$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fa16532-e6c3-3331-9077-1739c8ba5b8b.roa File: 1fa16532-e6c3-3331-9077-1739c8ba5b8b.roa (raw, json) Hash identifier: htGFIM/jaTMhBAjjNOb3H7f1X9WVz/nzyKnRyW53a44= Subject key identifier: AC:21:EF:36:AA:AC:7A:0F:F7:93:D1:0A:F5:CD:1D:8A:9E:12:CE:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B1882037FEF60D33A140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fa16532-e6c3-3331-9077-1739c8ba5b8b.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396574 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b1:88:20:37:fe:f6:0d:33:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=21f05a25-1ab4-43c9-9c25-07b6d9aff1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:21:45:d0:4b:9e:b0:dc:1c:3c:92:a2:29: 26:93:15:39:81:21:39:f6:da:27:0f:93:2b:10:16: 50:21:43:4d:bd:38:ed:fc:cb:2e:3c:ef:73:e4:16: ed:7d:10:13:20:dc:da:15:b6:b7:ce:40:6e:ff:40: 4f:cc:8f:c5:5a:f8:ba:9f:d7:ec:d7:29:d1:16:31: 73:e3:54:83:8e:d8:28:09:c9:9f:ef:33:0e:d2:6b: 2c:53:ba:68:ee:22:ba:36:f1:ed:ca:bf:2d:18:66: a6:98:fe:40:8a:71:0e:9e:16:5e:c4:51:a0:05:d0: c1:85:6b:0b:64:78:24:cd:91:96:19:5a:1f:2d:53: ed:3a:49:56:c2:69:46:f7:34:9c:f7:00:97:2b:c4: 68:ca:68:7a:98:e1:d6:6a:b6:68:56:e5:68:eb:7c: 8b:ac:42:f0:86:17:05:84:4d:d1:c2:c6:17:17:c1: 95:50:f5:75:94:2d:d4:22:55:72:64:f1:05:77:57: f8:dd:fe:4b:7f:e7:65:e5:a2:42:c8:0f:d9:7a:d4: ce:22:4c:f8:bc:98:86:be:b5:9f:0b:1c:0f:91:4e: d7:72:f4:46:1e:76:e9:bf:3c:71:6a:f7:8c:79:e0: 00:f5:b7:47:40:f4:32:ae:96:b1:6c:c6:b1:a8:4b: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:EF:36:AA:AC:7A:0F:F7:93:D1:0A:F5:CD:1D:8A:9E:12:CE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fa16532-e6c3-3331-9077-1739c8ba5b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:f5:0a:d2:3d:3a:16:de:b2:73:4a:3d:1f:88:ce:45:5d: f7:d0:7c:07:63:c3:22:7e:95:e8:86:24:a3:ca:e4:75:03:6a: ef:c4:7a:8b:9b:77:0b:6a:2f:1a:71:88:95:47:16:d3:75:67: 8d:00:67:1f:c1:41:52:f5:64:e5:de:a2:45:97:e1:4c:e1:b2: 07:b7:f5:ad:12:e3:e5:bb:58:b4:e6:16:02:d5:91:52:d1:2b: 37:74:b7:f4:f3:74:dd:62:c9:14:ac:98:02:d4:78:07:a0:01: f9:e7:30:d4:10:c7:6b:0c:c9:0e:04:37:9b:6b:db:40:4d:91: b2:16:6d:b0:dc:f3:79:33:ec:0c:a9:a9:c5:1a:35:e0:d7:61: c6:fc:ed:65:ef:28:49:61:03:73:98:bf:f8:33:14:5b:39:65: b2:f9:5f:08:06:c8:46:76:27:91:fc:6f:33:6b:e4:ff:5d:b0: 75:83:a8:55:4e:17:ce:af:20:38:f7:e9:f5:9d:c7:c0:d5:79: be:65:6b:fe:ce:f5:84:66:8a:89:ca:8a:24:c4:93:ea:31:39: e7:a5:31:0b:26:97:49:5a:5b:54:ef:fd:cd:8a:2a:b0:7f:b9: fe:03:a0:9d:a0:49:a5:e5:2d:d4:90:22:f4:59:c8:84:61:cb: 34:82:81:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bGIIDf+9g0zoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk MjFmMDVhMjUtMWFiNC00M2M5LTljMjUtMDdiNmQ5YWZmMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlughRdBLnrDcHDySoikmkxU5gSE59tonD5Mr EBZQIUNNvTjt/MsuPO9z5BbtfRATINzaFba3zkBu/0BPzI/FWvi6n9fs1ynRFjFz 41SDjtgoCcmf7zMO0mssU7po7iK6NvHtyr8tGGammP5AinEOnhZexFGgBdDBhWsL ZHgkzZGWGVofLVPtOklWwmlG9zSc9wCXK8Roymh6mOHWarZoVuVo63yLrELwhhcF hE3RwsYXF8GVUPV1lC3UIlVyZPEFd1f43f5Lf+dl5aJCyA/ZetTOIkz4vJiGvrWf CxwPkU7XcvRGHnbpvzxxaveMeeAA9bdHQPQyrpaxbMaxqEvpHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwh7zaqrHoP95PRCvXNHYqeEs60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZhMTY1MzItZTZjMy0z MzMxLTkwNzctMTczOWM4YmE1YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8/9QrSPToW3rJzSj0fiM5FXffQfAdjwyJ+leiGJKPK5HUDau/E eoubdwtqLxpxiJVHFtN1Z40AZx/BQVL1ZOXeokWX4Uzhsge39a0S4+W7WLTmFgLV kVLRKzd0t/TzdN1iyRSsmALUeAegAfnnMNQQx2sMyQ4EN5tr20BNkbIWbbDc83kz 7AypqcUaNeDXYcb87WXvKElhA3OYv/gzFFs5ZbL5XwgGyEZ2J5H8bzNr5P9dsHWD qFVOF86vIDj36fWdx8DVeb5la/7O9YRmionKiiTEk+oxOeelMQsml0laW1Tv/c2K KrB/uf4DoJ2gSaXlLdSQIvRZyIRhyzSCgTE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:11:13 2026 by rpki-client