$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: GqFm3xznOFsv6Jmtv8PJBQlyT2HP6M34TqScFx63WLk= Subject key identifier: C9:24:BF:4F:77:9F:9E:C8:43:C7:C7:8A:7C:95:3F:9A:24:C0:6F:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A373DF95CBD7933A6A480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:37:3d:f9:5c:bd:79:33:a6:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b004cf08-88f5-4a4e-897f-20c72618bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:a2:90:57:0f:e3:98:3a:b0:1f:96:cc:de: 33:cc:c3:e0:fc:5e:0b:77:e6:0c:db:9e:7b:06:81: 2a:7e:d8:1f:0f:73:89:f8:c4:5d:1b:27:6a:a3:04: ca:6a:b1:d6:a5:02:9e:db:44:f1:70:1a:da:23:6f: 30:a9:d8:f4:d3:eb:2b:b0:19:b2:0c:9e:13:b8:30: 42:87:62:ee:4e:d1:c9:71:76:45:54:79:e3:85:e3: 8a:2d:1a:1e:a8:eb:dc:42:a2:7e:12:5f:cd:f4:04: f6:87:c7:ef:e3:c1:d0:eb:64:ca:bb:99:0d:c3:21: 0e:12:76:9a:77:b0:ec:9e:00:70:da:9d:32:03:2a: 83:be:5a:f7:13:45:28:74:d1:f6:07:01:34:5f:d8: de:7a:d4:1e:e3:9e:06:1d:a1:86:e8:29:71:33:de: 5e:2f:e5:65:f2:b9:a4:74:03:7f:e0:f7:65:b7:fa: 11:37:71:cc:0f:41:c7:39:fa:e8:f6:be:70:b0:14: 8c:82:4d:7d:74:6a:7e:e8:8e:ab:25:0e:4d:f1:bd: 80:0a:76:07:19:60:f1:3c:96:78:b3:d5:df:32:f5: 74:dd:38:1b:b1:12:8f:5f:91:f4:38:e2:96:d6:c0: 57:ec:ab:73:c9:33:04:df:02:b9:da:dc:a5:da:66: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:BF:4F:77:9F:9E:C8:43:C7:C7:8A:7C:95:3F:9A:24:C0:6F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ff:5b:b2:01:56:c3:b9:5f:82:50:d2:82:c1:20:16:c2:f1: 2c:a6:4f:15:3d:c2:28:51:70:5a:fd:30:08:f2:13:af:ea:8d: d7:c6:33:cf:8f:1b:b9:2d:aa:8d:51:f9:d0:4e:15:04:1d:d1: 73:73:ff:ab:74:0f:d4:3a:4c:d2:ca:63:10:ad:69:15:a0:c0: b3:26:a8:9d:ad:7f:fd:8e:b5:03:c4:5a:a1:0a:81:48:a7:c6: 0d:60:79:7f:01:c9:1c:d1:0a:cb:cf:5b:63:33:b7:9c:a0:cd: 26:3d:21:a9:af:2c:62:24:d5:27:d9:50:3f:27:57:31:6a:bb: 13:3a:79:42:b1:d8:c8:59:0e:7c:c4:b6:d1:cb:1c:3c:6c:cf: 41:da:d7:08:87:bb:a2:0f:cc:aa:b4:6a:fc:87:d6:39:37:f9: 00:d2:0f:2f:ad:17:64:cd:8d:55:8a:96:74:26:b4:2f:3a:b1: 1c:54:08:29:13:6c:98:a1:73:f7:24:fe:dc:86:cd:f2:08:4b: c6:a2:29:ad:43:fd:c8:5f:ab:bd:69:51:74:85:62:cb:41:06: 05:8c:6f:da:bb:20:62:1f:24:ca:f7:21:7f:7d:cd:c7:75:93: 3c:ab:ea:19:44:0e:ad:67:1e:ba:41:43:66:3e:e3:ec:ec:fd: ce:14:a9:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jejc9+Vy9eTOmpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjAwNGNmMDgtODhmNS00YTRlLTg5N2YtMjBjNzI2MThiZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIaikFcP45g6sB+WzN4zzMPg/F4Ld+YM2557 BoEqftgfD3OJ+MRdGydqowTKarHWpQKe20TxcBraI28wqdj00+srsBmyDJ4TuDBC h2LuTtHJcXZFVHnjheOKLRoeqOvcQqJ+El/N9AT2h8fv48HQ62TKu5kNwyEOEnaa d7DsngBw2p0yAyqDvlr3E0UodNH2BwE0X9jeetQe454GHaGG6ClxM95eL+Vl8rmk dAN/4Pdlt/oRN3HMD0HHOfro9r5wsBSMgk19dGp+6I6rJQ5N8b2ACnYHGWDxPJZ4 s9XfMvV03TgbsRKPX5H0OOKW1sBX7KtzyTME3wK52tyl2maxfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkkv093n57IQ8fHinyVP5okwG/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFr/W7IBVsO5X4JQ0oLBIBbC8SymTxU9wihRcFr9MAjyE6/qjdfG M8+PG7ktqo1R+dBOFQQd0XNz/6t0D9Q6TNLKYxCtaRWgwLMmqJ2tf/2OtQPEWqEK gUinxg1geX8ByRzRCsvPW2Mzt5ygzSY9IamvLGIk1SfZUD8nVzFquxM6eUKx2MhZ DnzEttHLHDxsz0Ha1wiHu6IPzKq0avyH1jk3+QDSDy+tF2TNjVWKlnQmtC86sRxU CCkTbJihc/ck/tyGzfIIS8aiKa1D/chfq71pUXSFYstBBgWMb9q7IGIfJMr3IX99 zcd1kzyr6hlEDq1nHrpBQ2Y+4+zs/c4Uqdc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:46 2026 by rpki-client