$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa File: 3df4436b-cf8d-3938-a752-30d9d66f0d80.roa (raw, json) Hash identifier: fyQu8gZ+sTuLB1OO47Bj2zfn67zOtvC7tklfO/wbyP8= Subject key identifier: C2:17:92:54:D5:68:63:4A:A6:73:53:EE:CE:88:AA:3A:48:DD:82:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A823378B2D593C0E00440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396611 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:82:33:78:b2:d5:93:c0:e0:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c9e00d40-2d9d-4e6f-b900-7ae59ed8f5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:0d:30:c7:87:2a:1f:b6:00:66:0a:5d:03: 0a:ad:f6:e8:be:99:bf:d8:36:d3:59:aa:15:60:8a: 43:74:1c:a3:33:4a:b8:fd:44:7f:f0:59:8c:99:aa: e8:91:ac:99:1d:da:c8:1b:c4:f1:97:e0:82:bd:ed: 28:5f:82:00:20:f6:f8:28:f2:00:8e:36:b9:96:b7: f6:92:6a:b2:e7:0a:52:8e:a1:b4:20:2b:ab:9a:49: 4d:5c:88:ec:a1:67:22:ed:e6:dc:bf:71:88:da:e9: 55:3f:0e:eb:e0:65:23:b0:b8:5e:c3:50:ae:2c:7b: 83:d7:38:69:f4:e1:9b:94:80:03:67:f9:3e:75:e1: 08:39:59:c8:b3:fe:bb:a5:70:10:61:ed:4f:ac:8c: 78:eb:61:f8:04:ed:5d:a5:a0:29:18:61:46:ff:38: 6b:85:04:4c:bf:a6:33:6d:d8:10:0a:25:74:61:3a: af:fc:f3:f6:12:9b:7d:f9:ae:8e:c5:89:b4:c1:ff: 78:00:d8:e6:55:7b:3f:32:60:45:b0:6e:9e:1d:17: 13:eb:7d:00:e3:a5:0e:63:68:f0:48:b4:a9:74:c8: 44:91:e7:47:67:54:01:df:5a:7b:af:4c:33:ba:54: 48:82:c1:20:24:e2:49:a1:38:62:71:d5:ce:2f:db: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:92:54:D5:68:63:4A:A6:73:53:EE:CE:88:AA:3A:48:DD:82:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:64:f6:f1:db:d2:45:72:34:fd:00:2c:d3:73:51:23:87:4f: ee:c0:35:40:ab:b5:7c:6e:9b:82:14:04:3f:5b:23:11:a0:67: 51:d3:88:26:62:d1:a2:c3:da:9c:bc:e9:7e:a2:f9:c9:b4:c5: 42:66:0a:4b:24:72:31:e1:f9:0e:50:b7:7b:72:58:51:21:d6: 6a:04:eb:9e:bf:48:2d:a7:2c:e7:33:81:9f:69:05:67:14:a9: 0c:cb:3f:c1:0c:28:9d:ce:1f:0b:37:68:87:10:5c:c6:28:10: c1:c6:2f:04:c6:ee:ea:4b:de:11:75:b0:b7:ab:2d:37:62:18: d1:2a:a1:c6:00:eb:17:45:f6:5c:2e:83:6e:e2:0e:55:25:25: 0c:b4:15:f1:e4:1a:eb:bd:65:63:90:2c:63:86:67:67:b1:ff: ef:63:b0:75:81:30:8e:a8:e8:fa:e1:0d:55:c7:98:df:b9:ac: a4:3b:99:6b:e0:0d:76:be:a3:f5:dd:73:09:0c:17:64:99:d4: 7b:0b:b1:17:35:a5:f7:f1:2c:2c:73:64:13:9f:2f:4f:ca:2b: 9a:13:e0:4b:7f:70:f8:ce:ea:e6:69:07:43:7a:db:9f:5d:af: 4d:4b:50:13:d0:e0:44:87:6d:58:90:08:b9:fc:77:44:4c:76: 5d:17:c9:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoIzeLLVk8DgBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzllMDBkNDAtMmQ5ZC00ZTZmLWI5MDAtN2FlNTllZDhmNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNkNMMeHKh+2AGYKXQMKrfbovpm/2DbTWaoV YIpDdByjM0q4/UR/8FmMmarokayZHdrIG8Txl+CCve0oX4IAIPb4KPIAjja5lrf2 kmqy5wpSjqG0ICurmklNXIjsoWci7ebcv3GI2ulVPw7r4GUjsLhew1CuLHuD1zhp 9OGblIADZ/k+deEIOVnIs/67pXAQYe1PrIx462H4BO1dpaApGGFG/zhrhQRMv6Yz bdgQCiV0YTqv/PP2Ept9+a6OxYm0wf94ANjmVXs/MmBFsG6eHRcT630A46UOY2jw SLSpdMhEkedHZ1QB31p7r0wzulRIgsEgJOJJoThicdXOL9tZqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMIXklTVaGNKpnNT7s6IqjpI3YLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNDQzNmItY2Y4ZC0z OTM4LWE3NTItMzBkOWQ2NmYwZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvZPbx29JFcjT9ACzTc1Ejh0/uwDVAq7V8bpuC FAQ/WyMRoGdR04gmYtGiw9qcvOl+ovnJtMVCZgpLJHIx4fkOULd7clhRIdZqBOue v0gtpyznM4GfaQVnFKkMyz/BDCidzh8LN2iHEFzGKBDBxi8Exu7qS94RdbC3qy03 YhjRKqHGAOsXRfZcLoNu4g5VJSUMtBXx5BrrvWVjkCxjhmdnsf/vY7B1gTCOqOj6 4Q1Vx5jfuaykO5lr4A12vqP13XMJDBdkmdR7C7EXNaX38Swsc2QTny9PyiuaE+BL f3D4zurmaQdDetufXa9NS1AT0OBEh21YkAi5/HdETHZdF8l2 -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:50 2026 by rpki-client