$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa File: 21e84a68-0232-38b3-a57c-bff4933abd17.roa (raw, json) Hash identifier: sQG0TYutIO4zLVaCEb4o11FNPhBU8LKG3k6wycgf1pc= Subject key identifier: 79:D0:37:A6:DD:5F:E2:DB:B1:B5:04:BB:2E:14:2B:4A:88:5F:DC:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B3264E547C6E4C99B700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 396591 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b3:26:4e:54:7c:6e:4c:99:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=a2da7fcb-3cc8-460e-bf5c-c8e6f5dc82c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:b0:68:20:e0:25:60:2d:a1:88:16:aa:f0: b0:76:79:fc:8f:74:39:20:f1:02:05:ad:6d:2d:6d: ef:4d:f5:bb:61:6e:9b:4c:9e:15:c0:a7:85:76:c5: 91:bd:80:6e:5a:be:fb:65:b5:cf:1c:84:16:e0:69: 4f:d4:45:66:e5:b2:7a:f7:46:74:29:17:3b:50:79: 52:80:b9:7b:cd:40:b0:0f:fe:6a:8f:91:9b:03:ee: f4:e1:cd:87:b3:9d:8f:d8:e8:fa:1a:cb:29:ac:85: 20:26:6d:13:4c:9a:8c:f9:ad:be:ab:1a:79:62:37: 8d:7f:dd:77:97:e7:58:d4:ac:b3:65:e1:b8:e0:d5: c5:c9:b2:0a:e7:06:7b:2d:0c:6b:9e:32:6b:19:29: ff:03:2d:e1:89:8a:e9:0e:5c:ac:90:b1:3a:e8:3f: ad:c8:82:1e:5e:ec:f9:77:dd:1f:9b:db:7f:14:65: e1:e4:9d:ad:6e:84:d7:fe:50:8e:72:15:b5:49:c3: f3:f3:ae:4a:37:54:93:70:75:de:f1:87:9b:f6:31: 2c:13:a0:65:5c:57:3c:a1:13:07:4a:93:72:2e:42: 0d:1c:86:a3:38:9f:80:ba:bc:f9:b9:04:57:80:27: 03:23:22:33:e6:ba:3e:1b:d1:3d:fd:4b:04:60:b5: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:37:A6:DD:5F:E2:DB:B1:B5:04:BB:2E:14:2B:4A:88:5F:DC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:20:61:0d:02:22:f9:4f:e7:a6:ba:22:e4:f7:a5:cb:89:43: 0f:b3:e8:28:a2:c5:50:f0:90:53:f4:1a:b1:11:39:05:a2:b0: 60:d3:b2:fb:50:80:01:b5:a6:a1:3d:dd:5e:51:5c:6e:8e:fc: 67:a4:ce:03:30:6c:12:42:59:1c:46:7c:c8:84:b2:86:cd:04: f7:52:e9:df:9b:8e:a7:40:a1:67:1e:14:40:ad:ab:5f:a4:69: 52:d2:91:71:fb:18:57:02:97:e9:e7:4f:b7:36:27:04:69:ff: 9c:ad:53:a8:43:b8:69:c8:75:12:d6:0b:fc:87:49:be:33:14: ce:07:b5:fc:26:06:b4:3e:fa:c5:ec:46:32:bf:ca:7e:55:f0: 79:4c:1c:7a:66:6c:85:f2:28:2e:77:76:98:7d:02:c5:20:d2: 43:43:e2:da:96:da:32:2c:9c:86:ad:2b:19:2e:03:38:db:60: cf:ea:72:74:79:4e:b0:51:e9:72:16:78:66:17:72:2e:d2:f9: 8e:c8:b3:dd:75:20:c1:1c:b3:ab:31:1a:c2:2b:23:42:ec:53: 85:97:20:4c:fc:99:ce:6b:8d:a0:d8:41:72:59:b5:ac:6a:d1: 99:48:c6:12:ec:f6:84:ab:e7:98:ff:c0:17:6c:28:d2:13:7d: ac:50:5e:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bMmTlR8bkyZtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk YTJkYTdmY2ItM2NjOC00NjBlLWJmNWMtYzhlNmY1ZGM4MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMGwaCDgJWAtoYgWqvCwdnn8j3Q5IPECBa1t LW3vTfW7YW6bTJ4VwKeFdsWRvYBuWr77ZbXPHIQW4GlP1EVm5bJ690Z0KRc7UHlS gLl7zUCwD/5qj5GbA+704c2Hs52P2Oj6GssprIUgJm0TTJqM+a2+qxp5YjeNf913 l+dY1KyzZeG44NXFybIK5wZ7LQxrnjJrGSn/Ay3hiYrpDlyskLE66D+tyIIeXuz5 d90fm9t/FGXh5J2tboTX/lCOchW1ScPz865KN1STcHXe8Yeb9jEsE6BlXFc8oRMH SpNyLkINHIajOJ+Aurz5uQRXgCcDIyIz5ro+G9E9/UsEYLVz/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnQN6bdX+LbsbUEuy4UK0qIX9zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlODRhNjgtMDIzMi0z OGIzLWE1N2MtYmZmNDkzM2FiZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEgYQ0CIvlP56a6IuT3pcuJQw+z6CiixVDwkFP0GrEROQWisGDT svtQgAG1pqE93V5RXG6O/GekzgMwbBJCWRxGfMiEsobNBPdS6d+bjqdAoWceFECt q1+kaVLSkXH7GFcCl+nnT7c2JwRp/5ytU6hDuGnIdRLWC/yHSb4zFM4HtfwmBrQ+ +sXsRjK/yn5V8HlMHHpmbIXyKC53dph9AsUg0kND4tqW2jIsnIatKxkuAzjbYM/q cnR5TrBR6XIWeGYXci7S+Y7Is911IMEcs6sxGsIrI0LsU4WXIEz8mc5rjaDYQXJZ taxq0ZlIxhLs9oSr55j/wBdsKNITfaxQXr4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:40:54 2026 by rpki-client