$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa File: 3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa (raw, json) Hash identifier: 3gp+CIaQeQmxEjahQcuZ3keKXvwFWrNsF/hgBbSroRU= Subject key identifier: E5:07:2F:9B:2E:D7:05:00:BE:B5:5C:6A:67:BD:00:8B:36:46:9C:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5E4FC463F14270F80400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 36628 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5e:4f:c4:63:f1:42:70:f8:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a4bb8c79-ec92-4fd0-8e2b-1bd7b1c889a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:d6:34:87:e3:67:0f:0a:dd:9b:27:9d:2c: 2e:37:23:be:0a:20:39:36:b9:75:da:01:ac:f0:35: 90:a9:ec:e5:f7:ec:33:92:32:ae:84:2c:5c:0e:4e: de:9d:c2:f4:5c:da:13:fd:b1:fa:87:56:71:c4:8d: e4:71:66:7c:62:2f:3b:b2:15:53:0f:13:5e:47:db: bd:33:0b:4b:ab:14:c5:68:06:dc:22:b4:75:37:c2: 38:00:65:65:85:49:91:75:15:27:d9:7e:b0:ca:2b: d4:b1:16:c7:8d:51:18:93:7b:42:60:72:c9:7c:bb: da:d1:68:70:18:d8:59:90:b2:2e:72:17:35:e9:67: b2:f9:25:78:1d:0e:76:32:5e:75:7e:3c:92:b6:2c: 56:75:49:29:69:84:58:0f:42:28:95:5e:13:79:10: 73:25:61:be:1a:33:34:17:f4:f0:41:74:58:18:31: 06:9a:e7:8a:58:e5:ab:9a:11:69:2e:98:2a:ef:71: 41:85:9a:be:43:54:a5:33:13:df:81:20:f1:0f:7d: 9b:97:96:0f:1a:be:94:18:04:e5:49:63:3e:da:86: 1a:db:5f:6a:d4:b8:20:9f:24:1b:05:50:99:87:d6: 7f:74:ec:6f:c6:71:94:8f:68:0c:56:b7:30:ed:24: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:07:2F:9B:2E:D7:05:00:BE:B5:5C:6A:67:BD:00:8B:36:46:9C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1f:9a:61:5b:d9:0c:b9:a2:3f:3b:00:6d:64:89:54:c0:27: 40:64:d5:bd:76:aa:08:c8:ce:2e:de:d4:e1:c2:57:a6:2e:94: 3e:80:8e:db:97:99:6f:a6:de:99:d9:7d:44:94:8c:c0:c6:25: ef:8d:5c:dd:1d:f3:92:99:26:6b:7b:73:f3:e7:df:1e:74:e7: 78:2d:a8:95:e9:ed:3c:c4:e7:c3:37:e6:a9:e2:64:94:72:7c: 24:56:76:ba:d5:57:6b:fd:0c:d4:3b:57:04:55:83:51:fb:95: c4:37:b2:9f:b9:0b:5e:d7:1f:ac:7d:34:85:5d:be:41:0c:b4: a9:97:f8:4e:ad:15:50:1d:77:a4:c5:e0:3a:f2:a1:ba:23:15: f5:2e:4a:f6:cc:f0:a4:0b:15:f3:34:7b:ff:dd:6d:6b:67:d3: cc:64:76:84:7b:a5:20:75:2b:65:8c:65:f8:11:23:ca:b5:85: e7:08:45:2b:a0:84:16:c9:a7:73:39:2b:48:17:6f:40:e6:7b: 91:08:d3:b2:dd:3d:ef:cc:b8:22:43:b3:c0:35:0e:71:21:62: 31:ec:e6:2f:31:fe:f8:90:16:6b:a3:df:09:11:ba:d6:8d:31: a2:ec:98:9a:f8:6c:25:06:c2:0a:6a:1a:d0:f2:df:37:5f:04: 8b:93:3f:e2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l5PxGPxQnD4BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTRiYjhjNzktZWM5Mi00ZmQwLThlMmItMWJkN2IxYzg4OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoPWNIfjZw8K3ZsnnSwuNyO+CiA5Nrl12gGs 8DWQqezl9+wzkjKuhCxcDk7encL0XNoT/bH6h1ZxxI3kcWZ8Yi87shVTDxNeR9u9 MwtLqxTFaAbcIrR1N8I4AGVlhUmRdRUn2X6wyivUsRbHjVEYk3tCYHLJfLva0Whw GNhZkLIuchc16Wey+SV4HQ52Ml51fjyStixWdUkpaYRYD0IolV4TeRBzJWG+GjM0 F/TwQXRYGDEGmueKWOWrmhFpLpgq73FBhZq+Q1SlMxPfgSDxD32bl5YPGr6UGATl SWM+2oYa219q1LggnyQbBVCZh9Z/dOxvxnGUj2gMVrcw7SQCoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOUHL5su1wUAvrVcame9AIs2RpzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y2NjIwNzgtYzg3ZS0z ZTk0LWI5ZjctZTgzZmE2YWM4YTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRH5phW9kMuaI/OwBtZIlUwCdAZNW9dqoIyM4u 3tThwlemLpQ+gI7bl5lvpt6Z2X1ElIzAxiXvjVzdHfOSmSZre3Pz598edOd4LaiV 6e08xOfDN+ap4mSUcnwkVna61Vdr/QzUO1cEVYNR+5XEN7KfuQte1x+sfTSFXb5B DLSpl/hOrRVQHXekxeA68qG6IxX1Lkr2zPCkCxXzNHv/3W1rZ9PMZHaEe6UgdStl jGX4ESPKtYXnCEUroIQWyadzOStIF29A5nuRCNOy3T3vzLgiQ7PANQ5xIWIx7OYv Mf74kBZro98JEbrWjTGi7Jia+GwlBsIKahrQ8t83XwSLkz/i -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:06 2026 by rpki-client