$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: BQDcaKwZRP2ciTB+cLbgPdCeQdR19Fwtzg3lSANLPTQ= Subject key identifier: 6B:62:4B:99:21:C7:00:A3:CD:BF:EC:B7:BE:FC:C7:B0:F7:7C:17:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A2025D17390A8B030FF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:20:25:d1:73:90:a8:b0:30:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4bb91f35-3852-4116-bd28-baec3d23731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:48:58:45:3e:dd:bb:f5:30:cf:3c:23:3e: 4d:89:5a:6c:26:09:d5:9e:ac:f6:d9:9a:1f:90:f0: 18:9f:f7:81:d2:39:71:02:5d:c4:4e:c2:56:78:e1: df:56:e9:4b:df:cb:bd:26:da:38:97:15:11:95:36: 03:bb:23:c8:62:a0:48:73:ef:10:e0:06:a2:59:d5: 4e:2c:08:d9:3c:23:c3:b7:9a:93:98:0d:aa:be:c5: 32:df:50:3b:8f:f9:bc:a9:f9:85:5a:5f:9e:a3:52: 8b:29:bb:c1:cc:44:d6:97:c6:75:9d:c9:bf:96:99: 81:7d:ac:cf:82:0e:10:8d:20:73:d4:1f:fe:38:c2: 24:4f:36:a9:12:97:54:f9:1f:4b:c5:b0:81:ce:83: 8f:5c:de:dd:79:43:50:9d:a2:76:71:e3:b4:43:1f: 4e:be:ce:c4:23:76:8c:d5:64:ac:f8:9c:f8:43:b4: 59:28:ca:9e:e2:94:9d:a4:10:b5:14:ba:5b:38:2d: 8c:8b:76:48:dd:40:bb:01:18:31:89:a4:50:f8:3b: 5b:6a:8f:29:57:ed:ac:27:dc:cd:5c:80:f9:6f:94: 53:4e:c3:2f:a3:a9:40:25:1d:81:dc:58:47:47:31: ff:2c:2d:a6:85:5a:75:0c:ae:81:b1:4a:05:1a:89: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:4B:99:21:C7:00:A3:CD:BF:EC:B7:BE:FC:C7:B0:F7:7C:17:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:74:ab:52:bd:23:30:eb:0d:a0:6b:93:16:97:c5:2b:27:fe: 44:10:53:8a:72:25:93:03:d1:7b:be:3a:ba:10:0b:61:c8:fe: c9:c1:14:13:b2:02:40:b3:77:26:f7:4b:18:6e:bf:fe:10:6c: e4:40:bd:59:6f:f1:0b:5c:fa:f3:28:28:2b:4d:9d:80:e9:b0: 84:79:c1:06:54:b7:3d:17:ef:3c:ef:d4:1c:6c:85:6e:df:65: a0:4f:ee:6d:a9:b6:91:bd:d1:67:96:e9:12:4f:1b:63:a4:2f: e6:f3:f7:b8:f7:13:a8:b0:a7:d7:68:38:6e:4e:2e:2b:d0:2d: dc:0a:35:af:f6:92:18:66:0f:24:48:d1:a5:26:13:19:30:0b: 8b:c1:ba:88:82:a7:8d:b2:9d:b0:2f:09:57:31:98:73:17:38: 21:4f:af:6a:5e:74:6d:8e:d3:cc:de:c2:57:bc:32:eb:55:2b: c8:d2:49:af:be:a1:01:e2:c0:6c:bc:be:56:0f:0f:84:9f:07: 60:e7:6f:7e:eb:75:ff:9e:ca:58:18:0b:1b:6c:c3:94:3b:b1: 9a:bb:c0:97:95:26:55:b1:8a:b0:f2:9c:5f:9d:08:8a:b2:41: 33:d3:cd:38:2b:47:7e:c8:56:e7:39:af:07:67:d6:0b:fe:ab: 29:79:96:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiAl0XOQqLAw/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGJiOTFmMzUtMzg1Mi00MTE2LWJkMjgtYmFlYzNkMjM3MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7xIWEU+3bv1MM88Iz5NiVpsJgnVnqz22Zof kPAYn/eB0jlxAl3ETsJWeOHfVulL38u9Jto4lxURlTYDuyPIYqBIc+8Q4AaiWdVO LAjZPCPDt5qTmA2qvsUy31A7j/m8qfmFWl+eo1KLKbvBzETWl8Z1ncm/lpmBfazP gg4QjSBz1B/+OMIkTzapEpdU+R9LxbCBzoOPXN7deUNQnaJ2ceO0Qx9Ovs7EI3aM 1WSs+Jz4Q7RZKMqe4pSdpBC1FLpbOC2Mi3ZI3UC7ARgxiaRQ+Dtbao8pV+2sJ9zN XID5b5RTTsMvo6lAJR2B3FhHRzH/LC2mhVp1DK6BsUoFGompjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGtiS5khxwCjzb/st778x7D3fBd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHt0q1K9IzDrDaBrkxaXxSsn/kQQU4pyJZMD0Xu+OroQC2HI/snB FBOyAkCzdyb3Sxhuv/4QbORAvVlv8Qtc+vMoKCtNnYDpsIR5wQZUtz0X7zzv1Bxs hW7fZaBP7m2ptpG90WeW6RJPG2OkL+bz97j3E6iwp9doOG5OLivQLdwKNa/2khhm DyRI0aUmExkwC4vBuoiCp42ynbAvCVcxmHMXOCFPr2pedG2O08zewle8MutVK8jS Sa++oQHiwGy8vlYPD4SfB2Dnb37rdf+eylgYCxtsw5Q7sZq7wJeVJlWxirDynF+d CIqyQTPTzTgrR37IVuc5rwdn1gv+qyl5loA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:48 2026 by rpki-client