$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa File: 3a54e294-5f3c-30cc-ace4-63947c41b131.roa (raw, json) Hash identifier: yIS0y6pcxpJhR0EO6l4ClhOl76/jPWIxZJK5UFl+a5c= Subject key identifier: 1F:94:4C:4E:67:64:3B:C7:32:1D:F4:5E:AF:7B:A1:DF:AE:A0:0C:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A443E7B0CDC85276B7100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397206 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:44:3e:7b:0c:dc:85:27:6b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e3343e18-a02a-432f-b56a-59dec0872833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:f4:cd:b6:43:98:33:75:16:d0:28:f1:a5: e1:a7:b4:1e:53:8f:e5:57:e5:93:c3:6b:1e:88:7c: ef:54:b5:2e:28:ee:83:fc:43:71:9b:41:cd:7c:bc: 5d:75:94:e4:9e:3b:d8:ff:a1:eb:a6:55:98:b9:2b: 62:e9:19:75:2b:40:c1:7a:bc:3d:c0:dd:6d:da:c1: cf:a4:01:e5:3f:24:c0:2e:f9:2b:92:1e:3f:91:14: f0:0d:b6:8b:54:8a:1c:99:97:25:ad:e2:59:48:25: dc:bd:4e:89:19:e7:08:4c:69:4b:cc:7a:76:db:58: ec:7f:66:6d:7f:36:d9:2b:f8:23:08:50:31:fc:30: d4:63:3c:76:c5:5c:70:74:66:61:76:b0:33:cf:88: 40:45:9b:cd:56:cc:6a:4b:d6:6e:de:ae:d5:64:b6: 42:48:0d:83:53:6b:b9:17:f1:e1:fd:1d:a4:f2:0b: 5b:0c:47:15:ee:8b:6d:ae:15:79:b3:35:53:cf:fd: 8d:0f:45:07:58:78:95:c9:1e:11:56:ff:c7:31:b4: d6:aa:29:7c:da:7d:4f:c1:50:6d:2b:cf:cb:e2:e1: ef:9e:8d:5d:a7:77:79:6c:db:5c:dd:eb:89:97:9f: ed:1e:06:4c:a6:87:b2:15:e3:a3:e2:e4:af:c5:79: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:94:4C:4E:67:64:3B:C7:32:1D:F4:5E:AF:7B:A1:DF:AE:A0:0C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a54e294-5f3c-30cc-ace4-63947c41b131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:20:85:64:cc:bd:fa:ac:9b:ba:cd:65:05:cb:f5:4f:8c:4f: 7c:a7:59:e7:40:62:b5:25:2b:cb:f3:8c:2d:63:54:3f:ed:78: 4e:77:9e:10:fa:74:e6:6d:0f:5f:43:60:47:88:97:7c:21:d5: a1:c5:bb:05:d8:7d:50:a3:40:5c:f8:4b:83:d0:40:2c:b3:94: 81:fc:78:ab:ae:2c:98:7b:b8:df:91:af:4b:c5:65:f7:6b:91: 72:99:e6:70:8f:f5:76:e3:55:f4:7a:33:51:59:7f:94:82:8a: 8d:20:8b:14:2e:c7:59:d0:5a:b2:c0:d2:83:fd:0c:f2:f0:a6: 67:6b:d7:88:08:92:ef:c6:5b:8a:d0:f4:91:a3:0c:b4:57:72: 06:e5:37:b9:4f:5b:ee:61:47:4e:fe:2d:3e:2b:a8:24:25:0b: fa:64:98:51:15:22:49:66:a6:bd:52:ac:7e:a6:86:11:94:d3: 62:9b:bf:af:e0:a9:bb:42:5a:75:1a:75:d4:9c:aa:08:cb:8b: 96:e7:ba:c7:4c:a4:70:a1:7f:b7:5e:7d:96:a2:fd:fc:e5:97: a6:1a:27:5e:9e:64:68:7a:12:93:54:e4:f8:76:78:e7:85:dd: 85:02:4c:ea:06:d1:19:6f:0d:5e:72:63:ca:1b:30:32:15:f1: e1:5e:d1:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekQ+ewzchSdrcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTMzNDNlMTgtYTAyYS00MzJmLWI1NmEtNTlkZWMwODcyODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgX0zbZDmDN1FtAo8aXhp7QeU4/lV+WTw2se iHzvVLUuKO6D/ENxm0HNfLxddZTknjvY/6HrplWYuSti6Rl1K0DBerw9wN1t2sHP pAHlPyTALvkrkh4/kRTwDbaLVIocmZclreJZSCXcvU6JGecITGlLzHp221jsf2Zt fzbZK/gjCFAx/DDUYzx2xVxwdGZhdrAzz4hARZvNVsxqS9Zu3q7VZLZCSA2DU2u5 F/Hh/R2k8gtbDEcV7ottrhV5szVTz/2ND0UHWHiVyR4RVv/HMbTWqil82n1PwVBt K8/L4uHvno1dp3d5bNtc3euJl5/tHgZMpoeyFeOj4uSvxXnMewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+UTE5nZDvHMh30Xq97od+uoAzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E1NGUyOTQtNWYzYy0z MGNjLWFjZTQtNjM5NDdjNDFiMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoghWTMvfqsm7rNZQXL9U+MT3ynWedAYrUlK8vzjC1jVD/teE53 nhD6dOZtD19DYEeIl3wh1aHFuwXYfVCjQFz4S4PQQCyzlIH8eKuuLJh7uN+Rr0vF ZfdrkXKZ5nCP9XbjVfR6M1FZf5SCio0gixQux1nQWrLA0oP9DPLwpmdr14gIku/G W4rQ9JGjDLRXcgblN7lPW+5hR07+LT4rqCQlC/pkmFEVIklmpr1SrH6mhhGU02Kb v6/gqbtCWnUaddScqgjLi5bnusdMpHChf7defZai/fzll6YaJ16eZGh6EpNU5Ph2 eOeF3YUCTOoG0RlvDV5yY8obMDIV8eFe0d4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:01 2026 by rpki-client