$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa File: 4044adc4-038e-35a2-8aca-cfea792550c3.roa (raw, json) Hash identifier: fSl0p+g3dJ9HdhUtrT2zske5FkzJiE4MgxsKX9UoG0I= Subject key identifier: E4:DF:E8:BF:98:F4:61:48:19:C2:36:71:DC:C2:14:4A:A5:B1:65:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379F73C64FB2A97FE4E22E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36618 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f7:3c:64:fb:2a:97:fe:4e:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4c3b5ef5-921e-401e-8171-4422dd841e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:88:74:b4:e0:42:49:af:1e:da:fb:ee:b3: 6f:f8:d7:26:d7:d3:70:08:bd:99:98:b5:68:87:09: d6:bb:98:fa:50:16:b8:5c:19:7d:ab:81:1f:86:5b: 24:32:64:b5:bc:88:06:7b:9a:09:1f:91:b0:fa:96: 61:c6:db:7f:88:35:f3:90:16:92:f6:3d:12:92:84: 5f:cf:3e:94:82:1d:c1:5c:06:3e:eb:6e:db:a9:8c: d7:40:90:58:2a:c2:00:71:d8:d1:8e:65:b0:68:78: ed:22:80:11:d7:4b:8e:bb:d9:e9:28:cc:28:a5:99: c9:d4:5f:97:74:bb:a3:89:26:8c:f1:ef:8f:6e:1a: ff:46:7b:c7:c9:bc:9c:35:11:ab:19:af:0a:88:58: 1d:b4:85:91:e5:d6:e1:26:69:bb:1a:93:92:75:37: 83:2f:3d:3a:7e:d9:83:d5:3e:f1:4f:73:d5:13:4e: 3d:84:d8:b9:6d:ee:1a:06:74:94:29:e0:75:75:55: e4:65:ff:a1:71:35:5e:05:03:cf:79:4a:24:c9:3b: 98:86:8d:8d:75:ec:4c:f3:35:f9:fc:e8:47:eb:92: 95:9e:17:2a:64:56:9a:78:5c:39:a7:72:18:40:d7: 19:4d:19:fa:9c:2a:0a:f8:a1:e2:49:90:fa:e3:1b: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DF:E8:BF:98:F4:61:48:19:C2:36:71:DC:C2:14:4A:A5:B1:65:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4044adc4-038e-35a2-8aca-cfea792550c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a8:7d:1b:5f:a7:0c:3e:fe:c0:a3:2e:36:57:83:d3:18:87: 5c:db:c4:76:25:29:b0:6d:41:35:39:b9:1c:d0:15:67:2b:24: 31:00:47:8a:91:6b:9b:d2:04:8d:08:d5:c0:fd:3a:be:da:b1: 63:46:1d:a9:fd:3b:bb:82:aa:b7:97:51:82:33:f4:86:1d:20: fe:5a:71:6a:53:0d:01:31:6f:97:ce:c0:61:f3:72:a0:47:27: 73:9a:02:7e:c2:e4:3b:ee:59:f5:6c:bd:c7:24:4a:78:e0:9d: e0:7d:02:91:1e:ae:36:de:95:d3:3c:7b:c3:9c:4d:4d:d8:c6: 39:b9:6f:07:07:d5:40:1a:3e:d3:97:68:04:a9:ef:0a:3e:26: a3:6f:bb:38:a0:5a:a3:b9:15:e0:b4:c1:00:a4:7c:22:8a:89: 56:b1:9b:27:5c:d0:b7:c3:de:6c:dc:dd:b7:8f:3a:07:d5:45: 8f:cc:8a:2b:dc:82:fc:c9:bc:f0:00:a9:48:fb:47:b5:c2:7b: 13:37:77:12:7a:59:12:46:f6:4e:d7:71:4b:f3:13:71:bd:35: 42:7b:21:8e:8f:b8:ed:1b:fe:8a:4e:4f:b6:d5:3b:a9:50:23: 8d:1d:c3:aa:39:52:7f:96:19:56:7f:2b:31:8c:c1:8b:f7:22: 9f:9d:e3:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jefc8ZPsql/5OIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGMzYjVlZjUtOTIxZS00MDFlLTgxNzEtNDQyMmRkODQxZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEuIdLTgQkmvHtr77rNv+Ncm19NwCL2ZmLVo hwnWu5j6UBa4XBl9q4EfhlskMmS1vIgGe5oJH5Gw+pZhxtt/iDXzkBaS9j0SkoRf zz6Ugh3BXAY+627bqYzXQJBYKsIAcdjRjmWwaHjtIoAR10uOu9npKMwopZnJ1F+X dLujiSaM8e+Pbhr/RnvHybycNRGrGa8KiFgdtIWR5dbhJmm7GpOSdTeDLz06ftmD 1T7xT3PVE049hNi5be4aBnSUKeB1dVXkZf+hcTVeBQPPeUokyTuYho2NdexM8zX5 /OhH65KVnhcqZFaaeFw5p3IYQNcZTRn6nCoK+KHiSZD64xvgWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTf6L+Y9GFIGcI2cdzCFEqlsWUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NGFkYzQtMDM4ZS0z NWEyLThhY2EtY2ZlYTc5MjU1MGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSofRtfpww+/sCjLjZXg9MYh1zbxHYlKbBtQTU5uRzQFWcrJDEA R4qRa5vSBI0I1cD9Or7asWNGHan9O7uCqreXUYIz9IYdIP5acWpTDQExb5fOwGHz cqBHJ3OaAn7C5DvuWfVsvcckSnjgneB9ApEerjbeldM8e8OcTU3Yxjm5bwcH1UAa PtOXaASp7wo+JqNvuzigWqO5FeC0wQCkfCKKiVaxmydc0LfD3mzc3bePOgfVRY/M iivcgvzJvPAAqUj7R7XCexM3dxJ6WRJG9k7XcUvzE3G9NUJ7IY6PuO0b/opOT7bV O6lQI40dw6o5Un+WGVZ/KzGMwYv3Ip+d49g= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:17 2026 by rpki-client