$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fb2aaa1-1d82-33bb-974b-a2fd179500b6.roa File: 1fb2aaa1-1d82-33bb-974b-a2fd179500b6.roa (raw, json) Hash identifier: nffj2EzBPf6rcX2Vw0IjyNjDh9Vq/FuDsPZmrN76xck= Subject key identifier: 9D:97:85:73:5C:B2:2A:34:B4:9F:03:1D:84:76:04:63:02:A3:13:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8CC62D9D440142F46A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fb2aaa1-1d82-33bb-974b-a2fd179500b6.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396591 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8c:c6:2d:9d:44:01:42:f4:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c78ba21b-3640-4f3d-8c1b-258d852d2230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:5d:0a:f4:6e:fa:41:2f:f7:d4:a8:cb:fd: 66:f0:3d:78:a3:bf:0b:0e:60:d8:9c:d1:f4:0c:6e: e0:ec:00:2f:e3:cf:09:4e:d3:bc:57:b6:28:51:7c: ab:83:87:f6:a6:0f:c4:83:28:95:74:b9:40:38:d2: 46:c8:fb:a3:7c:02:91:b0:a6:ab:7d:26:bf:95:3a: 83:74:96:5e:ec:39:8e:6c:46:a5:65:63:e7:f8:9c: b7:56:63:8c:ea:83:80:9f:58:33:2c:88:17:ae:3a: 76:13:06:e1:19:a6:93:d0:24:3b:36:b4:65:e5:63: 08:7d:ad:08:1a:8a:16:34:d7:3a:26:27:59:24:1b: 5f:b1:21:03:86:8f:21:a6:b0:9e:85:14:99:20:48: a2:db:bd:00:69:37:bc:b0:f3:f4:ae:d8:f7:04:62: d7:c4:44:4d:fe:cd:23:be:48:1f:e2:28:ef:08:76: 3d:34:27:d9:20:26:01:98:a6:d8:73:2a:40:e5:13: ab:e5:f5:d3:29:38:49:eb:c6:0a:ec:fa:65:ca:1b: 01:5e:1e:d6:5d:8f:59:0f:a7:0a:d1:ed:c5:f2:0f: 19:d0:da:c8:42:f9:60:c3:de:9c:c6:e5:b3:b9:9c: c1:f5:d8:30:59:12:f1:0d:ab:7e:20:21:11:87:25: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:97:85:73:5C:B2:2A:34:B4:9F:03:1D:84:76:04:63:02:A3:13:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fb2aaa1-1d82-33bb-974b-a2fd179500b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:56:20:ec:e5:8f:19:4e:d3:73:66:51:45:e7:db:80:6a:48: 4b:bf:c6:c2:f7:da:93:51:96:93:d2:35:00:47:b2:37:69:e7: 1a:8f:bb:46:bd:71:12:bd:f7:20:2e:48:46:c6:66:09:44:5b: 5f:17:26:05:42:1f:e8:41:6c:d4:e4:0e:92:73:0c:fa:ab:95: c2:9f:50:29:58:62:2a:d0:d0:3d:0a:84:88:2a:1e:5e:ca:f8: a9:d5:5f:bb:88:90:77:3f:18:3d:c0:2a:9f:a7:67:f1:64:07: a3:8a:8a:17:15:25:80:94:d8:b6:66:63:16:56:7b:4c:9a:4f: 6e:b2:a6:df:2f:b6:53:b4:9f:0f:35:bf:cc:8f:50:9d:51:d6: d9:b3:88:6f:c2:9f:8d:db:e4:03:4f:89:62:7a:9b:d8:4d:10: b8:a1:d7:66:61:c5:ee:34:83:30:e0:59:9b:04:d8:da:ac:ec: 4c:90:db:d9:cd:d5:f2:e5:be:7d:92:21:b6:a0:b5:3c:2a:18: 20:3c:71:ca:68:d3:01:b4:bc:b7:5e:e6:04:71:99:bf:e3:3f: 17:3f:f1:24:77:43:95:6f:6d:d8:b7:16:50:e1:e8:30:54:4c: 4b:57:30:7f:d5:bf:6b:8a:7d:76:94:05:13:c6:07:6d:c8:7a: af:e2:0b:ed -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCozGLZ1EAUL0aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Yzc4YmEyMWItMzY0MC00ZjNkLThjMWItMjU4ZDg1MmQyMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv5dCvRu+kEv99Soy/1m8D14o78LDmDYnNH0 DG7g7AAv488JTtO8V7YoUXyrg4f2pg/EgyiVdLlAONJGyPujfAKRsKarfSa/lTqD dJZe7DmObEalZWPn+Jy3VmOM6oOAn1gzLIgXrjp2EwbhGaaT0CQ7NrRl5WMIfa0I GooWNNc6JidZJBtfsSEDho8hprCehRSZIEii270AaTe8sPP0rtj3BGLXxERN/s0j vkgf4ijvCHY9NCfZICYBmKbYcypA5ROr5fXTKThJ68YK7PplyhsBXh7WXY9ZD6cK 0e3F8g8Z0NrIQvlgw96cxuWzuZzB9dgwWRLxDat+ICERhyWApwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ2XhXNcsio0tJ8DHYR2BGMCoxOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZiMmFhYTEtMWQ4Mi0z M2JiLTk3NGItYTJmZDE3OTUwMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGViDs5Y8ZTtNzZlFF59uAakhLv8bC99qTUZaT 0jUAR7I3aecaj7tGvXESvfcgLkhGxmYJRFtfFyYFQh/oQWzU5A6Scwz6q5XCn1Ap WGIq0NA9CoSIKh5eyvip1V+7iJB3Pxg9wCqfp2fxZAejiooXFSWAlNi2ZmMWVntM mk9usqbfL7ZTtJ8PNb/Mj1CdUdbZs4hvwp+N2+QDT4liepvYTRC4oddmYcXuNIMw 4FmbBNjarOxMkNvZzdXy5b59kiG2oLU8KhggPHHKaNMBtLy3XuYEcZm/4z8XP/Ek d0OVb23YtxZQ4egwVExLVzB/1b9rin12lAUTxgdtyHqv4gvt -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:34 2026 by rpki-client