$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/302720b7-db34-37b1-886b-1165dd525710.roa File: 302720b7-db34-37b1-886b-1165dd525710.roa (raw, json) Hash identifier: JSXHrsy8txsRj1vTNXTMcLX18vmqsyHFGM5re44aURw= Subject key identifier: 50:04:51:80:6C:0A:08:E4:8C:5B:51:49:A6:46:44:6A:A0:E7:F5:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B1DB10DED199371BF240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/302720b7-db34-37b1-886b-1165dd525710.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396573 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b1:db:10:de:d1:99:37:1b:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=91f06cd6-87ea-4c6d-8f74-4579de34dce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:f5:42:ae:5b:bb:7a:89:de:68:5e:01:cd: fe:14:84:f6:f7:4e:48:37:f4:bd:16:d2:39:cf:4c: 11:37:2d:8a:04:93:6a:8b:7f:16:74:87:5c:1e:f7: 6e:9e:51:a9:0b:b4:22:7b:cf:e0:53:af:ba:46:35: ae:b5:87:5d:ef:05:7a:4d:36:e2:65:b0:fe:fb:7c: 8b:85:cf:ad:78:ef:dc:a6:a5:96:1a:d4:f9:68:6e: 37:44:be:63:9e:20:e7:ca:f7:ca:71:05:b2:42:4a: 79:1b:c0:9f:cf:bc:9e:66:fa:66:87:06:73:e5:8c: d6:81:70:e0:9f:63:1a:56:2d:f1:6d:cd:d2:1b:61: 5c:17:71:90:dc:1b:c6:0f:ed:53:e4:03:6f:3e:c6: 0d:95:94:8e:74:65:d1:66:5e:9c:02:82:a9:43:b4: c2:94:98:91:30:e7:8e:c3:65:c2:ea:ec:a6:4c:a3: 78:dd:9a:87:0d:d4:85:d0:de:c1:68:7f:19:5a:ca: 6d:76:28:67:9b:83:75:40:3e:2c:e1:89:1f:33:67: 77:cd:e3:03:1e:01:b2:77:75:2d:0d:f0:8d:3b:39: c9:b8:8f:48:55:5c:3d:93:92:b2:3f:59:c8:33:76: a5:e0:a4:22:54:91:55:b8:f6:18:a7:c9:cf:d1:f8: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:51:80:6C:0A:08:E4:8C:5B:51:49:A6:46:44:6A:A0:E7:F5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/302720b7-db34-37b1-886b-1165dd525710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9c:84:25:5c:66:4c:39:f1:0b:97:67:53:2e:db:94:9c:06: a7:cf:44:de:b9:34:80:cb:ac:4c:1b:8e:5d:7e:5d:9a:f1:8e: a6:4a:79:1e:16:7f:80:75:06:00:18:3e:63:31:c0:97:bc:ca: fd:c2:1b:b5:46:ed:55:a7:3b:ea:e6:48:3c:8b:3d:c5:18:37: ba:f2:e5:13:08:27:89:32:74:83:f6:80:00:ac:ea:2b:57:e6: 4a:31:95:d1:7f:c2:a4:95:1b:3c:d1:d6:85:ee:4f:69:fa:cb: 4b:10:7b:b7:96:54:24:06:01:8e:79:e0:56:62:a4:4a:97:b6: 44:00:b8:1d:3c:5d:3f:48:ae:43:6e:19:89:55:9f:2e:ce:61: 7a:27:e7:f8:a1:9d:fb:bf:2d:20:dd:c0:00:5b:f3:08:73:b4: 0d:7f:8d:8b:c8:de:01:0d:92:54:97:98:86:03:51:3b:84:72: e9:d8:34:5f:99:91:b1:0e:9c:27:5f:ed:da:c8:ca:30:c1:28: 3a:a2:36:71:cf:71:01:98:07:68:98:00:e3:f1:83:bc:bd:ea: 05:46:54:9f:7c:bb:5a:ef:34:c4:e5:e7:87:13:d5:cc:63:95: 8b:05:92:a9:26:e7:32:d5:05:e3:9b:f6:48:14:10:c7:03:3a: b3:35:1e:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bHbEN7RmTcb8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk OTFmMDZjZDYtODdlYS00YzZkLThmNzQtNDU3OWRlMzRkY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6n1Qq5bu3qJ3mheAc3+FIT2905IN/S9FtI5 z0wRNy2KBJNqi38WdIdcHvdunlGpC7Qie8/gU6+6RjWutYdd7wV6TTbiZbD++3yL hc+teO/cpqWWGtT5aG43RL5jniDnyvfKcQWyQkp5G8Cfz7yeZvpmhwZz5YzWgXDg n2MaVi3xbc3SG2FcF3GQ3BvGD+1T5ANvPsYNlZSOdGXRZl6cAoKpQ7TClJiRMOeO w2XC6uymTKN43ZqHDdSF0N7BaH8ZWsptdihnm4N1QD4s4YkfM2d3zeMDHgGyd3Ut DfCNOznJuI9IVVw9k5KyP1nIM3al4KQiVJFVuPYYp8nP0fjzPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFAEUYBsCgjkjFtRSaZGRGqg5/UWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzAyNzIwYjctZGIzNC0z N2IxLTg4NmItMTE2NWRkNTI1NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqchCVcZkw58QuXZ1Mu25ScBqfPRN65NIDLrEwbjl1+XZrxjqZK eR4Wf4B1BgAYPmMxwJe8yv3CG7VG7VWnO+rmSDyLPcUYN7ry5RMIJ4kydIP2gACs 6itX5koxldF/wqSVGzzR1oXuT2n6y0sQe7eWVCQGAY554FZipEqXtkQAuB08XT9I rkNuGYlVny7OYXon5/ihnfu/LSDdwABb8whztA1/jYvI3gENklSXmIYDUTuEcunY NF+ZkbEOnCdf7drIyjDBKDqiNnHPcQGYB2iYAOPxg7y96gVGVJ98u1rvNMTl54cT 1cxjlYsFkqkm5zLVBeOb9kgUEMcDOrM1HuI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:17:52 2026 by rpki-client