$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa File: 24a899b4-321a-378a-a29f-36469e6ae33a.roa (raw, json) Hash identifier: gQA8iVQ0un9yzt66naJdlxOLzsGHrZ71h31ia/7tSQo= Subject key identifier: B8:6E:CD:CD:E0:D6:A5:A7:6A:2C:9A:26:16:17:D5:1B:55:BC:74:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A821158814D9FB9744D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396615 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:82:11:58:81:4d:9f:b9:74:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9488d2cf-b587-4f73-b2f4-06e4ac6cc686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:b2:b5:56:e7:b8:02:03:62:b8:f2:90:a5: b2:9d:de:e6:57:14:77:d1:9d:2c:d7:5b:4c:a4:53: 88:c6:10:6b:2e:8f:9e:b7:81:24:23:29:fe:34:21: 26:fe:5a:a3:5a:0f:c8:aa:37:63:ce:64:1b:df:1d: f6:8b:81:c6:58:f4:76:28:d4:69:20:c8:66:03:b8: 59:d9:4e:22:6e:02:30:0d:49:4c:3a:e9:82:a2:ce: 92:4c:39:2d:85:db:42:f9:2a:53:a2:3d:d4:2c:d0: ba:12:f8:7c:66:8d:88:41:ca:9a:0f:8f:60:b6:98: f7:8e:02:34:ca:bc:46:a2:f4:9d:33:fc:b6:98:c4: df:fc:24:e7:d0:57:84:c1:86:c6:fa:a2:cf:b9:f0: 28:f3:29:da:53:d3:7f:71:30:28:b5:df:af:ea:21: 00:6a:9d:36:2e:a8:38:d1:14:7c:84:df:43:a2:99: 5e:ea:e2:43:cc:b9:61:c8:c8:51:f5:38:fa:0f:e9: 46:1b:8a:b9:ec:7e:c9:32:6d:f6:d8:f7:ba:a9:51: 43:b0:33:e8:09:5f:b5:e4:d0:ea:7d:03:0f:4a:f0: b7:48:f0:2e:53:e9:3a:e0:1a:08:9b:30:7a:83:ce: cf:9a:e7:fc:ec:f6:76:d3:b8:33:22:94:0d:0d:a4: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6E:CD:CD:E0:D6:A5:A7:6A:2C:9A:26:16:17:D5:1B:55:BC:74:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a899b4-321a-378a-a29f-36469e6ae33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4a:3a:b3:47:fb:98:c9:68:22:93:a5:75:3b:39:1e:a6:b5: 14:d2:94:12:73:c0:0d:7a:b2:7c:d0:fd:c7:dc:cd:24:51:82: 67:04:fd:87:5f:4c:84:3c:1b:84:7c:8d:d9:9b:c3:f1:15:2a: ed:0a:6a:a1:f6:72:9b:72:82:1e:15:dc:e3:33:5b:bd:4e:f8: a7:30:f5:b0:bf:87:e9:9b:7c:56:b3:95:14:71:96:33:0b:43: 78:29:1d:29:ee:bc:31:be:5c:f7:de:10:bb:ef:58:5b:15:7e: af:aa:2d:e2:a2:28:c7:9d:97:40:b5:e2:7d:3f:ce:51:94:61: f1:e9:01:8a:e6:0e:95:d5:3f:dd:70:d9:23:bf:9d:7c:f6:0c: b3:2b:94:09:48:62:fa:fe:0a:4d:49:5a:2a:e1:92:3c:45:39: dc:e1:ca:29:2d:67:d8:d4:f1:a1:56:ff:09:1a:95:2e:d5:47: 6f:84:3e:02:07:61:00:89:f3:50:3f:f6:cd:fe:35:eb:e5:bd: ba:f4:c8:f8:8c:7b:1e:02:c1:68:b7:f1:8f:b2:0a:37:b3:57: a9:05:6f:5e:4f:e7:05:b4:ed:c6:16:bd:65:9b:97:ed:91:22: f2:ce:03:27:2b:e1:88:55:b9:1e:97:83:e5:c7:05:0a:d6:38: f6:d1:92:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoIRWIFNn7l0TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTQ4OGQyY2YtYjU4Ny00ZjczLWIyZjQtMDZlNGFjNmNjNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibiytVbnuAIDYrjykKWynd7mVxR30Z0s11tM pFOIxhBrLo+et4EkIyn+NCEm/lqjWg/IqjdjzmQb3x32i4HGWPR2KNRpIMhmA7hZ 2U4ibgIwDUlMOumCos6STDkthdtC+SpToj3ULNC6Evh8Zo2IQcqaD49gtpj3jgI0 yrxGovSdM/y2mMTf/CTn0FeEwYbG+qLPufAo8ynaU9N/cTAotd+v6iEAap02Lqg4 0RR8hN9Dople6uJDzLlhyMhR9Tj6D+lGG4q57H7JMm322Pe6qVFDsDPoCV+15NDq fQMPSvC3SPAuU+k64BoImzB6g87Pmuf87PZ207gzIpQNDaSJVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLhuzc3g1qWnaiyaJhYX1RtVvHRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRhODk5YjQtMzIxYS0z NzhhLWEyOWYtMzY0NjllNmFlMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCASjqzR/uYyWgik6V1OzkeprUU0pQSc8ANerJ8 0P3H3M0kUYJnBP2HX0yEPBuEfI3Zm8PxFSrtCmqh9nKbcoIeFdzjM1u9TvinMPWw v4fpm3xWs5UUcZYzC0N4KR0p7rwxvlz33hC771hbFX6vqi3ioijHnZdAteJ9P85R lGHx6QGK5g6V1T/dcNkjv5189gyzK5QJSGL6/gpNSVoq4ZI8RTnc4copLWfY1PGh Vv8JGpUu1UdvhD4CB2EAifNQP/bN/jXr5b269Mj4jHseAsFot/GPsgo3s1epBW9e T+cFtO3GFr1lm5ftkSLyzgMnK+GIVbkel4PlxwUK1jj20ZJx -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:08 2026 by rpki-client