$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa File: 2845693f-03a7-31df-95a9-5c15c210d138.roa (raw, json) Hash identifier: 23Q3hvixLMVhRcdsEzWpMoRef9CaBfP2DuZknKjsmZA= Subject key identifier: DB:2D:7A:AD:B1:5A:6D:CD:C2:74:78:C1:CA:A3:83:D1:BE:D8:8D:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA528674B0536DFFB2BA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 36631 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:52:86:74:b0:53:6d:ff:b2:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=704f979e-870b-4ef0-b2a6-d926c81043b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e5:9d:aa:3e:05:72:10:6b:a0:4a:25:b1:fd: b9:4f:fa:d4:47:b8:f3:a7:68:90:08:3f:66:ee:15: d8:c7:2b:65:0c:e8:c6:92:22:ed:fa:99:55:5b:83: 7e:ca:46:52:bd:44:d3:f3:11:df:81:b2:c8:e1:f5: bc:32:06:ca:1f:a4:f2:3f:37:56:b7:6e:90:cd:8a: 53:9d:fd:74:0a:12:2a:aa:fb:55:73:1a:f4:e1:f1: 81:0a:cb:e1:18:af:32:1d:8f:9a:8f:4e:56:52:ec: 78:6f:98:e5:fe:1f:8c:e5:8b:69:cb:45:3c:ed:ff: 6d:09:0a:47:96:59:ac:36:1e:5d:49:6a:53:28:36: a2:36:f9:2d:ab:9c:03:9c:ab:0f:3b:64:9f:30:58: 3b:d6:63:08:51:ad:ae:62:32:4d:48:00:d5:38:ae: cf:79:9a:38:b3:f6:d7:5e:1a:5c:d3:b8:75:42:46: ea:70:f0:77:92:ad:54:d6:09:f1:32:e3:ca:25:3a: 91:d6:c1:aa:2c:c8:51:1b:26:99:f2:27:da:8d:db: 28:69:63:e3:bd:57:31:a4:c6:62:67:06:41:d3:78: 39:33:91:03:5a:ac:41:27:17:82:c5:96:b8:bf:d6: 61:52:39:91:53:f2:56:f7:74:cc:02:23:dc:d5:64: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2D:7A:AD:B1:5A:6D:CD:C2:74:78:C1:CA:A3:83:D1:BE:D8:8D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2845693f-03a7-31df-95a9-5c15c210d138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b7:28:4c:89:d7:e6:9f:f8:d0:cd:0d:b3:5c:36:d9:42:cf: c2:bb:1c:87:29:f7:94:5d:f4:c9:db:ae:52:0a:3e:42:36:22: ce:1b:a9:d8:6e:6f:9a:98:ff:9e:79:6d:95:57:89:2b:2f:fb: 2b:19:f8:76:fe:fe:6e:52:38:3b:5c:ce:7a:f8:62:90:34:22: ac:3b:fb:c7:8f:a8:74:73:0c:3c:76:ae:31:0d:42:e5:8a:5c: 9e:c9:e0:9f:1d:8b:e9:bf:1a:d4:14:a9:6c:0c:40:ea:24:15: 06:9c:7d:c2:8c:ba:6a:e7:bb:3b:e6:7b:97:b9:3d:3b:41:f4: e9:0d:e5:08:42:23:02:0d:31:07:38:b5:44:7a:0b:ee:de:79: 28:b0:f2:c1:2e:8b:f7:51:15:8d:7f:7c:0b:3b:36:cc:60:3a: cb:01:73:9b:fb:f2:d4:1a:6d:76:7e:8b:ae:44:50:85:9b:cc: 09:15:09:c1:d0:94:9d:92:c7:13:8e:e5:b3:0a:fc:e1:be:27: 1a:5c:79:66:df:5e:d3:73:ac:9e:9d:36:64:0b:69:ba:ea:28: b2:e4:46:65:74:04:d4:f8:0f:8b:3f:2c:9d:e0:ed:29:ac:58: 09:d3:60:1b:db:67:0c:9d:eb:c7:65:37:e9:a2:22:a7:fd:6e: cf:35:54:37 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lKGdLBTbf+yuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzA0Zjk3OWUtODcwYi00ZWYwLWIyYTYtZDkyNmM4MTA0M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Wdqj4FchBroEolsf25T/rUR7jzp2iQCD9m 7hXYxytlDOjGkiLt+plVW4N+ykZSvUTT8xHfgbLI4fW8MgbKH6TyPzdWt26QzYpT nf10ChIqqvtVcxr04fGBCsvhGK8yHY+aj05WUux4b5jl/h+M5Ytpy0U87f9tCQpH llmsNh5dSWpTKDaiNvktq5wDnKsPO2SfMFg71mMIUa2uYjJNSADVOK7PeZo4s/bX Xhpc07h1QkbqcPB3kq1U1gnxMuPKJTqR1sGqLMhRGyaZ8ifajdsoaWPjvVcxpMZi ZwZB03g5M5EDWqxBJxeCxZa4v9ZhUjmRU/JW93TMAiPc1WTZJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNsteq2xWm3NwnR4wcqjg9G+2I28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NTY5M2YtMDNhNy0z MWRmLTk1YTktNWMxNWMyMTBkMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKtyhMidfmn/jQzQ2zXDbZQs/CuxyHKfeUXfTJ 265SCj5CNiLOG6nYbm+amP+eeW2VV4krL/srGfh2/v5uUjg7XM56+GKQNCKsO/vH j6h0cww8dq4xDULlilyeyeCfHYvpvxrUFKlsDEDqJBUGnH3CjLpq57s75nuXuT07 QfTpDeUIQiMCDTEHOLVEegvu3nkosPLBLov3URWNf3wLOzbMYDrLAXOb+/LUGm12 fouuRFCFm8wJFQnB0JSdkscTjuWzCvzhvicaXHlm317Tc6yenTZkC2m66iiy5EZl dATU+A+LPyyd4O0prFgJ02Ab22cMnevHZTfpoiKn/W7PNVQ3 -----END CERTIFICATE-----Generated at Thu Mar 26 23:18:17 2026 by rpki-client