$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa File: 125825cb-4616-3038-8492-1ab7b635d97e.roa (raw, json) Hash identifier: JAAoa1F73q4XAlJU0uAnIpMQmrtrkcRagGjwEhA6FVg= Subject key identifier: FC:DC:16:A2:44:F7:31:99:C8:73:E7:97:B6:1E:D8:25:95:9E:9B:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA50A2512679F5BB893A60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396587 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:50:a2:51:26:79:f5:bb:89:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=7581f6be-6b9a-4d48-b25c-245ee1864780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cc:0d:21:09:34:ce:44:ec:64:30:7b:c3:2d: 5e:3c:4c:07:6e:41:b4:c8:36:67:ab:c5:6e:5c:f5: 0d:56:87:d9:0a:56:07:68:91:8a:8c:ed:5e:09:2c: 21:8c:fb:4c:69:44:15:71:cf:3b:d7:af:1a:9c:a4: 6b:c2:93:f9:18:2f:14:2b:91:2f:e2:c0:fb:7e:e7: 7d:ae:7a:c0:83:21:e6:4a:f3:07:89:3b:a0:12:6f: a8:c7:e3:94:a1:08:78:d3:78:9b:e1:2d:ec:fe:b6: 84:91:43:fc:a7:fb:aa:6f:67:ab:07:4d:cb:9d:ae: 3e:5a:40:a6:c1:77:0d:50:c6:4d:28:98:88:f6:4e: 4b:6e:f4:4e:6f:da:0c:d5:2d:af:84:f3:d9:c6:f7: cd:14:80:69:c1:57:fd:15:ca:57:a6:8d:34:58:ac: b4:f8:77:eb:2c:91:1e:76:75:d6:bc:39:83:e1:c5: 09:aa:02:18:c5:60:b9:07:5e:bf:ee:ee:72:21:6e: a8:f5:2d:2c:84:18:da:18:46:ef:8a:e8:ed:21:2e: 28:61:5e:1f:f2:f8:41:b4:a6:7e:70:02:28:4f:b5: 93:4e:76:08:23:dc:59:63:bb:77:99:3d:c1:e4:65: 68:5f:63:bd:3d:47:aa:39:a0:79:96:01:6c:d9:8d: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:16:A2:44:F7:31:99:C8:73:E7:97:B6:1E:D8:25:95:9E:9B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/125825cb-4616-3038-8492-1ab7b635d97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:db:7a:65:d2:79:72:49:12:3e:7c:7e:5c:02:c3:87:82: d7:33:f8:40:13:4c:7a:d3:0d:60:df:a6:ad:a2:06:c8:09:5d: f4:31:dc:26:d7:e6:96:a8:d7:d9:bc:24:49:75:8a:c3:cf:58: 67:7d:f8:dc:36:da:ff:b6:75:c2:7c:f7:bf:98:9d:7c:ef:e1: a3:67:aa:68:f9:23:23:00:72:04:e8:a6:91:bc:9a:07:e8:d7: c5:81:2a:2d:a3:7b:59:e3:f8:fb:71:26:87:c5:f3:df:8c:d1: 88:54:62:36:74:9b:df:85:db:bc:59:fa:a0:51:00:ad:ff:a3: 0b:4f:c3:f2:b7:bd:36:22:ab:b9:d5:54:19:cd:6a:07:30:ee: 39:c4:8f:2a:25:8e:ea:c1:61:16:03:71:65:29:57:ff:70:71: f9:99:3e:55:66:c6:ac:7a:38:f4:9f:c7:e7:82:cb:cb:2c:3d: 96:2c:7e:64:fb:90:b4:35:ab:64:c6:f6:2a:42:53:88:64:24: 17:b3:4b:99:dd:cf:bc:58:bf:25:d7:d7:e6:f0:b0:7d:63:9a: 9a:9c:ee:5b:10:92:43:80:8f:18:29:09:49:1c:8e:09:67:90: 16:47:e7:a9:34:cb:42:e3:5d:63:2e:ed:ce:96:53:3c:30:c5: 6c:27:30:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lCiUSZ59buJOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzU4MWY2YmUtNmI5YS00ZDQ4LWIyNWMtMjQ1ZWUxODY0NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcwNIQk0zkTsZDB7wy1ePEwHbkG0yDZnq8Vu XPUNVofZClYHaJGKjO1eCSwhjPtMaUQVcc87168anKRrwpP5GC8UK5Ev4sD7fud9 rnrAgyHmSvMHiTugEm+ox+OUoQh403ib4S3s/raEkUP8p/uqb2erB03Lna4+WkCm wXcNUMZNKJiI9k5LbvROb9oM1S2vhPPZxvfNFIBpwVf9FcpXpo00WKy0+HfrLJEe dnXWvDmD4cUJqgIYxWC5B16/7u5yIW6o9S0shBjaGEbviujtIS4oYV4f8vhBtKZ+ cAIoT7WTTnYII9xZY7t3mT3B5GVoX2O9PUeqOaB5lgFs2Y2MGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPzcFqJE9zGZyHPnl7Ye2CWVnptoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTI1ODI1Y2ItNDYxNi0z MDM4LTg0OTItMWFiN2I2MzVkOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3Ott6ZdJ5ckkSPnx+XALDh4LXM/hAE0x60w1g 36atogbICV30Mdwm1+aWqNfZvCRJdYrDz1hnffjcNtr/tnXCfPe/mJ187+GjZ6po +SMjAHIE6KaRvJoH6NfFgSoto3tZ4/j7cSaHxfPfjNGIVGI2dJvfhdu8WfqgUQCt /6MLT8Pyt702Iqu51VQZzWoHMO45xI8qJY7qwWEWA3FlKVf/cHH5mT5VZsasejj0 n8fngsvLLD2WLH5k+5C0NatkxvYqQlOIZCQXs0uZ3c+8WL8l19fm8LB9Y5qanO5b EJJDgI8YKQlJHI4JZ5AWR+epNMtC411jLu3OllM8MMVsJzAD -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:10 2026 by rpki-client