$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa File: 5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa (raw, json) Hash identifier: JCOMfRimv2DMLHy7YsXA1DIJUlm43yx517oCtP+jOQc= Subject key identifier: 05:01:DA:04:76:29:5C:F0:9B:20:86:A1:0F:78:4A:0B:4F:F6:54:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B270260CB11C9B288880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 20431 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:70:26:0c:b1:1c:9b:28:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=69f9025c-15f5-4119-8ff9-ca5da348e155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:a7:11:0f:36:6b:94:6f:85:f4:52:e8:2b: 72:34:90:43:92:8a:d6:8e:94:92:f9:4d:f2:ad:a4: 6b:1c:cc:eb:41:a1:e3:dc:2c:cc:3e:25:ec:9c:be: fa:3c:85:57:b1:eb:47:5e:e4:fb:09:c4:ca:88:0f: a9:14:ea:6d:58:af:9a:88:58:cf:c2:04:4c:9b:aa: b7:80:f0:58:28:7f:78:3c:37:e4:83:a6:65:fe:1b: 0b:4c:55:50:2a:91:2c:5d:26:7f:d3:3c:87:af:a3: 1e:b6:46:d2:8b:2a:28:e1:f3:e6:94:c9:6b:3f:42: d9:62:86:18:e9:07:ae:4e:86:91:3c:05:13:3d:0a: d6:fe:24:05:3d:33:bd:83:58:c3:38:a1:c4:46:7a: bb:51:d2:9f:1f:cb:b8:2e:1c:61:48:bd:5f:35:4b: 89:cf:3a:19:1c:39:9a:f7:8e:78:aa:90:fa:1e:0a: 35:97:c3:82:89:e8:9f:33:e0:33:18:f0:ce:52:f3: d8:c2:6d:8e:28:29:de:ec:c6:be:09:6a:b2:a2:55: b2:6b:3c:81:92:33:f1:fc:25:8b:00:5c:1a:90:af: d4:ee:00:60:0f:fc:04:9e:30:3d:cc:4b:57:53:dc: fd:40:4c:39:c8:40:e0:6a:aa:1b:f9:25:23:4e:6a: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:DA:04:76:29:5C:F0:9B:20:86:A1:0F:78:4A:0B:4F:F6:54:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d2:92:a7:25:15:96:16:d5:77:23:d0:6b:ae:48:71:d7:43: 8a:59:78:15:ef:95:e6:c7:c9:7a:64:27:b3:16:9e:c8:85:a8: 23:e0:be:fd:b5:c8:8d:29:b3:fb:ab:68:ed:bf:84:b1:83:45: 44:ff:d1:a5:5c:a4:3f:11:dd:a7:5e:08:ec:92:84:e3:a6:8c: 63:7f:73:99:96:d9:0b:87:7e:a8:e4:52:5f:6f:21:c6:a0:a7: a5:6e:c8:11:68:42:ac:f4:5b:f8:43:09:6d:13:0d:31:7b:87: 2c:71:06:a0:2a:30:e8:0d:c4:0d:54:e4:ab:8c:fe:88:ad:fe: b8:ae:2c:87:2b:cd:73:be:59:d0:9a:b3:32:04:2b:ab:2f:46: 76:7f:f0:82:15:ac:86:12:af:ad:6b:43:b7:1a:05:3d:68:d0: 64:d4:02:a2:05:74:ae:87:e1:d3:b6:43:9a:80:f9:6d:60:8c: 3e:3d:95:3e:6e:5d:f8:7b:2c:8a:08:2f:12:aa:cd:c2:5b:22: 76:42:fe:b0:85:2c:24:87:f6:23:41:85:e9:be:9f:f3:0d:8a: 74:f0:7a:87:a6:29:b4:6a:8d:a4:37:2a:47:78:7c:f9:be:a5: b8:51:c7:7a:61:4e:2b:35:15:88:75:d0:58:d6:71:93:34:e0: 5f:30:74:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bJwJgyxHJsoiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk NjlmOTAyNWMtMTVmNS00MTE5LThmZjktY2E1ZGEzNDhlMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4enEQ82a5RvhfRS6CtyNJBDkorWjpSS+U3y raRrHMzrQaHj3CzMPiXsnL76PIVXsetHXuT7CcTKiA+pFOptWK+aiFjPwgRMm6q3 gPBYKH94PDfkg6Zl/hsLTFVQKpEsXSZ/0zyHr6MetkbSiyoo4fPmlMlrP0LZYoYY 6QeuToaRPAUTPQrW/iQFPTO9g1jDOKHERnq7UdKfH8u4LhxhSL1fNUuJzzoZHDma 9454qpD6Hgo1l8OCieifM+AzGPDOUvPYwm2OKCne7Ma+CWqyolWyazyBkjPx/CWL AFwakK/U7gBgD/wEnjA9zEtXU9z9QEw5yEDgaqob+SUjTmqgzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAUB2gR2KVzwmyCGoQ94SgtP9lSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA2MGIxYzUtMWU1Zi0z YmQzLWJiNzYtM2NlMDJjY2ZkNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETSkqclFZYW1Xcj0GuuSHHXQ4pZeBXvlebHyXpkJ7MWnsiFqCPg vv21yI0ps/uraO2/hLGDRUT/0aVcpD8R3adeCOyShOOmjGN/c5mW2QuHfqjkUl9v Icagp6VuyBFoQqz0W/hDCW0TDTF7hyxxBqAqMOgNxA1U5KuM/oit/riuLIcrzXO+ WdCaszIEK6svRnZ/8IIVrIYSr61rQ7caBT1o0GTUAqIFdK6H4dO2Q5qA+W1gjD49 lT5uXfh7LIoILxKqzcJbInZC/rCFLCSH9iNBhem+n/MNinTweoemKbRqjaQ3Kkd4 fPm+pbhRx3phTis1FYh10FjWcZM04F8wdBc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:18:42 2026 by rpki-client