$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa File: 1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa (raw, json) Hash identifier: r/dKWEZZqn6VlWTdM3w60+bQFxNdhx0KQC5rQ5HZ380= Subject key identifier: 45:69:9F:A5:A9:71:B5:CA:61:E6:A3:F0:98:34:AA:FA:F4:E8:FE:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA58DACCC75420041A0000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 10515 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:da:cc:c7:54:20:04:1a:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=7f856e21-d2ac-45eb-a4b3-44bedd747c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:b3:5a:31:ed:5c:65:f2:ad:3c:8d:12:55: d0:ed:c9:18:5e:fd:a9:b1:51:28:36:61:51:95:61: 41:8a:2e:4d:ca:11:f2:c3:2e:e3:f6:9f:a0:29:df: 80:28:d8:c2:22:c8:e6:5f:c3:ff:06:61:74:8c:9c: 7d:17:88:ef:ee:7f:ea:b8:b7:fa:6c:3e:64:04:89: 98:d5:7e:a4:70:2f:d2:d6:de:5e:cb:c3:76:24:34: e6:63:2f:e9:09:c0:10:5b:ed:79:5e:2f:c4:41:c0: 85:c5:c7:58:f2:51:d7:fd:35:38:d3:6f:15:1e:03: d5:8b:9e:b8:70:c0:18:3a:12:f7:b9:02:01:5a:e2: 56:9c:76:d3:ca:9b:06:01:94:de:a6:f5:55:c8:00: 84:b5:e1:da:d3:29:ee:8c:17:fe:25:da:45:3b:b2: df:b1:d3:94:08:5a:e2:30:3b:9a:51:44:3c:5b:9b: 93:ec:b4:5d:77:55:d8:f2:8a:ff:05:9f:c9:93:86: f1:a8:39:68:44:d7:74:38:a3:53:a0:ce:cd:55:c2: 0d:18:33:e7:dd:bb:0e:b0:d0:82:99:94:8b:b2:04: 0d:b4:61:2f:cd:1a:54:4a:18:7e:45:5e:c4:87:bf: ce:a4:c8:b0:f4:7e:be:c8:d3:1a:b9:af:b8:2a:7a: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:9F:A5:A9:71:B5:CA:61:E6:A3:F0:98:34:AA:FA:F4:E8:FE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a96d63d-aaeb-3297-91dd-e06edf8350d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:20:96:ed:e5:f1:9f:0f:e3:a4:be:fd:da:77:07:0d:77:b6: e3:59:98:33:f8:32:e0:ff:8a:a4:96:fe:e2:ac:80:c9:cc:81: 09:3e:86:44:7f:55:a2:cc:3d:5b:2d:30:0e:dc:e7:81:5a:66: 03:f2:b2:f1:42:f5:f3:eb:f7:49:bc:0e:a8:6e:d7:83:64:10: 68:07:2b:a3:ab:a8:3f:f7:16:ed:e4:8d:6d:49:03:3a:59:66: bf:9d:f0:c3:c8:ce:9f:91:15:b2:a5:a8:73:be:9e:1c:e1:6e: f0:16:30:f4:48:81:61:31:83:a5:a2:d7:a7:20:e2:ba:29:35: e4:f8:58:08:8d:4c:4a:f0:3e:fd:10:66:5b:b7:2d:ff:7f:db: ae:13:70:91:f9:da:ac:4f:64:da:e5:dc:ea:1b:b7:54:9e:01: ee:ca:63:cf:b0:02:62:62:b5:93:a2:ec:a0:f2:bf:d9:87:30: b7:f5:10:d8:b5:69:22:37:bb:80:bb:74:63:3a:a0:df:26:13: 6b:eb:6e:19:0d:87:42:86:9b:1b:ce:bf:88:cf:74:67:9a:11: e4:a9:8d:5c:8b:7f:13:bf:a4:99:48:3a:12:1c:66:28:55:e0: 4d:f3:ac:66:c9:e1:d2:9d:ee:af:5d:e8:0a:60:a3:86:67:e2: d0:66:44:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+ljazMdUIAQaAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk N2Y4NTZlMjEtZDJhYy00NWViLWE0YjMtNDRiZWRkNzQ3YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKSzWjHtXGXyrTyNElXQ7ckYXv2psVEoNmFR lWFBii5NyhHywy7j9p+gKd+AKNjCIsjmX8P/BmF0jJx9F4jv7n/quLf6bD5kBImY 1X6kcC/S1t5ey8N2JDTmYy/pCcAQW+15Xi/EQcCFxcdY8lHX/TU4028VHgPVi564 cMAYOhL3uQIBWuJWnHbTypsGAZTepvVVyACEteHa0ynujBf+JdpFO7LfsdOUCFri MDuaUUQ8W5uT7LRdd1XY8or/BZ/Jk4bxqDloRNd0OKNToM7NVcINGDPn3bsOsNCC mZSLsgQNtGEvzRpUShh+RV7Eh7/OpMiw9H6+yNMaua+4KnrH8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEVpn6WpcbXKYeaj8Jg0qvr06P4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE5NmQ2M2QtYWFlYi0z Mjk3LTkxZGQtZTA2ZWRmODM1MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqIJbt5fGfD+Okvv3adwcNd7bjWZgz+DLg/4qk lv7irIDJzIEJPoZEf1WizD1bLTAO3OeBWmYD8rLxQvXz6/dJvA6obteDZBBoByuj q6g/9xbt5I1tSQM6WWa/nfDDyM6fkRWypahzvp4c4W7wFjD0SIFhMYOlotenIOK6 KTXk+FgIjUxK8D79EGZbty3/f9uuE3CR+dqsT2Ta5dzqG7dUngHuymPPsAJiYrWT ouyg8r/ZhzC39RDYtWkiN7uAu3RjOqDfJhNr624ZDYdChpsbzr+Iz3RnmhHkqY1c i38Tv6SZSDoSHGYoVeBN86xmyeHSne6vXegKYKOGZ+LQZkSP -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:36 2026 by rpki-client