$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1060fd75-9c85-3248-b08b-a412408f4451.roa File: 1060fd75-9c85-3248-b08b-a412408f4451.roa (raw, json) Hash identifier: Wc1hD6Rmql+qJ2JGiOzTDlMVJ/CqH5vtJxYschnAmrU= Subject key identifier: D2:DC:8B:C6:5B:09:58:72:F8:DC:BA:65:81:DB:DF:38:5A:27:2C:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5502DCC36D0D6B11A280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1060fd75-9c85-3248-b08b-a412408f4451.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 25485 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:55:02:dc:c3:6d:0d:6b:11:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e007a9cf-4cee-43b9-b399-d5cca97e9cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:8d:b0:28:48:6e:94:2c:3d:2f:92:c6:90: 90:90:60:51:40:4f:4e:6a:7b:49:fe:70:33:1b:69: d3:67:5d:48:3b:45:fc:68:dc:49:09:e8:87:15:c4: bf:89:f8:55:92:b7:a7:2b:96:ac:06:0b:03:ee:d2: 8e:b1:af:f0:0a:67:15:62:8e:27:94:5f:02:dd:17: 36:c2:01:40:75:45:71:e2:10:60:e8:69:01:56:de: b2:52:cb:53:18:b8:1b:2e:6f:cf:50:33:57:e4:f2: d5:83:89:e1:90:c6:18:67:e7:47:cf:d3:db:a8:e9: 13:16:48:24:98:94:97:d6:36:e4:b9:ed:24:f5:36: 09:e1:c9:6f:70:fa:10:86:12:c6:31:23:4d:85:23: 8e:04:04:ea:c2:9a:cc:15:bc:96:04:ca:4d:3e:1e: a8:32:8e:51:db:c3:65:8b:e7:90:dd:ad:26:29:f4: 8a:4b:15:b9:dd:e6:99:a3:04:59:0f:04:e6:20:d2: 5c:e4:0f:62:1e:2c:34:73:db:bb:91:f9:f3:1e:6e: 44:db:a3:74:c8:a3:24:0f:92:0f:26:72:6a:54:16: 02:6d:c4:ac:03:83:78:10:c5:67:f5:d7:c4:d7:bd: 27:5e:70:b2:3c:6e:7c:81:b1:d3:c5:e7:21:26:74: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:8B:C6:5B:09:58:72:F8:DC:BA:65:81:DB:DF:38:5A:27:2C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1060fd75-9c85-3248-b08b-a412408f4451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fe:ab:65:18:02:6f:11:c0:65:9a:60:01:62:0a:1f:e6:f3: d8:b9:28:bf:02:40:42:19:e1:c6:f6:15:4a:69:c9:93:30:c5: 90:79:9f:fb:78:47:3b:60:26:8c:f1:dd:bc:ee:d1:8f:30:d9: 80:4f:18:19:10:68:6a:f9:fa:23:5c:92:a3:1d:5e:53:01:60: 8e:5f:70:95:56:e8:0b:09:ad:a2:e9:5d:2d:bd:94:ed:8c:83: 1e:d6:93:6b:eb:4f:02:1f:72:01:d1:a2:25:74:86:27:b1:8c: c7:50:ed:3e:f7:e8:9f:42:10:55:a9:57:68:0f:9a:65:d0:d5: 40:8a:dd:19:e9:77:75:7a:fa:3a:d9:d8:fb:48:26:7e:b3:b4: e8:e3:49:bc:9f:02:44:f9:fd:11:33:1c:33:90:33:b2:41:49: 6f:14:7c:17:e3:50:68:ee:f8:22:ab:8d:0b:a0:9c:a1:b5:d9: 64:66:fa:9c:fb:84:74:8c:a0:7d:fa:89:66:97:fb:e2:8c:0c: 79:87:8c:68:9e:84:70:cb:4c:dc:53:f2:fa:0c:96:bc:82:30: a5:25:0e:26:f8:11:8f:18:ff:a1:45:5a:01:0a:2c:b3:9e:20: 71:16:4c:ab:1e:c6:ee:af:fe:1d:38:82:04:4a:26:ec:91:37: ee:1d:7a:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lUC3MNtDWsRooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTAwN2E5Y2YtNGNlZS00M2I5LWIzOTktZDVjY2E5N2U5Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmuNsChIbpQsPS+SxpCQkGBRQE9OantJ/nAz G2nTZ11IO0X8aNxJCeiHFcS/ifhVkrenK5asBgsD7tKOsa/wCmcVYo4nlF8C3Rc2 wgFAdUVx4hBg6GkBVt6yUstTGLgbLm/PUDNX5PLVg4nhkMYYZ+dHz9PbqOkTFkgk mJSX1jbkue0k9TYJ4clvcPoQhhLGMSNNhSOOBATqwprMFbyWBMpNPh6oMo5R28Nl i+eQ3a0mKfSKSxW53eaZowRZDwTmINJc5A9iHiw0c9u7kfnzHm5E26N0yKMkD5IP JnJqVBYCbcSsA4N4EMVn9dfE170nXnCyPG58gbHTxechJnSUAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNLci8ZbCVhy+Ny6ZYHb3zhaJyzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTA2MGZkNzUtOWM4NS0z MjQ4LWIwOGItYTQxMjQwOGY0NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBw/qtlGAJvEcBlmmABYgof5vPYuSi/AkBCGeHG 9hVKacmTMMWQeZ/7eEc7YCaM8d287tGPMNmATxgZEGhq+fojXJKjHV5TAWCOX3CV VugLCa2i6V0tvZTtjIMe1pNr608CH3IB0aIldIYnsYzHUO0+9+ifQhBVqVdoD5pl 0NVAit0Z6Xd1evo62dj7SCZ+s7To40m8nwJE+f0RMxwzkDOyQUlvFHwX41Bo7vgi q40LoJyhtdlkZvqc+4R0jKB9+olml/vijAx5h4xonoRwy0zcU/L6DJa8gjClJQ4m +BGPGP+hRVoBCiyzniBxFkyrHsbur/4dOIIESibskTfuHXoF -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:13 2026 by rpki-client