$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bc59d13-bdbf-39bb-b919-178d0e3c5d91.roa File: 2bc59d13-bdbf-39bb-b919-178d0e3c5d91.roa (raw, json) Hash identifier: SCEOaqEFc1DyIisUFLDUkFRK3rVsGOyZc8kCIKeORqg= Subject key identifier: D3:E7:5B:85:19:24:72:78:01:1B:09:E4:86:81:FB:62:A8:36:3F:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B2EFB880E64022B76C60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bc59d13-bdbf-39bb-b919-178d0e3c5d91.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396615 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b2:ef:b8:80:e6:40:22:b7:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=2a146afc-1754-4e97-b642-e196e7419a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:9b:71:3b:0f:92:32:35:b7:58:ff:dd:3f: db:ee:97:ce:c1:92:be:dc:2f:97:9c:ab:b2:9c:3a: 21:24:39:18:f2:30:e6:5c:6a:86:5f:17:c0:b0:9b: af:2f:7b:85:4c:45:74:19:53:66:f4:b6:e0:6c:cc: 1f:81:ef:fb:ad:be:46:00:9d:a7:f8:ce:b1:2d:b5: 05:be:7a:1a:44:0a:48:3f:05:21:62:43:95:c7:39: 66:43:22:1a:75:eb:aa:42:8a:ad:54:db:8d:33:0f: d3:53:df:90:8f:ed:24:91:30:d9:39:eb:84:04:de: 52:b1:bb:02:76:25:21:d0:7c:41:b8:61:8f:7e:cd: 9f:8c:f9:47:ea:e1:18:17:06:d2:c0:6c:5d:89:e4: ae:0c:ce:3f:b5:e3:eb:7c:b7:61:09:5e:f0:91:4c: 08:04:9d:da:61:31:73:ff:60:c3:fc:71:8b:61:3a: bf:74:47:97:95:85:d2:58:10:83:de:90:17:f3:67: 0e:01:cc:39:93:f6:d6:cb:61:05:13:09:07:20:64: cc:6e:b8:32:fa:e5:29:6c:06:a9:1f:40:d2:bb:a6: 03:f6:3f:f6:da:d7:74:4e:d8:ff:ae:c3:d8:a9:2b: 7e:1f:38:a8:cc:48:3d:9a:3f:4d:50:88:f3:b7:72: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:5B:85:19:24:72:78:01:1B:09:E4:86:81:FB:62:A8:36:3F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bc59d13-bdbf-39bb-b919-178d0e3c5d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8f:5b:8d:c8:ff:90:9f:9c:99:be:d0:d5:2f:18:56:7a:5e: 4e:40:7f:70:b8:a9:35:4c:70:3a:7c:fc:08:2d:4e:68:3e:56: cc:28:80:48:83:84:9c:f3:93:75:bd:44:d5:43:2e:a2:50:75: 8e:15:a8:c5:35:c4:8d:37:96:51:bc:e8:ba:e6:39:f8:7a:a1: b7:0f:7e:36:c1:84:8e:93:bc:7a:df:0d:fc:8c:09:23:e2:a3: e0:fc:7f:48:b3:27:c3:2f:25:e2:7c:9e:c7:f2:77:b4:d8:3c: 80:28:f2:c2:39:b8:0c:51:db:b8:1a:01:2a:5b:9e:e5:76:a2: 75:7d:6a:de:c5:a6:7b:c8:40:95:c0:84:7e:fe:b5:13:9e:15: f1:7e:6f:a1:77:b5:53:76:53:6a:4d:91:d8:34:ac:e9:06:e5: d1:74:5e:11:ec:b4:f6:e1:48:a5:e8:68:e5:4c:35:ca:f8:cb: f2:ae:64:30:80:37:91:62:bb:ba:b9:64:f3:16:20:fa:b6:12: 7f:72:56:11:9a:ac:9e:29:78:53:7a:62:31:58:44:25:27:46: 34:03:0e:7c:a2:98:fb:5e:b9:0c:9b:c2:77:ee:a3:a2:86:fa: 3d:0f:27:46:cc:9b:1c:8b:19:a1:9a:fe:77:20:af:50:5f:53: 20:20:9b:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErLvuIDmQCK3bGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmExNDZhZmMtMTc1NC00ZTk3LWI2NDItZTE5NmU3NDE5YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouGbcTsPkjI1t1j/3T/b7pfOwZK+3C+XnKuy nDohJDkY8jDmXGqGXxfAsJuvL3uFTEV0GVNm9LbgbMwfge/7rb5GAJ2n+M6xLbUF vnoaRApIPwUhYkOVxzlmQyIadeuqQoqtVNuNMw/TU9+Qj+0kkTDZOeuEBN5SsbsC diUh0HxBuGGPfs2fjPlH6uEYFwbSwGxdieSuDM4/tePrfLdhCV7wkUwIBJ3aYTFz /2DD/HGLYTq/dEeXlYXSWBCD3pAX82cOAcw5k/bWy2EFEwkHIGTMbrgy+uUpbAap H0DSu6YD9j/22td0Ttj/rsPYqSt+HziozEg9mj9NUIjzt3JeFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPnW4UZJHJ4ARsJ5IaB+2KoNj/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJjNTlkMTMtYmRiZi0z OWJiLWI5MTktMTc4ZDBlM2M1ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiPW43I/5CfnJm+0NUvGFZ6Xk5Af3C4qTVMcDp8/AgtTmg+Vswo gEiDhJzzk3W9RNVDLqJQdY4VqMU1xI03llG86LrmOfh6obcPfjbBhI6TvHrfDfyM CSPio+D8f0izJ8MvJeJ8nsfyd7TYPIAo8sI5uAxR27gaASpbnuV2onV9at7FpnvI QJXAhH7+tROeFfF+b6F3tVN2U2pNkdg0rOkG5dF0XhHstPbhSKXoaOVMNcr4y/Ku ZDCAN5Fiu7q5ZPMWIPq2En9yVhGarJ4peFN6YjFYRCUnRjQDDnyimPteuQybwnfu o6KG+j0PJ0bMmxyLGaGa/ncgr1BfUyAgmwo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:41 2026 by rpki-client