$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa File: 1487c29f-5570-325d-82af-e15061a6002b.roa (raw, json) Hash identifier: VIeaCnkp5QfZbroGkLNFUPQQQ61rL06994T72PAiwmA= Subject key identifier: 35:25:EA:5A:97:5F:AC:59:F1:74:DB:79:0E:FA:CC:6A:E1:05:F0:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A5A0FBA92D60480C99380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397195 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5a:0f:ba:92:d6:04:80:c9:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6fcf5734-70cb-4b96-99a8-72217798b795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:2f:53:9a:94:e7:be:5a:4d:7a:b9:6f:ec: b7:ff:89:10:65:f3:96:55:f8:30:aa:b6:20:c8:d0: fc:c0:33:a1:8b:e6:25:3d:8d:b6:ee:5c:0a:d5:02: d4:8b:df:32:27:55:85:db:d9:ad:d5:d2:a7:bc:c2: 80:c8:4c:18:cb:19:f5:48:e1:7d:6e:ca:c7:ea:3f: da:ab:88:42:6a:29:a8:28:f1:94:15:72:c0:8e:5e: cc:81:2a:55:d9:63:7a:4c:9e:94:67:65:1b:63:6f: 5d:18:3f:10:23:c4:57:28:f0:1f:81:65:d1:74:67: ba:7a:dd:ba:75:af:30:4c:c8:f8:d1:50:c7:31:ee: 60:da:a5:49:32:79:ab:f8:e6:81:60:f8:ad:f3:71: 6e:1b:57:a2:46:2a:3d:2a:98:b7:d9:9d:7e:06:fb: 95:5a:6f:e4:1b:21:0a:97:1e:92:22:f0:60:f8:9e: f2:25:dd:d6:a7:49:86:6b:be:11:e3:c8:a3:5d:2c: 67:8a:7b:fd:6c:05:7b:74:7e:26:a0:1e:e3:45:4a: 24:e6:52:9e:f4:c1:3c:fb:8b:b1:a3:5a:54:33:41: 77:76:92:ab:e4:5c:3f:6e:f4:55:a9:ec:7f:d4:14: 0a:9e:ef:22:51:1f:ae:27:11:f8:0d:12:8c:98:4e: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:25:EA:5A:97:5F:AC:59:F1:74:DB:79:0E:FA:CC:6A:E1:05:F0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:46:f0:55:6a:d7:3f:e2:bf:c5:3d:c4:ba:81:79:f5:70:4d: 18:27:bc:d8:f3:8c:f4:48:83:e9:af:2b:47:74:f0:38:8a:a2: b4:63:a3:7e:c6:71:75:7d:b4:b2:ca:25:d0:21:f6:ea:5f:b4: f5:55:d4:0c:40:f8:e5:b8:57:e9:31:02:4d:c9:42:98:5a:80: f4:cc:1d:cc:e8:6c:31:9b:69:8b:17:6d:dd:18:9b:13:77:39: 1e:63:78:46:5f:41:62:06:ed:ea:95:6e:78:69:b7:a9:4f:a9: 76:ba:4f:ce:e9:44:a7:88:52:3e:de:26:3f:6d:09:3a:ca:47: fd:4e:d4:ab:7a:a2:44:f8:e6:cd:5e:88:1f:70:5e:89:2d:c3: 4a:0d:99:53:5f:e5:c8:7f:3e:83:26:7e:37:b2:8c:99:49:01: 4f:7a:51:f2:e9:b9:b1:5a:57:b0:0e:e0:e3:ec:9a:91:20:65: 6a:c4:4d:3c:00:7f:cb:95:02:4b:6e:ad:23:3c:09:b0:98:33: 95:e9:9c:ec:db:16:ff:f6:5a:ed:24:d0:c4:13:ef:30:b4:ce: 51:8f:b5:89:d1:c5:84:5f:07:d8:56:37:80:51:15:52:99:1f: 79:2a:97:d8:a2:83:9a:47:d2:ed:91:ce:8a:e1:89:77:df:a6: bf:5b:71:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeloPupLWBIDJk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmZjZjU3MzQtNzBjYi00Yjk2LTk5YTgtNzIyMTc3OThiNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/EvU5qU575aTXq5b+y3/4kQZfOWVfgwqrYg yND8wDOhi+YlPY227lwK1QLUi98yJ1WF29mt1dKnvMKAyEwYyxn1SOF9bsrH6j/a q4hCaimoKPGUFXLAjl7MgSpV2WN6TJ6UZ2UbY29dGD8QI8RXKPAfgWXRdGe6et26 da8wTMj40VDHMe5g2qVJMnmr+OaBYPit83FuG1eiRio9Kpi32Z1+BvuVWm/kGyEK lx6SIvBg+J7yJd3Wp0mGa74R48ijXSxninv9bAV7dH4moB7jRUok5lKe9ME8+4ux o1pUM0F3dpKr5Fw/bvRVqex/1BQKnu8iUR+uJxH4DRKMmE4BQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDUl6lqXX6xZ8XTbeQ76zGrhBfBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ4N2MyOWYtNTU3MC0z MjVkLTgyYWYtZTE1MDYxYTYwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdG8FVq1z/iv8U9xLqBefVwTRgnvNjzjPRIg+mvK0d08DiKorRj o37GcXV9tLLKJdAh9upftPVV1AxA+OW4V+kxAk3JQphagPTMHczobDGbaYsXbd0Y mxN3OR5jeEZfQWIG7eqVbnhpt6lPqXa6T87pRKeIUj7eJj9tCTrKR/1O1Kt6okT4 5s1eiB9wXoktw0oNmVNf5ch/PoMmfjeyjJlJAU96UfLpubFaV7AO4OPsmpEgZWrE TTwAf8uVAkturSM8CbCYM5XpnOzbFv/2Wu0k0MQT7zC0zlGPtYnRxYRfB9hWN4BR FVKZH3kql9iig5pH0u2RzorhiXffpr9bcSA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:41 2026 by rpki-client