$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa File: 42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa (raw, json) Hash identifier: wZXVhtOG3cls2rfbpXsxmhuPheish554JoyMyvThMQM= Subject key identifier: D3:67:E5:5C:59:CF:BF:2A:DB:8F:C1:E4:8B:7E:FC:22:FD:D6:1C:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A546598AE0C069F730F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396582 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:54:65:98:ae:0c:06:9f:73:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4994814b-778e-4814-8a6d-f5ba59decb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:71:f4:71:49:f8:38:0c:37:1f:9e:a0:b2: 28:a8:01:1f:f3:37:94:fb:30:30:4d:8f:16:da:5a: f6:28:bc:b3:b5:ca:8f:e2:21:fb:37:ba:f6:db:4d: 62:de:1c:8a:cb:21:b0:f3:6e:b8:28:1f:fc:56:56: 3d:c5:f3:b3:49:bf:0e:54:b2:73:71:1f:1e:4e:cf: c2:be:56:1d:34:6b:4c:1a:36:71:31:7b:93:7c:17: 75:71:f2:ee:4a:b4:14:88:98:c4:9f:b2:8b:58:08: db:e6:df:88:85:ff:98:b0:61:b2:7d:ce:00:8a:be: 60:dc:2a:7b:e1:d4:e5:ab:16:43:fa:a5:8f:ac:37: c9:af:2f:31:2e:14:3e:7f:b9:c0:51:2d:51:e6:f9: f2:fb:f2:10:ab:1e:f3:61:2d:cd:5f:67:3d:69:2c: e0:a7:e2:47:de:2b:72:8b:9a:8b:5e:8e:3f:50:fc: 00:2f:55:5b:2f:98:91:fc:df:1f:87:43:3e:ee:bd: 60:e2:f8:a8:12:b9:fa:53:95:09:ba:01:bb:31:da: 84:67:89:ee:0a:bf:be:51:ae:db:55:ab:2e:1e:9f: 2f:78:b1:54:ac:2c:49:89:06:62:63:0c:21:a1:3d: d6:4c:3e:b1:72:a1:95:05:f3:c1:2e:74:18:19:97: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:E5:5C:59:CF:BF:2A:DB:8F:C1:E4:8B:7E:FC:22:FD:D6:1C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42f3f8f5-cd4a-340c-af89-9f213a6f9231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:97:6c:3e:a6:62:3a:d5:80:7c:11:82:2f:e1:9a:e2:03:c0: d8:70:04:53:4a:d5:2c:8c:ef:b3:bb:51:98:11:39:c0:71:12: e1:f6:b3:16:de:b7:5c:a3:52:c6:e1:58:54:21:0c:83:89:14: 0e:15:1d:1c:5c:1e:f4:a8:aa:07:cd:82:b3:79:57:75:30:d5: 83:85:ef:0a:7d:bd:82:19:5c:34:f6:c1:63:36:8d:4a:70:aa: e8:27:c5:e9:60:01:2e:eb:80:cd:51:65:9c:db:71:0f:38:c1: 34:ab:63:69:c3:e8:7d:01:5d:eb:f9:7f:d7:93:6d:78:15:07: d9:46:c5:ba:99:96:c3:4f:ac:c3:b4:37:f8:c7:ea:1f:48:c9: b6:43:62:77:de:bd:71:ae:91:fc:8e:d7:0f:3c:4c:d9:e3:ac: f4:ad:8a:80:bf:96:f9:3b:ea:7d:e3:be:cf:9b:87:ea:5f:b0: 85:d0:4a:6f:8b:58:dc:04:bd:61:5a:11:e1:58:ed:d6:3e:02: 34:89:3b:1f:98:64:87:47:fa:53:0e:bb:44:c0:de:0b:5b:5e: 05:26:ff:fa:f4:e1:19:9a:39:21:26:95:25:e0:ff:96:a3:bc: 91:95:dc:1d:a2:ec:8a:bd:48:60:bc:ec:8d:83:b8:ef:00:ec: f9:85:de:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jelRlmK4MBp9zD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDk5NDgxNGItNzc4ZS00ODE0LThhNmQtZjViYTU5ZGVjYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJZx9HFJ+DgMNx+eoLIoqAEf8zeU+zAwTY8W 2lr2KLyztcqP4iH7N7r2201i3hyKyyGw8264KB/8VlY9xfOzSb8OVLJzcR8eTs/C vlYdNGtMGjZxMXuTfBd1cfLuSrQUiJjEn7KLWAjb5t+Ihf+YsGGyfc4Air5g3Cp7 4dTlqxZD+qWPrDfJry8xLhQ+f7nAUS1R5vny+/IQqx7zYS3NX2c9aSzgp+JH3ity i5qLXo4/UPwAL1VbL5iR/N8fh0M+7r1g4vioErn6U5UJugG7MdqEZ4nuCr++Ua7b VasuHp8veLFUrCxJiQZiYwwhoT3WTD6xcqGVBfPBLnQYGZekLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNn5VxZz78q24/B5It+/CL91hwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmM2Y4ZjUtY2Q0YS0z NDBjLWFmODktOWYyMTNhNmY5MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2XbD6mYjrVgHwRgi/hmuIDwNhwBFNK1SyM77O7UZgROcBxEuH2 sxbet1yjUsbhWFQhDIOJFA4VHRxcHvSoqgfNgrN5V3Uw1YOF7wp9vYIZXDT2wWM2 jUpwqugnxelgAS7rgM1RZZzbcQ84wTSrY2nD6H0BXev5f9eTbXgVB9lGxbqZlsNP rMO0N/jH6h9IybZDYnfevXGukfyO1w88TNnjrPStioC/lvk76n3jvs+bh+pfsIXQ Sm+LWNwEvWFaEeFY7dY+AjSJOx+YZIdH+lMOu0TA3gtbXgUm//r04RmaOSEmlSXg /5ajvJGV3B2i7Iq9SGC87I2DuO8A7PmF3iA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:43 2026 by rpki-client