$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa File: 0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa (raw, json) Hash identifier: VgVFtUeIo6bNuNXYn6uC3LQsDVYz0v/AWCa6DnweLcg= Subject key identifier: 84:1F:3A:E6:1A:2B:EF:E2:E3:45:1E:32:31:2A:18:AE:42:67:76:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D492A773A2F66A68C3F7661F8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 2620:74:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:77:3a:2f:66:a6:8c:3f:76:61:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=737a21d8-b990-467e-b3f8-c383826c8de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:77:f1:c0:aa:34:b3:15:7d:47:bc:fb:99:06: 41:a7:a2:aa:7a:94:56:36:7c:bf:fd:e3:dc:4e:e4: 79:1b:7c:9a:34:06:cd:01:b4:4d:ea:ca:6f:7b:aa: 65:b2:5e:4c:c6:77:48:8f:9b:dc:9c:53:6a:84:ca: 94:5d:7f:a4:1c:53:87:ec:b5:ec:ed:2d:d7:0e:8b: bd:f7:2a:13:b6:c0:10:08:20:2f:28:7b:d9:a1:0f: 64:37:e5:66:b8:ac:ac:a9:07:77:4a:d4:50:d7:f0: 5b:74:84:fd:83:d9:6b:6c:c5:db:ad:de:c7:f7:6d: 36:f8:1c:1c:c2:fe:c4:9c:88:66:29:40:25:22:83: ca:46:f6:ba:a5:73:5f:67:8f:37:b5:10:26:64:10: f8:f5:4e:d0:bd:92:14:56:46:ac:33:3c:01:d8:7b: c2:e9:42:80:07:9f:9e:ca:18:8d:5f:0c:bc:b4:2e: bf:a9:18:50:79:f1:32:87:9b:c2:82:60:54:67:56: 0a:04:49:48:14:45:0a:f1:f3:a4:80:98:a7:e5:ce: 7e:4c:59:39:64:50:f5:6e:87:9e:7b:5b:35:70:70: 00:8b:96:ce:bf:95:bb:70:5a:de:16:b5:bf:61:aa: 68:5d:5f:1d:f4:41:76:b6:57:6e:79:59:0a:86:8e: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:3A:E6:1A:2B:EF:E2:E3:45:1E:32:31:2A:18:AE:42:67:76:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:10:e4:09:f3:4d:49:e5:64:66:dc:1d:c4:7d:79:16:9a:55: 00:b4:cb:f2:e1:16:fb:69:9c:fa:33:ac:c6:6e:6d:a6:d2:2c: a8:e8:e4:21:5e:9d:7b:b3:bc:ae:76:df:b4:20:eb:6c:6a:a1: 8d:13:52:2d:77:3c:28:b8:4e:00:48:2d:80:8a:c9:7d:8f:6e: 83:0e:31:c3:6b:0c:ad:07:b8:64:da:b0:ef:73:10:d9:b6:d0: 49:57:88:b0:c8:81:43:bc:b7:5c:88:cc:e9:c1:dc:69:52:c6: 44:b9:5e:61:68:2b:99:0c:5c:ec:6b:7f:f3:bf:5d:ae:4b:9c: c5:bb:13:2f:ca:37:4a:54:ad:a5:29:a1:ae:8b:99:9f:3c:cb: 42:0f:31:f8:a5:2b:ed:c9:d3:ca:8f:04:83:fb:ed:a1:c6:6e: 47:e5:1e:93:e5:a1:c8:71:1a:1f:f3:07:03:e3:e6:ac:d3:1a: c4:6c:df:6e:49:d4:b5:6b:96:b5:49:55:82:d2:c7:da:63:a4: f2:ee:01:b1:08:24:4f:03:65:c0:63:a9:72:50:ce:26:31:75: 6a:1a:c8:78:8a:4d:73:3b:4c:84:87:9d:89:01:c1:74:bc:a4: 48:db:e4:20:31:33:23:a1:ee:fc:a7:d9:29:5d:f4:af:46:4b: 1d:b4:36:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1JKnc6L2amjD92YfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NzM3YTIxZDgtYjk5MC00NjdlLWIzZjgtYzM4MzgyNmM4ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHfxwKo0sxV9R7z7mQZBp6KqepRWNny//ePc TuR5G3yaNAbNAbRN6spve6plsl5MxndIj5vcnFNqhMqUXX+kHFOH7LXs7S3XDou9 9yoTtsAQCCAvKHvZoQ9kN+VmuKysqQd3StRQ1/BbdIT9g9lrbMXbrd7H9202+Bwc wv7EnIhmKUAlIoPKRva6pXNfZ483tRAmZBD49U7QvZIUVkasMzwB2HvC6UKAB5+e yhiNXwy8tC6/qRhQefEyh5vCgmBUZ1YKBElIFEUK8fOkgJin5c5+TFk5ZFD1boee e1s1cHAAi5bOv5W7cFreFrW/YapoXV8d9EF2tldueVkKho78zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQfOuYaK+/i40UeMjEqGK5CZ3Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNhZDJkOTktNGI1ZC0z ZjNkLTg3M2UtOTY5NGE2ZjViZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACoQ5AnzTUnlZGbcHcR9eRaaVQC0y/LhFvtpnPozrMZubabSLKjo 5CFenXuzvK5237Qg62xqoY0TUi13PCi4TgBILYCKyX2PboMOMcNrDK0HuGTasO9z ENm20ElXiLDIgUO8t1yIzOnB3GlSxkS5XmFoK5kMXOxrf/O/Xa5LnMW7Ey/KN0pU raUpoa6LmZ88y0IPMfilK+3J08qPBIP77aHGbkflHpPlochxGh/zBwPj5qzTGsRs 325J1LVrlrVJVYLSx9pjpPLuAbEIJE8DZcBjqXJQziYxdWoayHiKTXM7TISHnYkB wXS8pEjb5CAxMyOh7vyn2Sld9K9GSx20NvU= -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:54 2026 by rpki-client