$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa File: 1ae757c2-fd54-34e5-b835-c80962e8a054.roa (raw, json) Hash identifier: z1hexDjZIQey/R9p7b330DX9rVKWbhZ8w15Bp8lJ81I= Subject key identifier: 9A:4F:6C:C6:42:85:F3:6C:7F:C2:B7:5F:03:0D:2B:DF:E8:53:A1:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A251E1B54C0AE6BAAF3C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 10515 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:25:1e:1b:54:c0:ae:6b:aa:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a2f6bb60-6a32-4a97-9430-aa0e25e86da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cb:b3:d5:34:95:00:2d:da:fe:ee:4b:b2:9a: 14:51:4f:b2:f8:a7:6a:48:dd:a5:fe:2c:b7:8f:9a: e8:24:58:df:99:48:74:28:b9:21:08:19:07:db:76: d3:a7:58:b7:14:1a:8c:f9:48:47:3c:9d:d2:59:95: c0:bc:8e:03:76:6b:8b:08:e9:32:8e:c0:33:dc:af: 95:ce:bc:10:c5:f5:f0:00:bb:45:11:7c:2d:fb:0a: 4a:3e:92:a3:32:28:3b:ac:07:50:89:fc:49:82:6c: ac:f9:5b:36:03:ca:38:5a:85:73:4b:62:b5:16:15: 79:b1:1c:61:fd:9a:b8:9f:83:de:5f:0b:08:3b:d2: 2e:53:39:77:64:9c:14:90:6a:b6:82:9a:95:37:6c: 7c:bd:94:fa:93:a2:cb:86:21:e3:4f:7f:45:20:00: 5b:42:49:c7:e5:bf:be:c0:13:d6:8c:22:4e:c7:61: 41:4e:d0:b8:fc:e2:23:47:e5:03:c4:53:76:17:ab: c2:48:1b:7a:57:8e:a4:6e:0a:7c:36:46:55:4c:33: 85:7a:25:88:59:c5:11:85:af:f5:03:88:c2:9e:38: 14:2a:dc:96:70:49:d1:a9:0a:0e:51:28:6f:97:49: f3:52:e1:1c:4f:4c:af:fa:b1:fb:06:40:fb:04:31: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:6C:C6:42:85:F3:6C:7F:C2:B7:5F:03:0D:2B:DF:E8:53:A1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3f:15:59:d1:27:c8:b3:8d:75:01:11:a7:ed:12:5a:6c:8f: cc:59:fe:0c:af:03:56:f4:cc:84:6a:f9:16:df:9e:4d:8b:d4: 09:c1:9e:0e:28:5e:e5:d3:eb:b4:f0:0b:2f:f5:e0:1f:23:bc: 8f:b7:6f:ea:e5:04:f9:82:48:55:df:8c:bf:f2:47:e8:a3:a9: 31:db:36:f1:93:b8:e1:71:d4:03:4a:9f:3e:ff:a5:e6:4d:a4: 47:ea:db:7f:3c:ad:a7:57:d7:ef:b8:20:d9:8d:65:60:9e:77: b3:ff:66:45:8d:f6:c0:5f:50:08:20:01:5e:e1:d5:93:d2:39: 04:f9:0d:08:70:f4:80:c4:61:22:ba:ae:d7:0c:31:39:d9:78: 1d:15:3b:9f:e7:00:30:8a:12:c8:d0:bd:81:cf:cb:af:0e:6a: 62:6b:db:53:4a:33:9f:5b:8a:fc:ca:e0:58:4b:ea:4a:06:46: a7:c1:31:d8:1a:04:04:4b:05:04:64:68:57:63:a7:6e:13:be: 7a:4e:5c:91:98:9a:26:d3:32:1a:9a:ec:07:ad:ef:43:17:49: 2a:17:28:1f:fb:2c:59:e0:ae:fc:41:f4:33:cd:ee:93:19:76: a4:e6:e9:b4:f1:3b:e8:ab:fa:22:e5:b4:05:4d:29:89:6d:06: a7:be:76:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiUeG1TArmuq88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTJmNmJiNjAtNmEzMi00YTk3LTk0MzAtYWEwZTI1ZTg2ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsuz1TSVAC3a/u5LspoUUU+y+KdqSN2l/iy3 j5roJFjfmUh0KLkhCBkH23bTp1i3FBqM+UhHPJ3SWZXAvI4DdmuLCOkyjsAz3K+V zrwQxfXwALtFEXwt+wpKPpKjMig7rAdQifxJgmys+Vs2A8o4WoVzS2K1FhV5sRxh /Zq4n4PeXwsIO9IuUzl3ZJwUkGq2gpqVN2x8vZT6k6LLhiHjT39FIABbQknH5b++ wBPWjCJOx2FBTtC4/OIjR+UDxFN2F6vCSBt6V46kbgp8NkZVTDOFeiWIWcURha/1 A4jCnjgUKtyWcEnRqQoOUShvl0nzUuEcT0yv+rH7BkD7BDHExwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJpPbMZChfNsf8K3XwMNK9/oU6GtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFlNzU3YzItZmQ1NC0z NGU1LWI4MzUtYzgwOTYyZThhMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0/FVnRJ8izjXUBEaftElpsj8xZ/gyvA1b0zIRq+Rbfnk2L1AnB ng4oXuXT67TwCy/14B8jvI+3b+rlBPmCSFXfjL/yR+ijqTHbNvGTuOFx1ANKnz7/ peZNpEfq2388radX1++4INmNZWCed7P/ZkWN9sBfUAggAV7h1ZPSOQT5DQhw9IDE YSK6rtcMMTnZeB0VO5/nADCKEsjQvYHPy68OamJr21NKM59bivzK4FhL6koGRqfB MdgaBARLBQRkaFdjp24TvnpOXJGYmibTMhqa7Aet70MXSSoXKB/7LFngrvxB9DPN 7pMZdqTm6bTxO+ir+iLltAVNKYltBqe+dss= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:03 2026 by rpki-client