$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa File: 2a7f4f5d-25b7-34af-abe4-a02329037e69.roa (raw, json) Hash identifier: 5ubQu1QxIoZVNYenS8kJ1agKX8KXftGvL2eQxRq50iM= Subject key identifier: F7:C1:E6:93:D2:30:B1:75:87:FE:BD:96:47:A3:3B:48:12:85:9D:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B3C14D90EF5FEBAFF2B4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 36630 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b3:c1:4d:90:ef:5f:eb:af:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=768c7c5e-43eb-436d-a5f8-429a439deb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:0e:42:80:ab:a5:19:65:c4:e9:7a:b8:f4: be:77:fd:e8:17:4c:d4:d3:ac:79:1c:be:0f:b9:88: 7b:a8:2a:4a:af:64:48:be:7c:cc:a0:8f:36:09:5e: 32:06:3c:24:5e:77:69:c5:cf:c2:6f:f3:56:48:83: bb:8b:03:ad:79:61:7c:6c:c7:18:a6:70:cf:81:e1: 4e:84:05:2a:ff:43:23:51:37:27:9c:85:5e:71:3f: 75:89:62:d9:b3:b4:90:dd:5e:31:75:57:da:f7:91: 01:f9:9b:30:07:b9:ec:ca:c5:15:c6:30:2e:dd:c5: 4b:ae:86:60:8d:bd:46:3b:2d:3c:bc:ce:b8:95:f1: c1:8c:85:ec:2d:4b:8e:fd:6e:90:f7:54:77:24:81: 6a:ee:eb:07:28:4a:a6:d0:68:2b:8d:f7:77:48:3c: f8:09:d6:64:f7:4f:10:70:5b:76:37:98:34:c6:7c: 95:f6:36:9e:8e:92:e7:5b:11:84:c6:f2:0d:46:ee: 2e:09:42:b3:08:31:2e:3a:f4:6f:b3:b2:b0:32:73: 31:c9:da:63:f8:56:5d:3a:1b:bc:d5:0f:35:04:f3: fb:1c:af:5d:24:6f:1c:cf:19:e5:5a:61:6e:40:74: f4:74:95:db:b5:83:8a:05:8e:af:d3:40:6c:93:13: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:E6:93:D2:30:B1:75:87:FE:BD:96:47:A3:3B:48:12:85:9D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:23:fc:c5:e9:ca:e8:d9:79:6d:60:e4:4d:f5:3e:46:cb:60: 96:30:93:58:ba:c3:ab:f5:21:38:67:52:63:e1:6f:67:0a:46: c1:aa:a4:26:53:0f:b5:70:66:9b:fa:2b:77:29:41:6e:6a:30: 03:98:30:06:b4:07:60:62:ad:29:fe:e5:72:32:27:1c:26:db: b5:ac:dd:a7:a7:42:18:bf:92:ae:2e:ad:5c:ec:69:06:85:6a: 92:b0:c0:c5:50:f8:01:7c:5d:eb:a6:a0:d0:c3:db:b3:53:ed: 52:5b:ca:0b:3d:f4:51:f7:90:be:93:96:8e:6b:ef:18:ff:e8: 5c:76:fb:7e:5b:63:0f:11:c6:0c:63:4c:4b:a3:4c:ed:a2:55: 11:e4:d5:74:a0:06:ed:4b:fc:27:6d:c1:e6:d0:72:7a:af:50: 6b:28:4b:48:37:4a:38:cf:55:23:79:76:c5:b6:d6:65:ca:55: f5:ae:4e:57:47:ac:a3:f4:6f:29:68:29:3d:64:23:88:5b:49: c8:18:79:4a:c0:98:40:c9:ba:0b:fb:11:40:68:e9:7f:95:dd: ba:e3:cc:a5:9d:10:8f:b3:85:ca:1e:9b:e3:8c:d7:6d:9a:e7: 00:b9:cd:c3:db:c0:2e:85:39:11:32:29:b7:56:27:d6:ea:67: f2:27:99:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bPBTZDvX+uv8rQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk NzY4YzdjNWUtNDNlYi00MzZkLWE1ZjgtNDI5YTQzOWRlYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMgOQoCrpRllxOl6uPS+d/3oF0zU06x5HL4P uYh7qCpKr2RIvnzMoI82CV4yBjwkXndpxc/Cb/NWSIO7iwOteWF8bMcYpnDPgeFO hAUq/0MjUTcnnIVecT91iWLZs7SQ3V4xdVfa95EB+ZswB7nsysUVxjAu3cVLroZg jb1GOy08vM64lfHBjIXsLUuO/W6Q91R3JIFq7usHKEqm0Ggrjfd3SDz4CdZk908Q cFt2N5g0xnyV9jaejpLnWxGExvINRu4uCUKzCDEuOvRvs7KwMnMxydpj+FZdOhu8 1Q81BPP7HK9dJG8czxnlWmFuQHT0dJXbtYOKBY6v00BskxMl4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPfB5pPSMLF1h/69lkejO0gShZ2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE3ZjRmNWQtMjViNy0z NGFmLWFiZTQtYTAyMzI5MDM3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQj/MXpyujZeW1g5E31PkbLYJYwk1i6w6v1IThnUmPhb2cKRsGq pCZTD7VwZpv6K3cpQW5qMAOYMAa0B2BirSn+5XIyJxwm27Ws3aenQhi/kq4urVzs aQaFapKwwMVQ+AF8XeumoNDD27NT7VJbygs99FH3kL6Tlo5r7xj/6Fx2+35bYw8R xgxjTEujTO2iVRHk1XSgBu1L/CdtwebQcnqvUGsoS0g3SjjPVSN5dsW21mXKVfWu TldHrKP0byloKT1kI4hbScgYeUrAmEDJugv7EUBo6X+V3brjzKWdEI+zhcoem+OM 122a5wC5zcPbwC6FOREyKbdWJ9bqZ/InmSY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:01 2026 by rpki-client