$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa File: 45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa (raw, json) Hash identifier: Cx8UV907rf0huKHL72JqAgEoAwxunc1W4ZsXSN7xz50= Subject key identifier: 86:FC:FB:55:0B:23:EB:92:5E:D3:77:53:AD:C1:EC:82:CE:96:3A:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B1319020CE660F22FFAC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20431 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b1:31:90:20:ce:66:0f:22:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=690b9760-923a-40c2-8db3-bf16aeff0f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:d9:ae:63:16:4f:82:9d:42:a9:a3:a6:b3: 10:ca:47:8c:29:53:9f:e8:94:0c:d6:00:c6:17:e6: bc:56:5f:10:03:aa:95:d8:43:b5:91:e4:6a:f0:2b: d5:aa:90:82:5d:25:14:07:f3:f7:80:04:4f:e0:25: 78:4c:66:81:b3:22:fa:7e:c1:9c:cb:8b:9f:54:a9: 66:0a:0c:aa:0a:2c:e1:0f:14:72:16:da:16:66:66: 8d:83:53:ee:f9:84:76:c7:c6:9f:f5:4b:08:0c:34: b9:1a:83:3b:20:d6:38:7a:24:12:78:6c:d6:87:59: 04:25:5b:62:81:21:98:14:9f:ee:b0:55:81:8e:24: b6:25:c0:32:a3:f8:6e:f1:fa:c7:18:40:7b:6d:3c: 83:ec:13:bf:a4:5d:d7:ac:f4:01:3a:f4:9f:68:cc: ba:91:ac:f6:d4:78:ed:2e:f2:a8:8a:78:23:10:8b: 83:77:52:53:ad:e0:a7:66:0b:c7:7d:84:a4:5c:29: 39:82:e1:a3:76:fb:00:b8:44:a9:b6:36:e3:c6:4a: fb:6d:2c:7a:b3:3c:80:e1:95:c5:38:be:11:2e:d1: 88:23:c8:f4:1e:3e:ac:33:98:a2:94:81:15:74:64: 5c:27:eb:10:b1:28:c5:ef:59:25:5c:a7:54:0a:74: 6c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:FB:55:0B:23:EB:92:5E:D3:77:53:AD:C1:EC:82:CE:96:3A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f4:80:19:2f:5f:2d:c8:aa:fc:86:94:df:6a:e4:8a:52:b5: ee:e6:64:e0:9a:19:81:24:e4:8e:8d:f6:5f:6a:fc:9f:c5:67: b5:cc:e0:81:98:02:77:63:40:ad:5b:c1:b7:1e:89:f7:8b:be: 44:a1:59:a1:fb:fe:8b:c4:24:b7:2c:ed:f1:5e:18:97:a5:40: e1:43:d2:4f:c8:90:2f:d1:c1:5f:ca:1d:ca:f3:81:36:7e:dd: 2e:29:4c:40:26:96:65:4d:4c:ef:a5:23:ea:bf:16:12:7d:e3: 24:8b:2f:d7:dd:e2:28:59:05:c7:63:df:00:6e:85:0d:bf:20: a6:5a:82:0c:06:70:70:68:62:a2:bc:19:3e:cd:d5:8b:d0:29: a1:89:63:52:64:a6:bd:e0:3c:e6:07:ed:0c:a9:c0:19:42:75: db:50:7f:25:b4:94:75:f9:09:a2:58:5c:ca:fb:51:b2:94:73: be:a2:35:d5:0d:18:1b:12:ea:3f:b2:23:ec:a8:2c:79:e6:05: 82:f5:34:dc:a7:57:6d:b5:01:91:93:81:e5:41:39:33:54:91: 98:e5:fe:f5:b2:ed:92:f1:45:a3:7d:ab:c7:97:0e:49:e7:94: 38:8d:bb:89:71:bb:62:d7:af:66:63:7b:12:de:64:52:e2:bf: a8:11:8e:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErExkCDOZg8i/6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjkwYjk3NjAtOTIzYS00MGMyLThkYjMtYmYxNmFlZmYwZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznPZrmMWT4KdQqmjprMQykeMKVOf6JQM1gDG F+a8Vl8QA6qV2EO1keRq8CvVqpCCXSUUB/P3gARP4CV4TGaBsyL6fsGcy4ufVKlm CgyqCizhDxRyFtoWZmaNg1Pu+YR2x8af9UsIDDS5GoM7INY4eiQSeGzWh1kEJVti gSGYFJ/usFWBjiS2JcAyo/hu8frHGEB7bTyD7BO/pF3XrPQBOvSfaMy6kaz21Hjt LvKoingjEIuDd1JTreCnZgvHfYSkXCk5guGjdvsAuESptjbjxkr7bSx6szyA4ZXF OL4RLtGII8j0Hj6sM5iilIEVdGRcJ+sQsSjF71klXKdUCnRsIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIb8+1ULI+uSXtN3U63B7ILOljoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDVmYTZkOWMtOWE1OC0z NzYyLTkzM2EtYWI0MjBkY2QyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA70gBkvXy3IqvyGlN9q5IpSte7mZOCaGYEk5I6N9l9q/J/FZ7XM 4IGYAndjQK1bwbceifeLvkShWaH7/ovEJLcs7fFeGJelQOFD0k/IkC/RwV/KHcrz gTZ+3S4pTEAmlmVNTO+lI+q/FhJ94ySLL9fd4ihZBcdj3wBuhQ2/IKZaggwGcHBo YqK8GT7N1YvQKaGJY1Jkpr3gPOYH7QypwBlCddtQfyW0lHX5CaJYXMr7UbKUc76i NdUNGBsS6j+yI+yoLHnmBYL1NNynV221AZGTgeVBOTNUkZjl/vWy7ZLxRaN9q8eX DknnlDiNu4lxu2LXr2ZjexLeZFLiv6gRjmI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:47 2026 by rpki-client