$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42e0f565-e7b6-3a0f-9cea-8e2f2b86e953.roa File: 42e0f565-e7b6-3a0f-9cea-8e2f2b86e953.roa (raw, json) Hash identifier: JvdKz6BWpIv410/uvz4uamXALFThDspNdDg/yjlUNlw= Subject key identifier: A9:55:6C:E2:19:6D:F3:FA:32:A1:30:5B:20:8B:02:83:D3:2C:BA:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B2102A54199566BBB270 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42e0f565-e7b6-3a0f-9cea-8e2f2b86e953.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396599 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:10:2a:54:19:95:66:bb:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=1b0976fc-30d1-4afd-add2-301afedf9671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:2c:33:09:0e:03:4f:5c:df:de:75:3e:bc: 47:c6:00:fb:71:37:0d:a4:21:00:f9:a6:57:29:30: d8:c4:0a:f3:b0:16:f3:0f:b7:01:6e:72:40:69:97: c4:c7:35:54:f8:12:75:5c:f3:82:7f:55:4a:14:b5: cf:ac:f7:4f:32:00:23:50:97:ae:72:a0:87:14:94: 4c:07:59:6c:40:04:52:ac:37:4b:97:63:5d:3d:94: cb:90:45:cb:c8:30:02:20:13:eb:c7:fe:a3:da:ac: d5:95:68:37:42:23:2e:2b:ed:90:87:12:e1:6b:e8: fd:1e:2a:92:70:fe:5d:66:ee:c1:e5:0f:a9:47:f0: e6:c9:34:72:af:6e:49:e3:51:2f:e4:9a:02:f8:38: 17:4b:35:53:cf:a1:88:a1:89:6f:be:80:f0:b9:1a: 42:c9:c0:3c:42:74:68:e9:35:e5:3f:27:3d:b4:ea: b4:0c:15:b7:59:a2:b5:4e:8b:b9:7d:9d:66:a6:7f: c7:68:fc:50:a9:b4:00:3d:ae:e6:53:76:8c:81:5e: d9:8b:fb:1c:c9:ee:8b:54:64:a3:4a:29:68:8f:6f: b0:93:5e:33:3a:1d:2e:da:e6:9e:cf:62:16:46:e2: 8e:d3:46:aa:f6:4f:ba:94:ac:02:96:51:36:23:e8: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:55:6C:E2:19:6D:F3:FA:32:A1:30:5B:20:8B:02:83:D3:2C:BA:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42e0f565-e7b6-3a0f-9cea-8e2f2b86e953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3c:01:0f:ee:a8:e1:b7:2e:83:ac:77:20:cd:71:7f:7a:c2: 7b:96:6c:56:0c:22:41:6d:e4:ef:6b:91:d5:70:54:3d:80:92: 41:be:48:78:45:71:f7:bd:21:11:ac:64:bd:a1:de:9f:24:97: 5a:1c:dc:7e:c2:3b:aa:12:47:5a:15:9d:bc:0c:89:62:52:bb: fe:c1:a3:1e:ba:d0:c8:79:54:27:2e:b7:8a:ae:73:87:cc:01: 3a:51:74:d9:ae:a7:2c:2c:8b:e9:0f:75:04:01:63:af:94:47: 66:01:1a:f1:bc:11:d3:3d:c6:d9:7a:b2:7d:d4:f5:8a:9f:0d: 6d:64:e7:9e:aa:57:e3:2e:e8:b6:0a:ab:5e:3a:fd:79:fa:31: 80:a5:33:a5:2b:65:90:d5:3a:40:c6:8c:f2:f7:b1:db:a8:69: 22:16:08:59:81:67:14:26:de:a3:38:0a:30:88:4f:12:c8:1f: ac:36:f7:53:c1:bb:82:a5:60:18:98:3d:49:27:38:d6:7b:7d: 70:df:7d:a0:ee:ec:b1:40:a6:f7:4e:e9:96:59:fc:14:35:4d: 36:e3:9d:ff:c7:7a:6f:f6:f6:7c:b2:b8:f4:ce:c2:64:95:fd: fe:5e:c2:70:3d:58:c8:8f:61:7c:cd:0a:a5:6e:bf:0e:12:52: d7:e4:d1:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bIQKlQZlWa7snAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk MWIwOTc2ZmMtMzBkMS00YWZkLWFkZDItMzAxYWZlZGY5NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWssMwkOA09c3951PrxHxgD7cTcNpCEA+aZX KTDYxArzsBbzD7cBbnJAaZfExzVU+BJ1XPOCf1VKFLXPrPdPMgAjUJeucqCHFJRM B1lsQARSrDdLl2NdPZTLkEXLyDACIBPrx/6j2qzVlWg3QiMuK+2QhxLha+j9HiqS cP5dZu7B5Q+pR/DmyTRyr25J41Ev5JoC+DgXSzVTz6GIoYlvvoDwuRpCycA8QnRo 6TXlPyc9tOq0DBW3WaK1Tou5fZ1mpn/HaPxQqbQAPa7mU3aMgV7Zi/scye6LVGSj Siloj2+wk14zOh0u2uaez2IWRuKO00aq9k+6lKwCllE2I+gfswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlVbOIZbfP6MqEwWyCLAoPTLLqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJlMGY1NjUtZTdiNi0z YTBmLTljZWEtOGUyZjJiODZlOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGU8AQ/uqOG3LoOsdyDNcX96wnuWbFYMIkFt5O9rkdVwVD2AkkG+ SHhFcfe9IRGsZL2h3p8kl1oc3H7CO6oSR1oVnbwMiWJSu/7Box660Mh5VCcut4qu c4fMATpRdNmupywsi+kPdQQBY6+UR2YBGvG8EdM9xtl6sn3U9YqfDW1k556qV+Mu 6LYKq146/Xn6MYClM6UrZZDVOkDGjPL3sduoaSIWCFmBZxQm3qM4CjCITxLIH6w2 91PBu4KlYBiYPUknONZ7fXDffaDu7LFApvdO6ZZZ/BQ1TTbjnf/Hem/29nyyuPTO wmSV/f5ewnA9WMiPYXzNCqVuvw4SUtfk0bE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:00:51 2026 by rpki-client