$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2025aa0f-0d64-3c4c-9b46-4b5849943a64.roa File: 2025aa0f-0d64-3c4c-9b46-4b5849943a64.roa (raw, json) Hash identifier: vv+LUSMySU4LN9WJYydtusFWvxr/iTC5n5gJmPFetZ8= Subject key identifier: 96:AB:2A:5D:B6:7B:8A:B4:E1:54:28:1F:38:59:67:E5:64:07:AF:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B3675C85EF4FED610200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2025aa0f-0d64-3c4c-9b46-4b5849943a64.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 396614 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b3:67:5c:85:ef:4f:ed:61:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=312fe88e-85d3-4d05-942c-e6cc082413ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:d6:31:cf:aa:8e:d0:e4:a9:16:42:85:b8: de:3b:1f:22:eb:7a:6d:93:1f:06:7b:6e:d5:39:3e: c9:7b:30:d8:7d:c2:02:7f:a6:a9:af:99:0a:d9:49: 0d:8e:f3:ff:d6:b3:ab:60:62:68:c9:26:53:6b:40: 33:30:7e:ee:73:95:09:8c:7a:3e:35:f2:5f:9c:de: e6:6d:1e:72:21:88:0f:2d:b1:e7:9c:b6:97:ba:75: 64:d6:63:b4:61:93:2e:d8:f8:25:88:a9:3d:fc:6b: b7:81:66:0e:3c:5b:83:ee:4c:da:5b:b5:e0:88:2d: ed:94:0d:5e:4d:f8:a5:c5:61:87:98:74:ad:f2:b3: d1:79:b9:2a:de:60:da:c9:86:0f:2f:e9:e4:88:4f: d9:29:f4:53:a0:6e:f7:02:fd:c2:a9:60:33:f0:bc: 55:99:cc:bd:9f:47:1b:e5:d9:c6:28:8c:76:f6:3a: 93:12:80:6a:7c:51:1e:51:b2:28:1b:d4:4f:70:80: b8:b6:5a:44:e9:49:0f:37:7a:83:80:f8:89:01:2e: af:6e:ed:c7:7a:b7:3d:f9:f5:9a:b9:90:ba:02:b6: 4d:98:82:05:ac:26:77:10:0e:16:71:a8:2d:1e:3d: 00:f9:aa:5a:2f:1e:57:a9:a6:76:e9:a5:fe:1d:e5: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AB:2A:5D:B6:7B:8A:B4:E1:54:28:1F:38:59:67:E5:64:07:AF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2025aa0f-0d64-3c4c-9b46-4b5849943a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b3:d3:c7:02:ab:9b:38:25:59:3e:81:af:fe:cb:e8:52:c1: f2:d9:21:72:86:14:c9:c8:3c:13:2f:0a:16:26:9e:a8:40:b7: 15:bd:b1:f5:08:9a:e5:6b:7e:ce:74:33:2a:b2:a6:bc:53:a3: c1:c0:2b:d9:cf:ae:32:71:91:91:14:63:49:8c:d7:64:16:60: 44:e3:4b:97:5d:96:72:e3:a8:7e:41:ed:69:7a:45:e2:ce:20: a9:cf:90:3d:dd:71:13:44:ad:3d:79:65:4a:97:87:e2:9b:18: f7:94:8e:fa:d7:87:a8:4c:17:eb:e7:98:8b:6b:ed:97:42:a0: c5:f6:ee:21:38:ad:81:c1:ac:ce:2b:37:3a:85:8c:8b:cc:4a: 6d:ac:0f:19:b5:f6:a5:c1:75:dc:54:13:b7:a3:18:1b:08:a6: 4b:22:7e:3f:b1:7c:32:62:ac:3f:0a:9a:54:46:8b:dd:74:6c: d3:9e:df:3b:3b:95:ce:87:fb:97:1a:dd:3f:a4:94:8a:3d:25: 14:8e:59:59:51:d5:f9:cc:e1:e8:37:fc:7a:71:91:08:55:7c: 1c:f4:2b:38:12:1a:a8:e7:aa:81:6b:1c:0e:89:a2:96:48:71: cf:96:78:18:e7:1f:67:d5:8a:64:73:4a:08:45:3f:68:91:e4: 0c:17:80:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bNnXIXvT+1hAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk MzEyZmU4OGUtODVkMy00ZDA1LTk0MmMtZTZjYzA4MjQxM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjzWMc+qjtDkqRZChbjeOx8i63ptkx8Ge27V OT7JezDYfcICf6apr5kK2UkNjvP/1rOrYGJoySZTa0AzMH7uc5UJjHo+NfJfnN7m bR5yIYgPLbHnnLaXunVk1mO0YZMu2PgliKk9/Gu3gWYOPFuD7kzaW7XgiC3tlA1e TfilxWGHmHSt8rPRebkq3mDayYYPL+nkiE/ZKfRToG73Av3CqWAz8LxVmcy9n0cb 5dnGKIx29jqTEoBqfFEeUbIoG9RPcIC4tlpE6UkPN3qDgPiJAS6vbu3Herc9+fWa uZC6ArZNmIIFrCZ3EA4WcagtHj0A+apaLx5XqaZ26aX+HeXG+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJarKl22e4q04VQoHzhZZ+VkB6+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjAyNWFhMGYtMGQ2NC0z YzRjLTliNDYtNGI1ODQ5OTQzYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGz08cCq5s4JVk+ga/+y+hSwfLZIXKGFMnIPBMvChYmnqhAtxW9 sfUImuVrfs50MyqyprxTo8HAK9nPrjJxkZEUY0mM12QWYETjS5ddlnLjqH5B7Wl6 ReLOIKnPkD3dcRNErT15ZUqXh+KbGPeUjvrXh6hMF+vnmItr7ZdCoMX27iE4rYHB rM4rNzqFjIvMSm2sDxm19qXBddxUE7ejGBsIpksifj+xfDJirD8KmlRGi910bNOe 3zs7lc6H+5ca3T+klIo9JRSOWVlR1fnM4eg3/HpxkQhVfBz0KzgSGqjnqoFrHA6J opZIcc+WeBjnH2fVimRzSghFP2iR5AwXgOU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:34:28 2026 by rpki-client