$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa File: 38a85f41-7d00-368f-a88b-da675a578c44.roa (raw, json) Hash identifier: M6rEGXViB5GJrFSq2rCwDb1KeMhsP3Pi4Vxd38lFxHo= Subject key identifier: AC:42:AB:5A:2F:0D:96:19:B4:1C:70:3C:B7:AF:F1:73:6C:32:A4:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8EA78E48E26D8412E320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396565 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8e:a7:8e:48:e2:6d:84:12:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2407e4d8-5c7a-4750-889f-17fb1cfcb456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:81:aa:7f:09:00:12:cc:29:80:4a:7a:c5: 19:b7:4c:29:c2:d3:86:ca:12:a8:ce:ea:d1:c8:1d: 49:35:70:24:cb:85:2e:a2:58:fe:4c:24:bf:e1:3e: a6:57:11:47:64:2a:79:ab:71:8d:26:65:de:86:de: ea:33:e8:41:e4:1c:88:e5:f2:de:67:24:ba:8f:4c: e1:f8:2e:78:f6:1e:d9:00:ac:67:91:17:b3:aa:c4: 72:dc:2f:5c:f0:4d:df:ce:2d:d6:24:f2:8a:71:74: ca:f8:3b:04:5e:9a:6d:04:a3:ec:30:fa:91:c6:98: 02:ca:40:33:ea:88:f8:d9:45:13:3d:ae:2c:ec:0a: 99:5c:88:45:50:ce:24:c5:96:f3:24:29:48:f3:ca: bb:5b:5e:2e:48:e9:d5:bb:4c:4b:9b:45:c9:d0:05: fc:4a:91:af:cc:c3:6e:0e:d6:1a:02:a4:46:19:bd: d6:12:94:cb:6b:96:46:a7:57:d5:0b:4d:8e:2b:7b: de:9a:55:6d:42:d5:b1:7c:f0:47:e7:3b:c2:e5:a6: e5:82:6b:f4:cb:4d:94:d3:f0:4e:06:f1:a3:2e:74: 90:92:b3:54:f5:cc:b6:b4:45:70:b5:4a:aa:89:97: 34:63:6f:7d:0b:a5:84:24:86:81:dc:a5:96:57:42: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:42:AB:5A:2F:0D:96:19:B4:1C:70:3C:B7:AF:F1:73:6C:32:A4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:29:cc:07:c1:92:18:e4:60:38:28:27:82:a6:e3:d0:04:4f: c6:a5:d7:ff:63:6e:00:cd:06:a2:be:b9:e7:b3:09:6a:e0:7f: 77:00:6c:e0:d5:3a:63:e2:62:8e:a4:27:81:59:34:94:b8:d9: ff:ac:2e:01:59:23:73:7c:27:b5:fa:85:c3:ab:72:03:ca:0b: a4:56:e8:a0:e1:92:29:f1:c6:bb:cd:77:9d:a1:e7:79:35:98: 27:3e:45:96:36:c7:01:90:bb:3b:1c:13:2c:2b:47:6a:cb:19: db:e1:a4:1b:c0:a7:fd:35:0d:4a:20:e7:b5:62:25:36:20:80: be:c1:43:a2:8b:6d:88:83:ca:52:da:aa:f1:e6:15:14:c0:c6: 63:25:0a:dd:b3:c5:43:81:2c:2b:3b:b8:ba:d4:fd:23:2c:75: 71:e1:6d:ea:9d:c1:2a:84:62:86:15:47:f9:8b:73:17:be:c0: 09:3a:48:2f:d7:6a:3b:31:32:d0:2c:1f:17:d1:2c:fc:f6:eb: c1:65:42:24:0a:c1:4d:dd:1e:43:e4:e7:93:28:d4:11:d7:06: 86:a1:2c:ed:5a:08:4a:05:c5:76:06:2d:27:4d:51:2a:86:53: 4f:96:4d:09:ed:44:db:b3:0c:f6:3c:f9:49:db:db:2e:a0:91: d9:b0:08:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo6njkjibYQS4yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjQwN2U0ZDgtNWM3YS00NzUwLTg4OWYtMTdmYjFjZmNiNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcyBqn8JABLMKYBKesUZt0wpwtOGyhKozurR yB1JNXAky4Uuolj+TCS/4T6mVxFHZCp5q3GNJmXeht7qM+hB5ByI5fLeZyS6j0zh +C549h7ZAKxnkRezqsRy3C9c8E3fzi3WJPKKcXTK+DsEXpptBKPsMPqRxpgCykAz 6oj42UUTPa4s7AqZXIhFUM4kxZbzJClI88q7W14uSOnVu0xLm0XJ0AX8SpGvzMNu DtYaAqRGGb3WEpTLa5ZGp1fVC02OK3vemlVtQtWxfPBH5zvC5ablgmv0y02U0/BO BvGjLnSQkrNU9cy2tEVwtUqqiZc0Y299C6WEJIaB3KWWV0LaVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKxCq1ovDZYZtBxwPLev8XNsMqThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhhODVmNDEtN2QwMC0z NjhmLWE4OGItZGE2NzVhNTc4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBIKcwHwZIY5GA4KCeCpuPQBE/Gpdf/Y24AzQai vrnnswlq4H93AGzg1Tpj4mKOpCeBWTSUuNn/rC4BWSNzfCe1+oXDq3IDygukVuig 4ZIp8ca7zXedoed5NZgnPkWWNscBkLs7HBMsK0dqyxnb4aQbwKf9NQ1KIOe1YiU2 IIC+wUOii22Ig8pS2qrx5hUUwMZjJQrds8VDgSwrO7i61P0jLHVx4W3qncEqhGKG FUf5i3MXvsAJOkgv12o7MTLQLB8X0Sz89uvBZUIkCsFN3R5D5OeTKNQR1waGoSzt WghKBcV2Bi0nTVEqhlNPlk0J7UTbswz2PPlJ29suoJHZsAgS -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:05 2026 by rpki-client