$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13cae92f-2602-3712-a1c4-ae06db4c99a9.roa File: 13cae92f-2602-3712-a1c4-ae06db4c99a9.roa (raw, json) Hash identifier: hYHeW5YRtrYsvdQd5ML/T2CRG5Kt8dE+5gZLHPlfORI= Subject key identifier: 43:80:A4:71:87:E9:99:1C:20:16:6C:05:8E:E5:85:4D:06:43:25:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B095CE498DB6D0CC7800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13cae92f-2602-3712-a1c4-ae06db4c99a9.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396585 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:95:ce:49:8d:b6:d0:cc:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=d48d18fd-cd11-4843-843c-f122d8641687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:3d:80:18:df:28:5c:9a:d5:e5:5e:62:f4: 8a:19:95:36:74:28:a1:3c:00:09:ef:d3:c9:4c:49: 2e:1f:3f:5d:b4:59:3d:ac:bc:99:07:21:75:0f:30: ea:ca:b4:e8:6e:21:69:88:37:c9:65:37:35:2b:29: 2c:11:ba:97:d6:6e:2f:03:73:4f:9e:0c:b7:57:ff: 4b:3b:93:1a:6a:89:28:05:03:d7:14:19:13:8d:b1: bd:8a:2c:74:79:09:fa:de:5f:82:93:6a:0a:66:e9: f8:21:85:93:a5:e5:1f:1e:f3:04:e3:b0:d5:97:95: 69:db:e5:6d:20:dc:f2:49:80:92:b2:01:24:aa:38: 87:88:84:89:f6:03:c0:52:c0:5e:78:2f:96:08:4f: 5b:53:96:44:f6:76:6e:00:7b:71:2b:73:0c:78:a6: c1:e9:27:72:dc:b3:23:6a:09:00:ff:fe:6b:f3:10: 66:75:88:c7:c1:35:a5:32:66:0e:b2:e4:f4:9d:63: 7d:ba:38:09:ec:e4:28:03:99:5e:13:bf:21:f2:95: a7:21:3f:fd:02:d5:f3:1b:a6:38:d3:a5:f3:12:df: c2:79:d3:2c:0d:ec:00:c7:a6:68:af:c5:f4:74:01: 34:d6:ce:e8:70:9e:49:24:c8:b3:84:67:1d:2d:98: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:80:A4:71:87:E9:99:1C:20:16:6C:05:8E:E5:85:4D:06:43:25:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13cae92f-2602-3712-a1c4-ae06db4c99a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:25:a0:5c:1f:02:74:44:7c:0c:d0:b8:0c:0d:bb:91:1e:90: f7:8e:64:a7:44:b2:28:c2:76:f5:27:0f:14:6a:8e:af:09:f3: 5d:02:2d:db:be:c9:4f:30:a7:0d:ab:59:33:97:57:10:68:3c: e4:eb:30:85:a2:bb:8e:d4:ef:83:7b:4b:fd:37:0f:e0:75:5f: b3:4b:c2:81:40:e4:a1:a0:ab:03:a7:ca:26:1a:58:a8:49:8b: eb:1e:0b:10:83:46:84:5c:ea:40:9c:db:56:35:62:ae:8d:25: ad:62:a3:54:52:48:f4:5e:6b:40:98:f5:be:f0:3b:5e:f7:b2: 96:f1:d6:86:86:b4:88:02:83:ea:d0:ab:0a:76:d2:db:1a:b5: 04:a8:c9:88:68:ed:5c:ae:c2:db:bc:8c:42:55:12:0f:c4:09: dd:6b:c2:0b:cd:41:8e:1e:86:7c:27:23:de:37:2b:0c:77:87: df:ae:15:d8:2c:5c:08:55:f6:48:3b:13:d2:89:5a:04:26:21: df:53:cb:bf:05:7f:97:e0:39:eb:d2:5b:5f:90:70:f5:27:4a: b8:67:cd:82:a0:91:50:2d:7c:1f:9f:0f:11:a8:93:30:a6:18: f2:f7:36:c0:02:a4:64:c2:bd:37:9b:cf:e8:9c:4e:be:a9:b0: 1c:79:4c:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bCVzkmNttDMeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk ZDQ4ZDE4ZmQtY2QxMS00ODQzLTg0M2MtZjEyMmQ4NjQxNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW09gBjfKFya1eVeYvSKGZU2dCihPAAJ79PJ TEkuHz9dtFk9rLyZByF1DzDqyrTobiFpiDfJZTc1KyksEbqX1m4vA3NPngy3V/9L O5MaaokoBQPXFBkTjbG9iix0eQn63l+Ck2oKZun4IYWTpeUfHvME47DVl5Vp2+Vt INzySYCSsgEkqjiHiISJ9gPAUsBeeC+WCE9bU5ZE9nZuAHtxK3MMeKbB6Sdy3LMj agkA//5r8xBmdYjHwTWlMmYOsuT0nWN9ujgJ7OQoA5leE78h8pWnIT/9AtXzG6Y4 06XzEt/CedMsDewAx6Zor8X0dAE01s7ocJ5JJMizhGcdLZjd6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOApHGH6ZkcIBZsBY7lhU0GQyVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTNjYWU5MmYtMjYwMi0z NzEyLWExYzQtYWUwNmRiNGM5OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEkloFwfAnREfAzQuAwNu5EekPeOZKdEsijCdvUnDxRqjq8J810C Ldu+yU8wpw2rWTOXVxBoPOTrMIWiu47U74N7S/03D+B1X7NLwoFA5KGgqwOnyiYa WKhJi+seCxCDRoRc6kCc21Y1Yq6NJa1io1RSSPRea0CY9b7wO173spbx1oaGtIgC g+rQqwp20tsatQSoyYho7Vyuwtu8jEJVEg/ECd1rwgvNQY4ehnwnI943Kwx3h9+u FdgsXAhV9kg7E9KJWgQmId9Ty78Ff5fgOevSW1+QcPUnSrhnzYKgkVAtfB+fDxGo kzCmGPL3NsACpGTCvTebz+icTr6psBx5TCc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:00:04 2026 by rpki-client