$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa File: 225282df-df33-3a53-9da3-ba45b2a16a38.roa (raw, json) Hash identifier: ikvmddX4HN1bx3jYDioN2mlHXIz4hUqA+7t59dk5+q8= Subject key identifier: C4:6C:73:7D:80:0C:39:D2:FC:ED:28:BB:3F:CF:FC:93:78:37:BD:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379FE3592515D11D3386C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397210 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fe:35:92:51:5d:11:d3:38:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=802764a3-5781-43d3-80df-717e5a13c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:01:2f:91:27:6d:5f:45:19:1b:af:8f:06: a0:32:58:a9:24:35:a4:41:8f:0d:67:ab:47:b6:1e: 70:75:76:b4:72:94:d7:72:23:ae:10:2b:5f:98:48: d2:f5:48:88:a4:f1:85:13:d2:ea:d3:c5:c0:65:13: cc:ed:5f:9b:40:89:4c:8e:ae:46:44:90:b8:fa:7c: 7e:40:68:68:89:88:ba:bf:e8:90:a7:ce:d1:22:e6: a7:d7:73:5b:a2:74:78:90:2d:a7:18:0d:af:0a:35: fe:09:ad:d5:74:a0:be:2e:11:99:2d:6f:f7:d5:96: b1:4f:b2:e4:61:d9:9a:2d:34:0a:30:6d:f2:69:50: 17:c6:36:65:dd:26:c0:30:aa:ea:29:c1:c6:d6:68: 80:b5:11:87:1b:29:75:5d:35:02:2c:ca:3d:18:40: 83:1c:5b:da:01:dd:3d:ce:e6:18:c3:eb:b0:97:98: 6a:f5:3f:97:9a:d1:c5:8c:33:28:41:eb:77:99:17: a3:4f:0d:b7:01:ad:ab:2f:5d:ea:4e:0f:68:a1:fc: c4:c2:7d:72:0e:b6:ee:fe:01:52:69:59:fa:90:70: 4d:d4:c2:a5:43:7b:26:75:52:3d:ad:b7:38:ce:1f: ba:eb:ce:52:07:19:79:c3:66:6c:35:7c:dc:9e:7a: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:73:7D:80:0C:39:D2:FC:ED:28:BB:3F:CF:FC:93:78:37:BD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c2:7d:17:f4:25:4e:59:f3:a6:4e:a5:18:b0:8f:41:57:3e: 20:2e:61:af:95:6c:52:ea:f3:7d:07:39:ce:15:d8:cb:ca:cb: 90:21:7d:aa:70:86:cc:58:62:fc:2b:38:51:c3:19:ee:ea:7d: eb:4b:9c:57:62:f9:95:36:81:09:3d:f1:f3:be:29:ed:bd:a5: bf:b4:ac:c8:da:a0:23:4e:ad:2d:7d:f0:cd:9c:25:a2:36:f3: 5e:df:f6:aa:dd:39:be:b5:db:1c:79:d8:cb:35:84:07:cc:2f: 36:04:0d:93:80:85:41:b0:d8:a5:40:c6:42:46:53:76:1f:c7: 28:2d:5b:c0:d7:42:af:61:10:48:25:75:fd:83:dd:5d:dd:b5: 2e:c3:e8:6d:56:f6:c4:47:d8:94:24:3e:52:de:88:b9:f6:00: 1a:e9:5c:aa:97:7d:21:5d:39:89:df:de:0c:9d:b8:93:6a:ca: 03:d5:76:29:62:c1:91:70:53:e2:ff:47:61:a1:eb:cf:46:4a: af:3d:58:b0:3f:74:8d:aa:58:e5:fa:d9:5a:ef:bc:23:ef:e9: 73:7c:c3:aa:55:03:84:90:6a:96:64:b2:7a:52:71:87:84:53: e3:73:e1:9a:50:9f:ef:9d:91:cf:a2:d4:b8:b8:3d:a1:05:f2: 66:5a:18:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jef41klFdEdM4bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODAyNzY0YTMtNTc4MS00M2QzLTgwZGYtNzE3ZTVhMTNjNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0EBL5EnbV9FGRuvjwagMlipJDWkQY8NZ6tH th5wdXa0cpTXciOuECtfmEjS9UiIpPGFE9Lq08XAZRPM7V+bQIlMjq5GRJC4+nx+ QGhoiYi6v+iQp87RIuan13NbonR4kC2nGA2vCjX+Ca3VdKC+LhGZLW/31ZaxT7Lk YdmaLTQKMG3yaVAXxjZl3SbAMKrqKcHG1miAtRGHGyl1XTUCLMo9GECDHFvaAd09 zuYYw+uwl5hq9T+XmtHFjDMoQet3mRejTw23Aa2rL13qTg9oofzEwn1yDrbu/gFS aVn6kHBN1MKlQ3smdVI9rbc4zh+6685SBxl5w2ZsNXzcnnrIIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRsc32ADDnS/O0ouz/P/JN4N72NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjI1MjgyZGYtZGYzMy0z YTUzLTlkYTMtYmE0NWIyYTE2YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbCfRf0JU5Z86ZOpRiwj0FXPiAuYa+VbFLq830HOc4V2MvKy5Ah fapwhsxYYvwrOFHDGe7qfetLnFdi+ZU2gQk98fO+Ke29pb+0rMjaoCNOrS198M2c JaI2817f9qrdOb612xx52Ms1hAfMLzYEDZOAhUGw2KVAxkJGU3YfxygtW8DXQq9h EEgldf2D3V3dtS7D6G1W9sRH2JQkPlLeiLn2ABrpXKqXfSFdOYnf3gyduJNqygPV diliwZFwU+L/R2Gh689GSq89WLA/dI2qWOX62VrvvCPv6XN8w6pVA4SQapZksnpS cYeEU+Nz4ZpQn++dkc+i1Li4PaEF8mZaGIU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:39 2026 by rpki-client