:52:c5:53:4d:16:53: f4:ef:9f:fe:3a:c4:42:7e:c9:38:9a:ac:5e:6d:71: eb:95:0f:d3:86:87:d6:45:8d:55:18:2e:21:0a:a0: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E1:24:A3:FE:AE:24:D9:48:B1:83:1B:7C:D7:C5:AE:7D:F8:19:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a128ce4-2c0d-30df-81e2-1e48ffc467e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7a:2d:24:ca:1a:95:81:df:d6:31:34:59:26:7d:c0:c6:af: 92:74:2f:04:a0:f9:9b:af:b7:09:11:2e:e1:36:2f:a0:76:39: 97:a9:b4:24:9d:db:dc:e6:11:bd:2d:c5:0c:5f:8d:28:7e:4a: d6:74:02:11:85:b7:d0:07:26:ce:d8:fa:3a:8f:be:74:0a:7c: b5:cd:7a:eb:fd:f2:21:51:ec:9b:e5:7d:c8:83:e5:eb:fe:27: 4d:cd:5e:f0:e9:07:7b:1e:84:7b:86:a1:20:5c:0c:0d:b0:f5: 7c:c2:23:7d:64:f6:cc:70:9b:60:ec:75:5a:bf:a2:56:62:f4: 47:51:05:ed:ef:bb:fa:4e:17:1a:45:17:23:9e:d3:6e:df:9e: be:93:a3:f3:e6:25:9b:5e:ae:59:2a:97:bc:43:96:a0:fd:35: 1c:5e:3e:d3:03:a3:e9:f5:9a:68:eb:29:e1:11:8a:8c:7c:3b: 78:9a:ea:94:a2:93:18:f5:c1:ec:9d:dc:f3:84:10:39:ee:98: 2c:5a:0b:95:4e:04:27:50:9c:e7:62:2f:a7:c9:3f:46:79:8d: 52:15:43:75:4f:1d:02:8b:3f:92:e2:52:a6:e0:42:be:0c:fa: 7a:33:e6:50:4b:77:34:e9:2a:ee:17:36:99:f7:92:e8:4f:cf: 71:5f:58:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l3VQOLHzXMgmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDE3MmIyZmEtZjUwZC00NDU4LWFhZmYtNmY4YmZiMTcxOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga66X7kl702OUGUmDbb6DEm4u+quqvMX8wZ/ PIhoSu4VGMNmJwZpustkrdBOgbjScvbOZJ1MlWglrp7LFqYb+ZBP4n2dzUmTdnw8 ulhjRvGkoQ+UQKEB/17m+BxOtxQhP/tCn3bLHgTlwRAWrcTiJ3G6i7qGab8vbLNK 8KMcNncDTPyGezD60t91IZ5b2nyjJc1YI2N0Zv7rGP5+zmYCNfUK7QdLzEPoWr2Q 866LVNecj0d3/ytmvmNQshxgukuBbNlul3QpDGvRlZ9N6KJbca9L9aDhsCd9GQxS xVNNFlP075/+OsRCfsk4mqxebXHrlQ/ThofWRY1VGC4hCqDJPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHnhJKP+riTZSLGDG3zXxa59+BnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGExMjhjZTQtMmMwZC0z MGRmLTgxZTItMWU0OGZmYzQ2N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPei0kyhqVgd/WMTRZJn3Axq+SdC8EoPmbr7cJ ES7hNi+gdjmXqbQkndvc5hG9LcUMX40ofkrWdAIRhbfQBybO2Po6j750Cny1zXrr /fIhUeyb5X3Ig+Xr/idNzV7w6Qd7HoR7hqEgXAwNsPV8wiN9ZPbMcJtg7HVav6JW YvRHUQXt77v6ThcaRRcjntNu356+k6Pz5iWbXq5ZKpe8Q5ag/TUcXj7TA6Pp9Zpo 6ynhEYqMfDt4muqUopMY9cHsndzzhBA57pgsWguVTgQnUJznYi+nyT9GeY1SFUN1 Tx0Ciz+S4lKm4EK+DPp6M+ZQS3c06SruFzaZ95LoT89xX1it -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:48 2026 by rpki-client