$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1244a55d-23a8-3bca-a369-bdb9a0d06a30.roa File: 1244a55d-23a8-3bca-a369-bdb9a0d06a30.roa (raw, json) Hash identifier: HZfiIJEOdDcIZgZvBH1CrxiVkH6a5BSLV+Mn+pTRXnU= Subject key identifier: DA:02:35:0C:57:6E:98:DA:C5:7F:CA:5D:B9:C8:78:9F:6B:1B:D3:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B07BC7CC701B0A609E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1244a55d-23a8-3bca-a369-bdb9a0d06a30.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 397205 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:7b:c7:cc:70:1b:0a:60:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=543f284c-e0ec-491f-ad9b-f752bec8d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5e:c4:cd:08:89:66:8a:14:d4:cd:1d:bb:98: 6a:aa:7c:ae:5d:83:3b:8f:81:2f:43:a0:cc:92:a9: 5e:f0:d4:9b:f3:2e:3c:c7:ac:f5:fa:70:1a:f8:87: 9c:7c:94:be:f1:e0:2e:34:ae:88:6a:da:c1:7a:47: 99:de:a5:67:5c:78:ee:30:92:66:0e:01:86:b1:74: b5:8d:40:29:dd:c1:9d:d1:fd:d1:7a:c4:00:4f:29: 55:42:e0:11:34:3f:98:98:eb:4b:84:ad:72:db:8a: 59:14:75:0a:58:9d:c7:1f:0e:62:75:15:7b:d7:91: e2:3f:ca:dd:5b:43:60:f2:96:51:31:68:f7:b1:fa: 07:75:e0:c6:ee:97:45:44:cb:34:f3:75:f3:c0:b1: 61:7f:8f:ae:91:24:e9:e5:35:b9:4e:c0:6b:27:2e: a3:dc:bb:3d:ae:52:6e:fb:2a:36:e3:e6:50:e1:96: bb:bd:39:be:2a:2a:d1:78:09:96:30:91:0f:23:1f: 34:c4:d1:56:11:03:c8:11:17:5d:c4:64:9c:0a:38: 5f:2c:47:49:df:a1:26:34:55:6e:45:d7:21:cd:bd: b6:6c:32:44:d9:71:fc:f6:82:b7:0f:42:bb:1e:f4: 54:1a:aa:3f:ac:6f:10:02:a2:b0:4a:a0:63:fe:b8: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:35:0C:57:6E:98:DA:C5:7F:CA:5D:B9:C8:78:9F:6B:1B:D3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1244a55d-23a8-3bca-a369-bdb9a0d06a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c6:70:d5:f0:5d:6c:ef:1a:d8:56:15:e3:9f:2e:a0:3f:c5: c4:2c:62:33:bb:75:51:f1:d4:af:4a:dd:89:20:81:09:d4:48: c1:6d:f2:66:e8:2b:9f:1f:f9:a2:e9:54:e5:75:15:1c:21:2c: 48:c3:26:5c:ce:24:e7:ec:8d:73:20:fd:4f:46:1f:9d:10:7c: 9e:62:f3:b3:2c:a8:89:09:95:0d:08:dd:6a:78:40:13:20:4a: a7:20:45:36:0e:5e:64:33:7f:d2:92:1c:8a:1e:95:28:c0:2d: 80:cb:32:2c:00:5a:3d:45:b4:61:f9:5a:4f:91:05:1c:f1:43: 31:c7:e1:33:09:7e:41:14:ee:be:b6:6e:23:32:cf:f0:e3:f8: c3:bc:83:68:09:9b:a8:f7:52:9f:91:b1:99:da:5c:ee:1e:cb: e7:ad:e3:7b:8b:ff:cc:bc:0c:b0:c3:70:9e:8a:72:ac:52:7b: e6:2a:d2:02:34:39:69:8d:d8:11:c4:12:8b:9a:99:f2:81:b5: 7c:6e:98:5f:4c:f8:c8:ad:50:50:4e:16:2b:cd:a0:37:c3:79: 3d:31:de:9a:fc:91:d7:29:d9:59:3e:5d:ab:05:2a:2b:d8:14: 66:c9:ad:1e:d5:37:40:7d:e6:f5:87:ce:3f:06:73:0d:e7:d4: 74:6a:09:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bB7x8xwGwpgnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk NTQzZjI4NGMtZTBlYy00OTFmLWFkOWItZjc1MmJlYzhkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7EzQiJZooU1M0du5hqqnyuXYM7j4EvQ6DM kqle8NSb8y48x6z1+nAa+IecfJS+8eAuNK6IatrBekeZ3qVnXHjuMJJmDgGGsXS1 jUAp3cGd0f3ResQATylVQuARND+YmOtLhK1y24pZFHUKWJ3HHw5idRV715HiP8rd W0Ng8pZRMWj3sfoHdeDG7pdFRMs083XzwLFhf4+ukSTp5TW5TsBrJy6j3Ls9rlJu +yo24+ZQ4Za7vTm+KirReAmWMJEPIx80xNFWEQPIERddxGScCjhfLEdJ36EmNFVu Rdchzb22bDJE2XH89oK3D0K7HvRUGqo/rG8QAqKwSqBj/rja2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNoCNQxXbpjaxX/KXbnIeJ9rG9NzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTI0NGE1NWQtMjNhOC0z YmNhLWEzNjktYmRiOWEwZDA2YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/GcNXwXWzvGthWFeOfLqA/xcQsYjO7dVHx1K9K3YkggQnUSMFt 8mboK58f+aLpVOV1FRwhLEjDJlzOJOfsjXMg/U9GH50QfJ5i87MsqIkJlQ0I3Wp4 QBMgSqcgRTYOXmQzf9KSHIoelSjALYDLMiwAWj1FtGH5Wk+RBRzxQzHH4TMJfkEU 7r62biMyz/Dj+MO8g2gJm6j3Up+RsZnaXO4ey+et43uL/8y8DLDDcJ6KcqxSe+Yq 0gI0OWmN2BHEEouamfKBtXxumF9M+MitUFBOFivNoDfDeT0x3pr8kdcp2Vk+XasF KivYFGbJrR7VN0B95vWHzj8Gcw3n1HRqCZE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:00:46 2026 by rpki-client