$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa File: 2fd9995d-d24f-36f9-901e-64486071bed4.roa (raw, json) Hash identifier: zXqkbreQTku5x58qcDZfJFnvMx3D+Bg77Q99vXKOMxE= Subject key identifier: 98:10:4A:84:B0:19:C0:0E:C2:82:79:E1:B4:41:E2:47:1C:64:AA:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B1E24B6CF14551FC4F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396543 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b1:e2:4b:6c:f1:45:51:fc:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=325674b2-c095-4137-9bd2-ca6cc86b404b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:d0:0a:ea:92:66:d5:bf:dd:ee:24:11:1a: bf:12:1d:fd:10:c8:97:e8:10:51:30:53:ad:73:c1: 97:6c:0d:f3:4b:21:07:e8:16:46:47:67:fe:ea:91: 33:27:53:92:39:c0:92:73:09:2f:12:52:26:af:32: 56:9c:d0:dc:66:fd:f5:46:6d:5f:6b:dc:25:8b:47: da:91:cd:90:37:db:ec:ab:aa:bd:1a:1e:31:0e:0a: 08:f9:0e:7e:dc:f7:fd:0c:c3:82:f9:c4:3e:8e:8f: 88:b7:b9:ce:c5:f4:4e:57:c7:05:ba:d0:ac:ee:fe: b1:5a:80:d0:f3:82:2e:22:e3:ea:86:e7:1d:86:b8: 4b:49:87:be:3e:ef:8f:ce:61:fc:6c:21:c0:a6:9d: 05:0f:ef:fa:34:d5:b5:53:4b:19:ad:92:44:1f:15: 81:12:26:ab:aa:1d:f8:79:6b:85:6b:b9:1f:65:59: f3:eb:30:87:8c:95:03:4b:75:b4:12:7f:cc:61:1d: 35:19:79:bc:7d:37:e4:a3:51:4b:47:6e:9c:bb:09: d2:ae:f0:61:52:3e:e5:74:70:74:2b:59:af:e4:ee: 3a:a0:bd:99:57:de:3e:6e:df:d9:4a:ff:a6:43:be: ef:6a:cc:33:24:8f:32:59:72:02:50:ea:39:a0:fc: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:10:4A:84:B0:19:C0:0E:C2:82:79:E1:B4:41:E2:47:1C:64:AA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:63:28:ca:2a:2d:dd:14:dc:60:76:c8:04:cb:cd:ba:bf:d0: 7c:eb:12:b9:7a:42:61:de:77:c9:5f:ed:f2:a4:6c:f4:df:c2: 89:58:99:04:e8:43:fa:ff:3e:7b:bf:7f:02:11:8a:fa:64:47: b5:37:57:34:e0:8a:84:e1:b5:83:3d:90:24:cd:c0:ec:05:10: 6a:c7:67:23:42:12:e5:5b:03:54:f7:62:cb:27:ea:c8:4f:3b: 20:8b:dd:8e:c7:87:a7:ff:7f:e7:b9:49:f8:90:60:80:68:ff: 86:8c:ea:3a:33:fb:2b:10:de:6e:7e:65:eb:ee:0f:04:0e:39: c7:52:2b:85:7d:6a:5e:b2:82:2e:67:34:c3:66:e9:08:06:09: ab:b7:4e:5d:0e:22:e3:68:ae:98:18:42:75:d7:79:68:8f:d0: 4f:37:1d:c5:1a:f7:ae:50:93:42:32:36:ec:54:d1:61:81:56: 3a:b6:24:6b:13:34:94:50:fa:60:83:4c:60:45:2e:ec:43:b6: da:93:0b:33:62:30:de:d9:3b:03:cf:66:33:7d:7d:2f:8c:2c: d5:05:5e:4c:c2:f6:3a:ad:c8:f9:f9:40:95:01:25:52:f2:f6: 13:70:4e:69:b2:1e:45:b4:35:ee:ba:0f:38:01:80:ca:09:57: f6:47:c6:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErHiS2zxRVH8T2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzI1Njc0YjItYzA5NS00MTM3LTliZDItY2E2Y2M4NmI0MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxbQCuqSZtW/3e4kERq/Eh39EMiX6BBRMFOt c8GXbA3zSyEH6BZGR2f+6pEzJ1OSOcCScwkvElImrzJWnNDcZv31Rm1fa9wli0fa kc2QN9vsq6q9Gh4xDgoI+Q5+3Pf9DMOC+cQ+jo+It7nOxfROV8cFutCs7v6xWoDQ 84IuIuPqhucdhrhLSYe+Pu+PzmH8bCHApp0FD+/6NNW1U0sZrZJEHxWBEiarqh34 eWuFa7kfZVnz6zCHjJUDS3W0En/MYR01GXm8fTfko1FLR26cuwnSrvBhUj7ldHB0 K1mv5O46oL2ZV94+bt/ZSv+mQ77vaswzJI8yWXICUOo5oPzxAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJgQSoSwGcAOwoJ54bRB4kccZKrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZkOTk5NWQtZDI0Zi0z NmY5LTkwMWUtNjQ0ODYwNzFiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpjKMoqLd0U3GB2yATLzbq/0HzrErl6QmHed8lf7fKkbPTfwolY mQToQ/r/Pnu/fwIRivpkR7U3VzTgioThtYM9kCTNwOwFEGrHZyNCEuVbA1T3Yssn 6shPOyCL3Y7Hh6f/f+e5SfiQYIBo/4aM6joz+ysQ3m5+ZevuDwQOOcdSK4V9al6y gi5nNMNm6QgGCau3Tl0OIuNorpgYQnXXeWiP0E83HcUa965Qk0IyNuxU0WGBVjq2 JGsTNJRQ+mCDTGBFLuxDttqTCzNiMN7ZOwPPZjN9fS+MLNUFXkzC9jqtyPn5QJUB JVLy9hNwTmmyHkW0Ne66DzgBgMoJV/ZHxiw= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:11 2026 by rpki-client