$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/188970db-c43d-32c0-8846-55cdeca7339f.roa File: 188970db-c43d-32c0-8846-55cdeca7339f.roa (raw, json) Hash identifier: uKriKQcjh2xgunuRdJUiBjL0Ct0ih+sms9xQJjl8RLY= Subject key identifier: 6B:9F:48:86:00:91:38:A3:36:52:13:AA:2A:DE:F9:0F:42:17:F7:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5ADFEED0D691A399A6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/188970db-c43d-32c0-8846-55cdeca7339f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397205 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5a:df:ee:d0:d6:91:a3:99:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a44b1f53-4299-4119-acf7-23f27bc1dc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:97:9c:48:00:07:32:ad:4c:ea:d3:3e:ea: 74:a3:64:d9:15:b8:f2:2c:80:53:65:42:01:6a:be: 19:5b:9c:b4:4c:da:20:f0:0e:36:5a:23:c1:e0:95: bc:06:b7:b8:25:20:47:19:7a:a2:4f:42:98:76:93: 4b:0c:03:13:d2:37:7c:ce:ec:81:25:44:96:6b:da: 31:c1:08:fe:86:66:ee:31:b3:80:57:ec:5a:2e:13: b4:de:42:48:6c:0e:c2:32:10:43:e2:7d:93:80:af: 98:4f:49:18:5c:d8:80:d5:12:c3:fe:ab:c9:d7:01: 26:82:0b:17:bf:95:6c:de:4e:f6:22:f6:c8:1b:5c: 49:4c:32:d0:19:ae:63:47:78:d3:43:9b:53:2b:61: 69:1b:00:70:ac:61:57:a4:dd:23:5f:64:3c:1f:e6: ef:57:07:08:01:48:65:b0:58:74:8c:bc:91:63:66: 06:fd:89:1b:6f:53:40:2d:54:3d:9b:1a:d4:d5:95: 0a:5a:de:76:90:be:5f:40:e5:ca:48:7a:ef:63:17: 17:d3:9d:c0:39:4b:6d:bb:99:f8:69:f1:c0:9f:e0: 43:4b:c1:d6:eb:e3:55:d7:4d:43:e5:52:6b:34:f3: aa:75:10:56:07:35:50:80:90:f9:6c:25:c6:19:8e: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9F:48:86:00:91:38:A3:36:52:13:AA:2A:DE:F9:0F:42:17:F7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/188970db-c43d-32c0-8846-55cdeca7339f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8e:ce:78:0b:c7:c2:a0:98:d6:ef:ff:23:f5:c2:b9:89:87: 8f:d0:04:e0:87:33:11:1f:07:69:80:a8:44:26:9a:4d:53:80: 03:ed:51:21:69:ce:da:e2:6c:bb:ca:fc:a4:9b:b5:c6:27:a6: 18:c3:ff:31:15:aa:c5:d7:06:e9:45:57:b4:64:bd:cb:07:86: ce:b6:76:4d:f1:be:2d:ec:f6:55:75:33:ac:28:86:b2:78:f7: b0:eb:f3:3c:da:a6:02:6c:1d:8e:3d:e6:39:4e:97:ab:f2:12: 0c:b8:73:4f:65:30:07:9d:10:8b:c7:42:c1:25:98:ff:f1:4c: 40:ef:25:12:75:41:75:0b:48:1b:22:9c:6d:c3:84:b9:ca:91: e9:6f:96:73:6c:54:8a:02:fd:a1:35:3f:c5:d5:d3:d3:54:e3: e7:0c:e7:eb:57:c3:db:90:6d:0c:73:c7:88:4e:51:33:78:b8: c0:78:5c:aa:df:41:90:92:34:50:7a:46:25:0d:de:89:d5:0b: 63:1d:9b:4b:cf:57:86:e7:a8:10:65:73:2b:6a:19:de:da:07: 08:a8:75:df:17:be:c6:0d:75:f4:cb:22:92:73:50:be:72:43: 30:e2:14:6d:12:83:8b:3a:5d:36:33:b2:c8:6d:aa:11:f9:11: 43:89:fc:31 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lrf7tDWkaOZpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTQ0YjFmNTMtNDI5OS00MTE5LWFjZjctMjNmMjdiYzFkYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNCXnEgABzKtTOrTPup0o2TZFbjyLIBTZUIB ar4ZW5y0TNog8A42WiPB4JW8Bre4JSBHGXqiT0KYdpNLDAMT0jd8zuyBJUSWa9ox wQj+hmbuMbOAV+xaLhO03kJIbA7CMhBD4n2TgK+YT0kYXNiA1RLD/qvJ1wEmggsX v5Vs3k72IvbIG1xJTDLQGa5jR3jTQ5tTK2FpGwBwrGFXpN0jX2Q8H+bvVwcIAUhl sFh0jLyRY2YG/Ykbb1NALVQ9mxrU1ZUKWt52kL5fQOXKSHrvYxcX053AOUttu5n4 afHAn+BDS8HW6+NV101D5VJrNPOqdRBWBzVQgJD5bCXGGY7dAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGufSIYAkTijNlITqire+Q9CF/cwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg4OTcwZGItYzQzZC0z MmMwLTg4NDYtNTVjZGVjYTczMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAZjs54C8fCoJjW7/8j9cK5iYeP0ATghzMRHwdp gKhEJppNU4AD7VEhac7a4my7yvykm7XGJ6YYw/8xFarF1wbpRVe0ZL3LB4bOtnZN 8b4t7PZVdTOsKIayePew6/M82qYCbB2OPeY5Tper8hIMuHNPZTAHnRCLx0LBJZj/ 8UxA7yUSdUF1C0gbIpxtw4S5ypHpb5ZzbFSKAv2hNT/F1dPTVOPnDOfrV8PbkG0M c8eITlEzeLjAeFyq30GQkjRQekYlDd6J1QtjHZtLz1eG56gQZXMrahne2gcIqHXf F77GDXX0yyKSc1C+ckMw4hRtEoOLOl02M7LIbaoR+RFDifwx -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:12 2026 by rpki-client