$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa File: 4cee037e-2581-3264-9e76-963e4f5cc668.roa (raw, json) Hash identifier: OYH8rUoszgVaNMFqrxVB1v3qN0x19rYQQ3KHgGTbjX4= Subject key identifier: DA:6D:FA:CC:CE:8A:9B:42:E8:60:B2:3B:60:08:A0:EC:18:DF:10:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B210EC944689A9DA9700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 32651 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b2:10:ec:94:46:89:a9:da:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=dd24b744-7910-4531-b6c3-245568bc7e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:96:60:58:08:67:8f:11:bf:46:09:07:58: bb:1e:ac:c6:bb:a2:e7:8b:18:7f:93:56:a6:20:b8: 25:10:2c:68:04:00:e2:78:ea:54:ef:ef:8e:08:46: aa:47:d4:a3:e8:f5:79:8c:38:f6:f5:e1:14:3f:e4: d6:e5:3b:94:fd:be:6b:ca:42:7d:2d:24:d2:30:50: 90:c0:a7:14:76:06:71:78:d0:a8:af:a7:d6:af:fb: ac:25:8a:c8:b5:a8:3d:bb:c1:0d:ee:5f:fe:cc:e1: 2e:de:56:0a:77:03:67:36:f2:64:5f:03:ac:ed:49: 07:34:ee:e0:77:dd:a4:0d:93:bf:b8:ec:d1:cb:9f: b2:34:a3:05:62:54:87:8a:c8:80:4e:11:1c:26:44: 08:86:6e:d9:33:31:ad:46:ea:04:c5:1e:7e:73:e4: af:28:8b:90:64:c6:a3:b3:f0:f3:33:82:c8:9e:0d: fa:4b:71:0c:8e:b8:68:57:4e:df:26:87:cd:81:73: cc:b6:b3:ef:3a:52:f5:e4:9b:61:b1:31:20:5e:dd: 69:38:ac:8a:c7:0d:6f:9b:6f:f2:6c:6f:f4:59:0a: e6:c0:3a:a3:f6:16:6b:89:36:a7:e3:47:23:07:22: 8f:22:53:9e:67:05:5e:60:27:63:0e:52:92:c6:d7: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6D:FA:CC:CE:8A:9B:42:E8:60:B2:3B:60:08:A0:EC:18:DF:10:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:25:2b:35:ec:78:d1:a5:24:4d:82:40:4d:dc:4b:c3:b1:73: 2c:80:41:a7:f0:18:e1:6e:7d:81:b8:02:88:f2:43:03:82:11: 75:66:89:3e:bc:2f:5b:eb:ff:1a:24:28:9b:6b:28:e7:03:10: 5f:d2:de:77:53:b6:b5:b5:d4:8f:bc:88:e5:88:70:b8:e2:cd: 14:8d:c2:97:5e:99:e9:cb:d3:5f:46:79:59:ac:b3:7d:c8:0c: b7:61:86:f7:c3:dc:f3:1a:91:fb:b4:46:3b:14:91:09:1b:17: 9d:2f:4b:57:cf:b0:98:65:7e:ac:05:31:64:66:78:d6:f2:e7: 17:a7:82:ca:34:ce:0e:15:29:82:af:ad:4e:c0:59:7d:c9:9e: 75:72:ea:2f:ef:80:58:a0:68:6d:fb:02:cc:0d:0f:9a:92:49: a4:88:32:1b:e9:b3:92:5e:55:2d:3f:97:45:20:6d:eb:84:fa: db:79:d0:d6:0a:ab:36:f4:86:92:b9:45:18:e4:4e:1b:1e:24: f8:88:f9:36:8a:2f:b2:6e:bf:86:62:be:59:5e:34:9f:36:93: 91:02:1b:d6:79:1b:6a:30:8f:18:bb:72:fe:13:40:71:ef:03: 2e:a3:eb:cf:f3:48:2c:0f:ba:8f:f2:2e:2f:29:90:87:2c:a3: 60:f3:f5:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErIQ7JRGianalwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGQyNGI3NDQtNzkxMC00NTMxLWI2YzMtMjQ1NTY4YmM3ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/mWYFgIZ48Rv0YJB1i7HqzGu6Lnixh/k1am ILglECxoBADieOpU7++OCEaqR9Sj6PV5jDj29eEUP+TW5TuU/b5rykJ9LSTSMFCQ wKcUdgZxeNCor6fWr/usJYrItag9u8EN7l/+zOEu3lYKdwNnNvJkXwOs7UkHNO7g d92kDZO/uOzRy5+yNKMFYlSHisiAThEcJkQIhm7ZMzGtRuoExR5+c+SvKIuQZMaj s/DzM4LIng36S3EMjrhoV07fJofNgXPMtrPvOlL15JthsTEgXt1pOKyKxw1vm2/y bG/0WQrmwDqj9hZriTan40cjByKPIlOeZwVeYCdjDlKSxtfb9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNpt+szOiptC6GCyO2AIoOwY3xAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGNlZTAzN2UtMjU4MS0z MjY0LTllNzYtOTYzZTRmNWNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIlKzXseNGlJE2CQE3cS8OxcyyAQafwGOFufYG4AojyQwOCEXVm iT68L1vr/xokKJtrKOcDEF/S3ndTtrW11I+8iOWIcLjizRSNwpdemenL019GeVms s33IDLdhhvfD3PMakfu0RjsUkQkbF50vS1fPsJhlfqwFMWRmeNby5xengso0zg4V KYKvrU7AWX3JnnVy6i/vgFigaG37AswND5qSSaSIMhvps5JeVS0/l0UgbeuE+tt5 0NYKqzb0hpK5RRjkThseJPiI+TaKL7Juv4ZivlleNJ82k5ECG9Z5G2owjxi7cv4T QHHvAy6j68/zSCwPuo/yLi8pkIcso2Dz9RU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:03 2026 by rpki-client