$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa File: 2507be43-2a7b-3cce-91ef-63d17c612842.roa (raw, json) Hash identifier: a6HgFisirPDNm3snbdQYd2wO2t0l2f9yud0EHdFFWrQ= Subject key identifier: 2F:74:E0:DD:D6:7E:CF:CC:30:06:98:5F:1A:FE:96:55:36:42:33:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5802FF05A9C28E25B534 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396595 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:02:ff:05:a9:c2:8e:25:b5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=dc92dc53-28c9-4d2b-a3d0-c0640d87bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:3f:73:bf:76:46:f5:9d:2e:bc:fa:51:48: a3:71:ea:83:4a:1e:82:b0:8a:7e:ed:0d:91:92:a4: e4:0f:4f:f5:07:58:e6:4c:d1:7b:91:c3:40:09:3e: 4d:64:e6:8e:c9:74:65:fc:fa:3b:80:c1:cd:47:af: c5:c1:49:cc:a6:85:66:8c:90:8b:27:03:70:82:30: 4b:c5:64:f9:2f:43:de:18:f2:08:f7:92:29:6f:b6: 99:5d:e3:6f:06:8b:6e:80:43:bb:69:1f:3d:8a:c3: a6:06:ec:65:6b:e3:07:ad:de:be:3a:87:37:58:b9: 95:4d:0f:9f:50:19:d1:87:4f:27:11:c1:16:92:80: 8e:45:83:07:4d:84:19:ee:3a:7c:9d:1e:94:4f:aa: 1f:96:4f:67:23:cf:8b:81:3d:79:65:d8:41:81:b1: d3:01:8f:a3:9e:19:76:cf:d2:b6:3b:99:38:9e:69: 1d:b6:6a:f7:2a:4c:df:4c:75:ef:d4:15:58:08:8d: 2b:fa:c0:7b:14:61:38:0b:f7:6d:03:26:60:76:94: 09:10:0a:9b:cd:29:ad:1d:0e:12:cb:16:54:83:15: a7:d7:75:0c:78:5c:0c:73:31:2e:e5:fc:44:60:8c: 4e:82:b6:74:b0:9f:64:d8:2f:20:2c:48:02:0a:c0: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:74:E0:DD:D6:7E:CF:CC:30:06:98:5F:1A:FE:96:55:36:42:33:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1e:1e:50:de:9c:1a:be:eb:f7:1b:7b:52:4c:6d:a5:cc:8e: 4b:00:dc:ec:54:db:35:a8:28:08:4d:28:64:8b:a4:68:dd:6a: 73:10:48:93:a9:52:07:4b:af:12:2e:87:14:85:af:27:41:4d: 68:85:fb:38:cd:59:a5:d0:73:38:0e:07:a5:52:f8:78:78:55: 56:a1:a3:4e:94:f8:7d:0d:71:57:e1:19:91:45:fb:e8:5e:d1: af:4e:dd:5c:0b:da:71:7e:8b:41:ca:fc:e6:a2:ab:a5:59:f1: 9f:bc:f2:43:4b:7d:1c:1b:da:49:92:e9:d7:04:13:b4:2e:12: 56:6b:d4:70:6c:23:e5:86:b7:6e:c5:0e:07:56:b2:96:c7:28: 65:79:8d:ad:eb:0c:5a:a9:eb:b6:61:70:c9:38:86:89:2c:8e: f9:1a:1f:0d:d0:e2:fe:95:2f:b5:94:05:ba:c3:aa:b5:e0:49: f2:35:19:83:fa:20:a1:6f:1d:6d:26:00:54:d1:14:99:ba:4b: e9:bb:03:1e:fe:54:04:71:28:7c:ae:39:b9:e3:74:f4:72:c9: 59:84:0f:64:a1:07:f5:31:8f:d1:11:1b:e3:cb:da:19:1c:09: 5d:31:35:85:e3:1d:0c:da:ce:06:7d:84:55:36:c3:4f:78:8d: 63:57:ed:29 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lgC/wWpwo4ltTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGM5MmRjNTMtMjhjOS00ZDJiLWEzZDAtYzA2NDBkODdiZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk4/c792RvWdLrz6UUijceqDSh6CsIp+7Q2R kqTkD0/1B1jmTNF7kcNACT5NZOaOyXRl/Po7gMHNR6/FwUnMpoVmjJCLJwNwgjBL xWT5L0PeGPII95Ipb7aZXeNvBotugEO7aR89isOmBuxla+MHrd6+Ooc3WLmVTQ+f UBnRh08nEcEWkoCORYMHTYQZ7jp8nR6UT6oflk9nI8+LgT15ZdhBgbHTAY+jnhl2 z9K2O5k4nmkdtmr3KkzfTHXv1BVYCI0r+sB7FGE4C/dtAyZgdpQJEAqbzSmtHQ4S yxZUgxWn13UMeFwMczEu5fxEYIxOgrZ0sJ9k2C8gLEgCCsDfYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC904N3Wfs/MMAaYXxr+llU2QjN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUwN2JlNDMtMmE3Yi0z Y2NlLTkxZWYtNjNkMTdjNjEyODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWHh5Q3pwavuv3G3tSTG2lzI5LANzsVNs1qCgI TShki6Ro3WpzEEiTqVIHS68SLocUha8nQU1ohfs4zVml0HM4DgelUvh4eFVWoaNO lPh9DXFX4RmRRfvoXtGvTt1cC9pxfotByvzmoqulWfGfvPJDS30cG9pJkunXBBO0 LhJWa9RwbCPlhrduxQ4HVrKWxyhleY2t6wxaqeu2YXDJOIaJLI75Gh8N0OL+lS+1 lAW6w6q14EnyNRmD+iChbx1tJgBU0RSZukvpuwMe/lQEcSh8rjm543T0cslZhA9k oQf1MY/RERvjy9oZHAldMTWF4x0M2s4GfYRVNsNPeI1jV+0p -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:00 2026 by rpki-client