$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa File: 1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa (raw, json) Hash identifier: /alsid8zDnd6EvklkK2MkTJlWwPrlGKfU01/uougpnc= Subject key identifier: FB:7F:AC:36:98:95:9A:80:F2:FB:74:1A:CE:F3:C3:44:20:A3:4E:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8C13D27B78F363CB6800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396551 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8c:13:d2:7b:78:f3:63:cb:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f117c9e3-dd5f-40af-bb9f-3c9382be66b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:e4:88:05:45:b7:74:b5:10:8a:8b:09:12: 88:85:75:59:b4:b8:ce:b9:e7:04:d2:27:ad:ce:77: 6e:95:8d:d1:94:fa:19:bd:35:48:9c:b0:4f:02:3d: 33:22:f0:89:2c:93:3c:12:0e:db:2f:7b:00:9e:a4: 7b:d8:ef:05:69:6c:a3:4d:67:b6:54:cf:73:a3:d6: 90:9e:cb:bd:e1:b8:1a:7d:d3:c0:7b:67:63:b9:2c: 6a:4a:62:51:c4:1f:41:23:88:d9:06:90:a0:d7:26: 9e:b6:4e:14:c8:b4:9f:d7:66:f9:33:d7:4f:bf:8e: 8c:5d:36:09:94:5d:2b:2d:20:75:44:36:ce:e2:d2: 35:5b:9d:e0:09:2e:ba:ee:9f:86:db:57:39:19:2a: 4b:32:6e:e8:41:1a:94:56:86:93:a3:a6:89:a8:86: 14:7e:7c:73:2d:35:b7:8f:d7:b8:ee:3f:4c:cc:34: d2:a2:08:eb:54:9e:26:a7:86:62:44:7c:5b:05:8d: b5:ff:33:04:b3:c8:63:e5:04:d6:a4:71:69:06:0f: 08:a5:64:7c:1f:00:d8:91:94:6e:63:e0:0f:9a:1d: 30:36:a1:d6:bd:87:1f:18:61:da:99:6d:d9:59:9f: 54:b8:c3:98:26:a2:35:17:61:f6:4f:d5:c6:ae:89: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:AC:36:98:95:9A:80:F2:FB:74:1A:CE:F3:C3:44:20:A3:4E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f5:5d:60:b5:e7:e6:7c:1c:31:02:19:90:30:84:36:dd:16: 1d:0e:7a:a8:11:a6:af:f5:d7:1e:d0:05:0e:fa:14:e0:a6:58: 6b:29:b2:41:e0:79:67:b5:b7:19:c7:bc:b5:6f:11:d1:ab:dc: a8:c9:2c:b4:80:83:72:03:1b:63:ca:93:5d:19:43:33:5f:b7: 62:b5:cf:5e:74:94:65:0d:91:87:19:9d:8f:0c:37:ae:f6:c2: 6c:ce:7f:4f:32:c4:bc:b0:b3:10:27:5a:d9:8f:cf:26:97:f4: 4e:6b:b7:bb:4d:bc:9f:77:b5:06:f2:4b:1e:e3:1a:ae:94:a1: 7c:27:06:34:d1:bd:74:4b:98:8c:59:ab:74:5f:ab:7f:c6:da: 83:97:f0:04:ae:0e:f0:f7:d6:4b:c3:06:1f:1c:03:9e:a8:b4: 9f:c0:6e:03:dc:12:bb:b2:af:ba:c4:f0:97:96:bb:f5:56:be: c2:07:c9:ba:1d:3e:59:2e:8c:0a:60:98:43:2f:d8:25:c8:14: 41:bb:fd:52:77:d7:e8:b2:81:53:75:14:31:a6:4b:38:47:c8: 72:80:42:59:3c:15:9c:32:63:2a:fb:c2:fa:db:18:8d:df:1f: 93:44:e2:21:7f:d0:b8:f9:27:d6:b9:19:84:fe:6d:68:6b:10: 57:d4:92:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCowT0nt482PLaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjExN2M5ZTMtZGQ1Zi00MGFmLWJiOWYtM2M5MzgyYmU2NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjkiAVFt3S1EIqLCRKIhXVZtLjOuecE0iet zndulY3RlPoZvTVInLBPAj0zIvCJLJM8Eg7bL3sAnqR72O8FaWyjTWe2VM9zo9aQ nsu94bgafdPAe2djuSxqSmJRxB9BI4jZBpCg1yaetk4UyLSf12b5M9dPv46MXTYJ lF0rLSB1RDbO4tI1W53gCS667p+G21c5GSpLMm7oQRqUVoaTo6aJqIYUfnxzLTW3 j9e47j9MzDTSogjrVJ4mp4ZiRHxbBY21/zMEs8hj5QTWpHFpBg8IpWR8HwDYkZRu Y+APmh0wNqHWvYcfGGHamW3ZWZ9UuMOYJqI1F2H2T9XGrokFnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPt/rDaYlZqA8vt0Gs7zw0Qgo06hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWExZjVhNWUtNmUyZC0z ZDZhLWE5ZDMtNWQwZWQ2N2U2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAq9V1gtefmfBwxAhmQMIQ23RYdDnqoEaav9dce 0AUO+hTgplhrKbJB4HlntbcZx7y1bxHRq9yoySy0gINyAxtjypNdGUMzX7ditc9e dJRlDZGHGZ2PDDeu9sJszn9PMsS8sLMQJ1rZj88ml/ROa7e7Tbyfd7UG8kse4xqu lKF8JwY00b10S5iMWat0X6t/xtqDl/AErg7w99ZLwwYfHAOeqLSfwG4D3BK7sq+6 xPCXlrv1Vr7CB8m6HT5ZLowKYJhDL9glyBRBu/1Sd9fosoFTdRQxpks4R8hygEJZ PBWcMmMq+8L62xiN3x+TROIhf9C4+SfWuRmE/m1oaxBX1JIX -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:55 2026 by rpki-client