$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa File: 119fb2ce-88e5-3b28-96cf-003362526716.roa (raw, json) Hash identifier: mhjirVJeedCai/nRVWfWz5jiSa5wqVzKFUfJLmXgVKs= Subject key identifier: 34:2B:66:F7:59:2B:64:02:0B:76:00:EE:76:15:0D:AA:6E:EA:B9:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A1F8669B5F12BCA109640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20362 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1f:86:69:b5:f1:2b:ca:10:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7c59f0fb-ee1b-4aa7-beb2-c6e5149dbba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:f3:65:95:7c:1d:6f:23:47:0c:14:3c:e9: b8:8f:6e:1f:6e:3f:ca:87:1e:23:5d:9f:b3:b6:e2: 59:55:e0:78:8a:56:1b:f1:ee:c6:68:2b:ac:eb:a8: df:4f:ed:c5:8b:05:2c:b7:f9:cc:42:a1:5d:cd:91: c6:6f:00:63:f6:ec:31:6e:88:78:fa:60:31:70:ca: 61:5b:d1:6b:d2:99:f4:f1:cd:ca:fd:b6:0e:81:82: 70:f0:33:63:eb:07:81:95:ae:a3:52:6b:fd:08:fc: 0f:00:cb:d5:86:4e:bc:57:4c:e5:c4:5d:1d:a1:33: e1:0a:57:39:97:5a:97:b9:6c:5c:19:72:ae:62:6a: 1f:4c:1a:02:a1:a7:df:20:7f:99:e0:32:ae:ec:f3: 21:a2:b4:31:eb:93:13:69:2d:eb:b7:6f:26:ee:49: 26:ec:7c:c5:e9:5a:0a:8b:fa:32:dd:99:07:91:69: 4d:b1:8b:e2:4a:86:cf:5a:2f:d2:9b:3e:a2:5c:f0: 31:bd:f0:3b:66:5b:2d:84:5e:0a:5b:89:e6:c1:34: 4d:e7:d4:90:db:07:9d:85:c5:ae:2b:68:8f:0c:3d: 4c:5a:33:06:4f:9f:7f:1a:a8:06:15:ad:2c:d9:63: c5:7e:72:79:88:e3:44:eb:89:30:1d:ac:b7:84:8e: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:66:F7:59:2B:64:02:0B:76:00:EE:76:15:0D:AA:6E:EA:B9:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:08:d5:b7:86:96:d6:db:e5:9e:e1:2b:41:e1:a5:50:d4:60: 4f:8b:2e:ae:d2:f9:d0:6a:ac:55:00:8d:d7:f2:db:3f:02:bc: 19:c8:bb:31:b3:9b:ff:2f:a2:68:55:a5:86:94:57:df:d0:ff: 50:90:1b:45:ce:a1:c4:cf:64:9f:a1:24:f2:7b:24:8d:a5:e3: 4f:39:aa:90:61:5b:17:da:25:dd:dc:25:b1:76:dd:e8:14:f4: 31:fe:d2:be:97:b1:0f:e5:6f:66:b4:4e:0b:92:d7:56:86:aa: 8e:0e:5c:df:24:fa:85:04:c7:ec:20:c0:e5:3c:9d:09:c3:3c: b3:8b:4e:2f:2f:24:d1:db:0a:d0:a5:7c:c5:0f:67:6c:c8:94: 1d:c0:b3:95:22:46:96:7a:4e:6e:6e:cb:2b:bb:1a:20:b0:ac: 0e:57:f7:bc:2e:bd:1d:3d:f1:d8:24:15:01:c1:eb:66:88:69: 53:76:82:82:aa:14:c9:f8:cc:17:29:6d:05:a0:89:56:26:f6: c9:99:62:73:59:35:18:b2:e4:38:27:8e:ff:4e:47:25:77:7b: 02:8d:14:79:4a:e8:73:ed:87:28:4b:8d:27:5d:3c:b9:ca:d3: 6d:55:f4:ff:f1:57:ac:3c:97:9e:87:94:fa:0f:a9:1e:e7:af: 46:e8:10:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeh+GabXxK8oQlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2M1OWYwZmItZWUxYi00YWE3LWJlYjItYzZlNTE0OWRiYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhPzZZV8HW8jRwwUPOm4j24fbj/Khx4jXZ+z tuJZVeB4ilYb8e7GaCus66jfT+3FiwUst/nMQqFdzZHGbwBj9uwxboh4+mAxcMph W9Fr0pn08c3K/bYOgYJw8DNj6weBla6jUmv9CPwPAMvVhk68V0zlxF0doTPhClc5 l1qXuWxcGXKuYmofTBoCoaffIH+Z4DKu7PMhorQx65MTaS3rt28m7kkm7HzF6VoK i/oy3ZkHkWlNsYviSobPWi/Smz6iXPAxvfA7ZlsthF4KW4nmwTRN59SQ2wedhcWu K2iPDD1MWjMGT59/GqgGFa0s2WPFfnJ5iONE64kwHay3hI6A1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQrZvdZK2QCC3YA7nYVDapu6rm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE5ZmIyY2UtODhlNS0z YjI4LTk2Y2YtMDAzMzYyNTI2NzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkI1beGltbb5Z7hK0HhpVDUYE+LLq7S+dBqrFUAjdfy2z8CvBnI uzGzm/8vomhVpYaUV9/Q/1CQG0XOocTPZJ+hJPJ7JI2l4085qpBhWxfaJd3cJbF2 3egU9DH+0r6XsQ/lb2a0TguS11aGqo4OXN8k+oUEx+wgwOU8nQnDPLOLTi8vJNHb CtClfMUPZ2zIlB3As5UiRpZ6Tm5uyyu7GiCwrA5X97wuvR098dgkFQHB62aIaVN2 goKqFMn4zBcpbQWgiVYm9smZYnNZNRiy5Dgnjv9ORyV3ewKNFHlK6HPthyhLjSdd PLnK021V9P/xV6w8l56HlPoPqR7nr0boEH4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:49 2026 by rpki-client