$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa File: 29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa (raw, json) Hash identifier: 0dk8hF4zxJYI3ruO8nrJhPMEac8Ah68HIfCntK/6mz0= Subject key identifier: A9:09:35:F3:E2:72:63:C6:CB:CE:D1:1D:C4:C7:B8:B7:93:49:3C:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A0A53F70DB1F7CDB23C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396562 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0a:53:f7:0d:b1:f7:cd:b2:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=c6f0a4c8-f7a2-41f8-bf1a-7a7d458306cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:35:e9:9c:e9:56:e1:18:98:39:b2:25:a5: 6d:ad:4b:fc:af:95:bb:61:86:4c:08:0e:50:a7:c6: f1:93:bb:4a:c9:d1:3c:83:04:c2:85:88:db:f4:41: 8d:3d:ba:1b:c0:9e:39:c4:6b:49:10:32:cb:10:78: f8:92:33:56:2a:c8:12:40:42:5d:13:cf:4e:45:06: 5c:18:51:b7:ff:00:80:3a:c2:d4:ff:15:4c:99:dc: 07:ed:60:ce:ce:d3:42:e2:11:25:32:f8:f9:8f:f0: 55:20:84:b3:5c:ef:bf:ad:45:91:f6:4a:16:87:c6: 06:8c:e3:22:89:8f:45:7f:17:dd:d3:b4:cb:42:17: 9c:d1:a9:f8:12:2b:cc:78:51:76:25:03:a8:3f:14: 3a:79:ad:6e:8a:b7:e4:b5:80:80:64:b0:cb:d5:7d: 0c:0b:26:54:dd:48:f8:6c:2c:93:4d:e6:05:09:02: 0c:da:5c:39:60:ac:a1:39:86:f1:9a:ce:f5:2a:04: 69:4d:d3:9e:2d:83:61:56:47:45:0f:0c:9d:bc:23: d0:32:0b:26:cb:a5:5b:cc:2b:1c:d2:87:03:2b:15: 72:96:f4:af:f8:fe:d5:36:3d:f3:c9:33:ed:28:e5: 4b:00:fe:3e:b4:20:30:e3:45:3f:be:5d:b9:31:4c: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:35:F3:E2:72:63:C6:CB:CE:D1:1D:C4:C7:B8:B7:93:49:3C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29d3f06c-490b-3100-8cb2-1f58adaa91a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9e:75:d0:a6:b1:4b:2d:cc:12:61:3a:35:8d:54:4d:d8:83: 8c:b3:f0:24:de:33:52:84:f4:3f:3e:79:7b:a0:c9:74:4a:50: 5e:6c:e7:6b:a6:c8:2f:29:85:cc:e2:d7:2c:9a:1d:95:99:90: 45:87:77:13:34:0b:db:b5:9f:1f:d9:20:f5:e1:4f:38:3a:5d: 30:60:55:66:32:84:33:c3:33:2e:cd:c8:c7:61:05:58:f3:2f: 32:32:8b:bd:3f:68:09:dd:52:c9:c1:35:34:c1:10:b5:d1:f0: 3b:03:aa:90:86:22:2a:00:58:d3:25:f3:21:d1:8d:17:de:80: 70:b4:8f:3f:d6:74:0e:1f:bb:e8:08:7f:f1:b9:a7:62:5b:9f: f2:7a:87:d3:25:38:04:3a:c2:be:38:d2:81:9b:ed:b7:9e:7e: 32:47:2d:52:9e:e4:b6:9c:50:8a:c4:54:96:c9:b9:28:0a:8d: 18:34:ef:fc:76:3f:68:2a:4d:85:97:83:6f:cb:81:5a:a6:a7: 43:eb:dc:67:2f:27:52:8c:a0:e9:9b:95:09:8a:6e:c0:91:bf: 8e:78:cb:b7:6f:90:73:f4:58:a5:6d:e0:51:96:18:ce:79:6e: 9c:3a:fb:09:78:39:3d:4f:32:16:7a:2f:49:90:b5:27:02:56: 2e:e5:a4:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jegpT9w2x982yPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YzZmMGE0YzgtZjdhMi00MWY4LWJmMWEtN2E3ZDQ1ODMwNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O416ZzpVuEYmDmyJaVtrUv8r5W7YYZMCA5Q p8bxk7tKydE8gwTChYjb9EGNPbobwJ45xGtJEDLLEHj4kjNWKsgSQEJdE89ORQZc GFG3/wCAOsLU/xVMmdwH7WDOztNC4hElMvj5j/BVIISzXO+/rUWR9koWh8YGjOMi iY9Ffxfd07TLQhec0an4EivMeFF2JQOoPxQ6ea1uirfktYCAZLDL1X0MCyZU3Uj4 bCyTTeYFCQIM2lw5YKyhOYbxms71KgRpTdOeLYNhVkdFDwydvCPQMgsmy6VbzCsc 0ocDKxVylvSv+P7VNj3zyTPtKOVLAP4+tCAw40U/vl25MUwA0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKkJNfPicmPGy87RHcTHuLeTSTxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjlkM2YwNmMtNDkwYi0z MTAwLThjYjItMWY1OGFkYWE5MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGeddCmsUstzBJhOjWNVE3Yg4yz8CTeM1KE9D8+eXugyXRKUF5s 52umyC8phczi1yyaHZWZkEWHdxM0C9u1nx/ZIPXhTzg6XTBgVWYyhDPDMy7NyMdh BVjzLzIyi70/aAndUsnBNTTBELXR8DsDqpCGIioAWNMl8yHRjRfegHC0jz/WdA4f u+gIf/G5p2Jbn/J6h9MlOAQ6wr440oGb7beefjJHLVKe5LacUIrEVJbJuSgKjRg0 7/x2P2gqTYWXg2/LgVqmp0Pr3GcvJ1KMoOmblQmKbsCRv454y7dvkHP0WKVt4FGW GM55bpw6+wl4OT1PMhZ6L0mQtScCVi7lpJA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:51 2026 by rpki-client