$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa File: 2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa (raw, json) Hash identifier: kX4vCRginNdim4enXgKLer7rgJEsbk7PhBVNGjsh7YE= Subject key identifier: AA:D7:BC:BC:68:2A:26:80:A8:44:BC:42:0C:D1:DD:91:25:CF:DA:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5AF2E40C5E35551494A4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396587 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5a:f2:e4:0c:5e:35:55:14:94:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b4daa09a-323f-4213-b28f-7cc4d9f93a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:a0:81:e2:2e:19:c9:3a:bc:e7:be:5a:36: 16:40:d7:18:4f:a4:c1:62:3d:ba:94:b3:80:4d:51: d6:7c:92:76:0a:70:79:b1:63:ef:27:6c:cf:e1:2b: c0:53:3d:e6:df:60:1a:be:f4:da:57:92:df:87:b7: f8:d6:b2:d5:bb:0d:37:86:3b:10:9d:90:46:7e:35: 7e:7e:a8:b1:01:c5:c3:ab:0d:90:0c:15:74:16:40: 21:d9:49:30:9e:54:9b:9b:86:2b:11:83:c4:6b:a7: 18:21:b9:32:0a:54:a3:10:86:01:0c:19:cd:a4:f3: ab:51:65:64:68:f5:ac:37:91:98:51:6c:9d:5f:50: cf:8c:a1:0b:32:dd:e2:97:6d:64:4b:d9:22:24:6c: 10:ef:3a:08:fc:7e:62:2c:18:6b:31:7b:54:1f:14: a4:88:bf:e1:43:ca:79:66:a7:fc:13:b4:aa:e2:f1: af:ba:60:f2:f9:60:79:bb:64:02:df:94:b2:2b:69: 4e:8d:6a:03:1e:5f:59:f3:91:d2:ef:11:f5:b1:f0: d3:68:11:94:90:ff:5b:c5:ae:8e:1c:a9:fe:3b:50: 60:d7:01:33:37:01:51:7a:65:6b:1c:0a:b3:ba:58: 0b:ff:f1:78:be:41:c3:75:4e:a0:c0:49:cb:f8:af: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:BC:BC:68:2A:26:80:A8:44:BC:42:0C:D1:DD:91:25:CF:DA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2880ef4e-bed0-319b-a093-9a3cf6cc57d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:42:72:f1:2e:cf:00:ac:31:5e:91:62:ee:8a:6a:5f:a8:a6: a1:19:09:b7:a5:2c:b0:52:be:26:4d:79:7e:d8:17:46:86:45: 7e:a0:99:f1:eb:0d:c0:0a:5e:f8:74:c1:0d:d5:85:2c:0e:52: be:ea:82:d0:b9:ec:2d:f2:8a:06:ad:27:81:a1:41:19:a3:f3: 93:71:c6:18:c4:4f:fa:b9:33:81:f3:c1:a8:cc:d3:e0:43:23: b8:dd:28:f4:00:82:a3:06:b0:ed:59:38:bd:92:0b:83:f5:95: c7:0e:c2:80:84:72:14:98:a5:9f:31:47:36:21:94:be:88:63: e1:0c:8c:75:1e:67:04:28:3d:6e:c7:26:0c:ca:1d:9d:e4:fc: b4:a0:cb:e9:a8:51:c2:00:cb:51:d5:b0:24:3b:13:9a:d7:69: 11:7b:c5:3b:f1:56:11:64:f1:6d:f1:44:3e:32:5d:ac:68:0e: 2e:d9:7c:60:89:be:ca:35:5f:95:63:75:aa:02:4c:28:d5:f3: 28:e5:bb:f4:07:7a:88:39:e6:0c:27:83:56:a6:14:ae:85:63: e9:cf:a1:4f:bb:77:2e:a9:94:0a:3b:5f:34:80:6b:d7:a9:c3: a4:b7:95:2a:ea:a5:97:ee:38:61:32:9c:5d:81:73:41:09:d6: 32:23:fa:37 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lry5AxeNVUUlKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjRkYWEwOWEtMzIzZi00MjEzLWIyOGYtN2NjNGQ5ZjkzYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwuggeIuGck6vOe+WjYWQNcYT6TBYj26lLOA TVHWfJJ2CnB5sWPvJ2zP4SvAUz3m32AavvTaV5Lfh7f41rLVuw03hjsQnZBGfjV+ fqixAcXDqw2QDBV0FkAh2UkwnlSbm4YrEYPEa6cYIbkyClSjEIYBDBnNpPOrUWVk aPWsN5GYUWydX1DPjKELMt3il21kS9kiJGwQ7zoI/H5iLBhrMXtUHxSkiL/hQ8p5 Zqf8E7Sq4vGvumDy+WB5u2QC35SyK2lOjWoDHl9Z85HS7xH1sfDTaBGUkP9bxa6O HKn+O1Bg1wEzNwFRemVrHAqzulgL//F4vkHDdU6gwEnL+K9AHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKrXvLxoKiaAqES8QgzR3ZElz9oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg4MGVmNGUtYmVkMC0z MTliLWEwOTMtOWEzY2Y2Y2M1N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmQnLxLs8ArDFekWLuimpfqKahGQm3pSywUr4m TXl+2BdGhkV+oJnx6w3ACl74dMEN1YUsDlK+6oLQuewt8ooGrSeBoUEZo/OTccYY xE/6uTOB88GozNPgQyO43Sj0AIKjBrDtWTi9kguD9ZXHDsKAhHIUmKWfMUc2IZS+ iGPhDIx1HmcEKD1uxyYMyh2d5Py0oMvpqFHCAMtR1bAkOxOa12kRe8U78VYRZPFt 8UQ+Ml2saA4u2Xxgib7KNV+VY3WqAkwo1fMo5bv0B3qIOeYMJ4NWphSuhWPpz6FP u3cuqZQKO180gGvXqcOkt5Uq6qWX7jhhMpxdgXNBCdYyI/o3 -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:48 2026 by rpki-client