$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa File: 4339716f-1035-3a93-8a86-6a2a6d14ef21.roa (raw, json) Hash identifier: tFEwr9VnUQdag8GUevC2dpUBuaDNq0p/a3x4Te4UvaY= Subject key identifier: 25:79:ED:14:2D:75:06:7E:29:92:9C:12:C8:B8:BD:91:EF:44:EA:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A1A4127E6928DAE277600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396543 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1a:41:27:e6:92:8d:ae:27:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4e3654a1-89ae-4e3c-b64b-f8354c633740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:e8:50:b7:96:71:56:9d:03:1a:52:67:49: a2:86:f5:51:1c:b0:65:e9:e8:4a:03:ef:51:dc:61: 04:ed:64:44:38:5d:33:02:76:c5:fe:79:8a:d4:88: d1:db:aa:9c:48:92:3a:f9:21:e2:83:c9:42:47:b1: cd:71:49:67:d9:40:5d:a3:8a:8b:64:53:76:59:0d: bb:ec:24:80:8d:49:b9:a4:da:ed:4a:71:72:a1:b5: dc:92:49:0d:e2:34:17:df:5e:6b:33:6d:42:58:16: d0:c4:62:e8:f2:30:9a:74:cf:2c:9b:d9:89:0b:6e: 9f:95:bf:7b:8d:70:56:66:80:6e:e3:be:56:d0:00: 5e:d1:eb:95:09:6e:40:37:27:df:a3:02:b5:1a:c9: f9:38:b6:9f:49:98:1c:a4:67:24:92:1a:e9:76:76: 7f:08:bd:50:ff:44:b0:bf:5d:9e:16:41:05:42:2e: 41:e5:ef:30:a9:65:7c:54:c0:97:5b:8e:3c:b4:89: df:11:6b:a0:d7:90:08:9f:86:79:d4:80:6a:84:5b: be:a6:fa:e1:d9:26:42:5b:0d:44:c9:e2:cf:91:c2: a4:ec:81:7d:41:b0:a8:c8:cb:11:bb:07:12:2f:d3: 98:f6:fc:9b:b2:93:6c:9d:99:1c:33:07:e2:20:52: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:ED:14:2D:75:06:7E:29:92:9C:12:C8:B8:BD:91:EF:44:EA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cf:4b:1f:51:2b:5d:d3:12:7a:74:30:56:cc:40:4d:b2:e0: 3e:93:86:12:83:0a:d6:54:57:fe:cc:a1:d0:86:21:ce:cf:2f: bd:02:ea:2d:9f:1d:85:e7:26:ad:16:12:b4:99:20:2a:e9:f9: 9f:02:06:3c:bd:97:57:65:7d:9c:c7:93:f0:aa:53:fc:d2:b6: e7:3f:03:db:7b:c3:0b:84:20:92:4c:84:f3:17:88:23:32:0f: 36:12:bb:2d:5d:ca:fd:01:f3:5a:ad:fc:97:6f:9c:15:b7:49: a5:79:e0:d3:8d:92:e9:61:40:d3:ae:79:0d:9c:94:0e:b9:77: 87:00:27:ee:da:25:fb:58:10:40:2f:36:40:65:55:33:1f:cb: be:f7:21:ac:06:97:2b:dc:35:b8:8c:b6:e7:7a:07:25:1e:2d: ac:a2:3c:8f:5c:b9:35:b5:63:50:89:c9:92:7b:9c:3e:22:29: 9d:c0:4e:2b:7a:bf:59:35:c3:5e:97:c1:3a:aa:db:7f:1d:0e: 10:e7:27:db:ed:c8:ff:d8:02:22:8a:86:ff:42:84:6b:9b:dc: c1:51:7c:16:70:62:a7:52:ab:4d:2b:be:e2:cd:27:22:d9:ef: be:c4:6d:29:1a:f5:58:78:58:eb:0d:43:ee:8c:6d:16:8d:92: 7d:76:b4:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jehpBJ+aSja4ndgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGUzNjU0YTEtODlhZS00ZTNjLWI2NGItZjgzNTRjNjMzNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghroULeWcVadAxpSZ0mihvVRHLBl6ehKA+9R 3GEE7WREOF0zAnbF/nmK1IjR26qcSJI6+SHig8lCR7HNcUln2UBdo4qLZFN2WQ27 7CSAjUm5pNrtSnFyobXckkkN4jQX315rM21CWBbQxGLo8jCadM8sm9mJC26flb97 jXBWZoBu475W0ABe0euVCW5ANyffowK1Gsn5OLafSZgcpGckkhrpdnZ/CL1Q/0Sw v12eFkEFQi5B5e8wqWV8VMCXW448tInfEWug15AIn4Z51IBqhFu+pvrh2SZCWw1E yeLPkcKk7IF9QbCoyMsRuwcSL9OY9vybspNsnZkcMwfiIFJ/EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCV57RQtdQZ+KZKcEsi4vZHvROo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzOTcxNmYtMTAzNS0z YTkzLThhODYtNmEyYTZkMTRlZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3PSx9RK13TEnp0MFbMQE2y4D6ThhKDCtZUV/7ModCGIc7PL70C 6i2fHYXnJq0WErSZICrp+Z8CBjy9l1dlfZzHk/CqU/zStuc/A9t7wwuEIJJMhPMX iCMyDzYSuy1dyv0B81qt/JdvnBW3SaV54NONkulhQNOueQ2clA65d4cAJ+7aJftY EEAvNkBlVTMfy773IawGlyvcNbiMtud6ByUeLayiPI9cuTW1Y1CJyZJ7nD4iKZ3A Tit6v1k1w16XwTqq238dDhDnJ9vtyP/YAiKKhv9ChGub3MFRfBZwYqdSq00rvuLN JyLZ777EbSka9Vh4WOsNQ+6MbRaNkn12tFg= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:15 2026 by rpki-client