$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428e28f7-9212-37e6-a595-a8e225fc44ec.roa File: 428e28f7-9212-37e6-a595-a8e225fc44ec.roa (raw, json) Hash identifier: t6AKPUqfj1B1TDWP/pKedoGhldxFZvKhMG/T8Ian63g= Subject key identifier: C5:2F:F5:03:0C:97:37:42:A3:6A:09:36:A3:B5:A9:54:C9:F1:B2:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AE23ACD1EAC5B930FC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428e28f7-9212-37e6-a595-a8e225fc44ec.roa Signing time: Tue 17 Mar 2026 14:07:00 +0000 ROA not before: Tue 17 Mar 2026 14:07:00 +0000 ROA not after: Mon 15 Jun 2026 14:07:00 +0000 asID: 396581 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:ae:23:ac:d1:ea:c5:b9:30:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:00 2026 GMT Not After : Jun 15 14:07:00 2026 GMT Subject: CN=f36826ac-d040-487e-843a-c9b6bc2e19ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:68:fa:10:8e:4a:e9:97:ba:b3:9d:64:b5: 9c:46:16:29:a1:08:29:70:28:63:6a:ca:8f:82:2b: 73:6b:16:88:ab:a8:92:42:21:fb:64:8e:da:b7:49: 18:e5:09:f3:b8:6d:67:52:9f:4a:22:b9:86:a8:7d: 17:a5:9f:4b:3b:0d:4f:41:a0:22:86:94:36:ba:7f: 21:60:2d:cf:98:1e:b2:46:12:32:19:d0:f8:d9:2e: f5:ee:bc:39:32:45:d8:07:eb:72:1a:b4:0a:76:13: 8e:c3:7e:e7:d3:b9:6e:de:9f:75:cb:63:90:ee:e9: 86:22:87:b4:29:f2:6e:b5:7b:c9:6a:f6:a4:94:13: e3:a1:ba:b3:91:02:9e:b4:a3:48:97:29:49:01:55: 26:8b:87:5c:8f:e5:ba:58:9a:c7:62:42:f3:da:02: 3a:b0:1d:c2:84:ae:fc:ee:d7:05:33:a8:5c:e9:e2: 71:cb:68:ff:e9:21:9d:a1:22:41:0e:4b:15:01:3b: a4:bd:86:c7:11:13:69:e6:ef:4d:f0:7c:e7:5a:0d: c4:9b:c2:16:d4:16:1f:3c:25:94:42:47:0d:45:fe: 12:2d:53:f0:4b:25:c9:21:24:09:43:30:f8:9d:68: de:0d:9c:3a:b0:02:6c:01:9c:cb:1c:50:e0:6a:48: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2F:F5:03:0C:97:37:42:A3:6A:09:36:A3:B5:A9:54:C9:F1:B2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428e28f7-9212-37e6-a595-a8e225fc44ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:df:b9:06:9f:a5:ad:88:44:6f:bb:01:52:4a:78:4d:06:bc: f8:48:5f:c6:dc:70:88:ce:8c:8e:b5:ba:37:f6:e2:54:34:32: 3a:af:71:52:5f:0c:4e:d8:29:ea:1d:77:60:8e:c5:6c:89:77: 61:eb:06:c0:5d:32:39:6f:88:8d:ac:b1:9b:3a:1a:47:d1:1a: 7e:4a:05:dd:56:6f:78:9c:6e:07:44:a9:5d:8c:80:66:ba:fe: e8:1a:f0:3c:6f:eb:a5:45:0d:d2:fc:d6:07:d4:4a:4e:17:e6: f0:2e:13:a8:d5:e6:99:f7:98:f1:59:41:f9:da:26:e4:90:11: bb:d2:e6:98:6e:9a:51:b9:02:c4:e6:12:53:4e:f4:b9:b5:dc: 0a:56:47:0e:39:4d:73:0a:4d:84:8d:18:a3:5a:02:3e:26:b1: 98:47:06:ee:74:b7:1c:b4:32:5a:1c:2a:ca:af:52:d9:b4:ed: 7b:4e:76:40:c5:d5:1e:0a:88:4a:83:15:b3:d5:ab:d1:4b:dc: 29:87:48:c9:f7:3f:99:5b:d1:98:68:81:95:b0:02:70:69:1d: 90:cb:45:00:fd:8e:a7:5a:ab:7f:74:08:57:16:d6:26:d8:e6: 5d:2a:08:53:53:dc:e6:b7:d2:fb:89:77:76:71:34:21:a8:8d: c9:15:81:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a4jrNHqxbkw/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMFoXDTI2MDYxNTE0MDcwMFowLzEtMCsGA1UEAxMk ZjM2ODI2YWMtZDA0MC00ODdlLTg0M2EtYzliNmJjMmUxOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxho+hCOSumXurOdZLWcRhYpoQgpcChjasqP gitzaxaIq6iSQiH7ZI7at0kY5QnzuG1nUp9KIrmGqH0XpZ9LOw1PQaAihpQ2un8h YC3PmB6yRhIyGdD42S717rw5MkXYB+tyGrQKdhOOw37n07lu3p91y2OQ7umGIoe0 KfJutXvJavaklBPjobqzkQKetKNIlylJAVUmi4dcj+W6WJrHYkLz2gI6sB3ChK78 7tcFM6hc6eJxy2j/6SGdoSJBDksVATukvYbHERNp5u9N8HznWg3Em8IW1BYfPCWU QkcNRf4SLVPwSyXJISQJQzD4nWjeDZw6sAJsAZzLHFDgakjk/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUv9QMMlzdCo2oJNqO1qVTJ8bLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI4ZTI4ZjctOTIxMi0z N2U2LWE1OTUtYThlMjI1ZmM0NGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI7fuQafpa2IRG+7AVJKeE0GvPhIX8bccIjOjI61ujf24lQ0Mjqv cVJfDE7YKeodd2COxWyJd2HrBsBdMjlviI2ssZs6GkfRGn5KBd1Wb3icbgdEqV2M gGa6/uga8Dxv66VFDdL81gfUSk4X5vAuE6jV5pn3mPFZQfnaJuSQEbvS5phumlG5 AsTmElNO9Lm13ApWRw45TXMKTYSNGKNaAj4msZhHBu50txy0MlocKsqvUtm07XtO dkDF1R4KiEqDFbPVq9FL3CmHSMn3P5lb0ZhogZWwAnBpHZDLRQD9jqdaq390CFcW 1ibY5l0qCFNT3Oa30vuJd3ZxNCGojckVgUY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:33:38 2026 by rpki-client