$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa File: 514171ce-cdb6-32ee-8249-82444e759c90.roa (raw, json) Hash identifier: vLNKrkfnI32CIL3BFwMli9As9lMbHN0T+wHMT328iUg= Subject key identifier: AD:51:32:96:90:EA:E4:3E:0E:7A:82:7B:FB:EB:6F:10:58:B4:AB:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B1082F8D118CD7791740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 397206 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b1:08:2f:8d:11:8c:d7:79:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=c38df70a-0664-49e1-bb1c-46f4f0ada4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:4e:b2:1a:b6:ae:da:0f:76:1a:4a:50:89: 9f:a9:8e:f8:37:fa:eb:90:f1:3e:8f:e8:42:b7:af: 61:b4:b8:35:a3:e9:c4:62:91:ee:2f:c4:4f:a6:0e: 81:a2:aa:e5:8a:1f:ef:33:53:b3:0c:a8:4c:60:d3: ff:08:32:f3:66:1d:4a:47:c5:c5:f4:a1:4b:ee:3a: 31:f4:f7:94:9e:26:29:ac:39:b6:a2:60:f4:4f:c3: 14:84:45:ea:48:59:0f:24:2c:40:69:4a:bf:59:39: cf:6b:1a:92:00:b3:60:43:db:1f:19:c2:c5:f2:24: 92:68:a4:47:03:7d:8b:0f:db:d2:71:fb:81:c0:03: 3a:3a:67:4e:ff:c5:67:6f:e2:8c:c3:35:2f:b7:3a: 94:10:78:67:3c:12:bd:c7:1c:31:4e:ad:fb:c8:3b: 90:7e:92:a9:92:cd:37:29:66:18:40:da:d6:62:c8: 2c:15:05:4e:ad:de:a3:42:f2:a9:f1:fb:53:3c:f6: 75:20:c4:3c:7d:97:77:7d:d6:a3:71:ad:56:ec:39: 82:34:2c:92:5d:83:9e:21:17:b0:55:d8:1c:19:21: 16:03:e3:8a:54:61:07:ca:71:66:65:cd:a8:26:eb: 60:2b:97:aa:05:03:ae:76:d3:8d:f7:06:50:de:74: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:51:32:96:90:EA:E4:3E:0E:7A:82:7B:FB:EB:6F:10:58:B4:AB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0b:80:49:b8:ab:54:4c:7d:88:58:82:a6:6a:89:e8:04:59: 41:b6:39:ce:2f:3f:47:30:cb:f5:8a:b5:be:d4:d3:d4:64:99: 8a:b8:bb:5f:b8:ee:8b:9d:20:be:2c:1e:e2:a0:87:6c:aa:e0: 18:0d:6e:f7:b2:7d:2a:20:82:37:dd:3d:60:f5:df:77:ab:08: 09:97:d2:1d:d0:d3:0f:ae:0e:75:e0:53:9f:49:6d:27:da:52: f7:5e:2c:36:30:a4:8c:08:7c:b9:64:d9:cf:eb:0f:37:d5:23: 9c:dc:ee:cf:32:ab:95:47:b2:11:17:be:ef:88:eb:79:c7:69: 15:80:5c:59:af:4e:21:ab:13:61:d6:0a:5e:d6:c2:0e:25:b1: 6b:a5:3c:7e:e1:d9:7e:f7:2f:fe:ce:fe:6a:fe:92:86:52:cf: f5:36:a9:d3:34:11:0f:81:b5:a5:52:de:61:65:d3:aa:1b:bd: 00:ce:b2:79:4a:71:12:64:11:e0:87:30:7a:49:a1:e1:50:cb: bd:a1:ee:7e:e7:b2:6d:d4:e6:73:2e:11:f4:f2:f8:35:67:35: 36:58:72:ec:84:8d:a6:12:f3:7f:d2:7f:0a:fa:e7:59:fb:59: 19:0c:ea:97:11:5f:0b:5c:c1:4b:af:13:80:80:88:54:33:4b: 9c:9a:a1:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bEIL40RjNd5F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk YzM4ZGY3MGEtMDY2NC00OWUxLWJiMWMtNDZmNGYwYWRhNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtOshq2rtoPdhpKUImfqY74N/rrkPE+j+hC t69htLg1o+nEYpHuL8RPpg6Boqrlih/vM1OzDKhMYNP/CDLzZh1KR8XF9KFL7jox 9PeUniYprDm2omD0T8MUhEXqSFkPJCxAaUq/WTnPaxqSALNgQ9sfGcLF8iSSaKRH A32LD9vScfuBwAM6OmdO/8Vnb+KMwzUvtzqUEHhnPBK9xxwxTq37yDuQfpKpks03 KWYYQNrWYsgsFQVOrd6jQvKp8ftTPPZ1IMQ8fZd3fdajca1W7DmCNCySXYOeIRew VdgcGSEWA+OKVGEHynFmZc2oJutgK5eqBQOudtON9wZQ3nQ6kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK1RMpaQ6uQ+DnqCe/vrbxBYtKtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTE0MTcxY2UtY2RiNi0z MmVlLTgyNDktODI0NDRlNzU5YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACsLgEm4q1RMfYhYgqZqiegEWUG2Oc4vP0cwy/WKtb7U09RkmYq4 u1+47oudIL4sHuKgh2yq4BgNbveyfSoggjfdPWD133erCAmX0h3Q0w+uDnXgU59J bSfaUvdeLDYwpIwIfLlk2c/rDzfVI5zc7s8yq5VHshEXvu+I63nHaRWAXFmvTiGr E2HWCl7Wwg4lsWulPH7h2X73L/7O/mr+koZSz/U2qdM0EQ+BtaVS3mFl06obvQDO snlKcRJkEeCHMHpJoeFQy72h7n7nsm3U5nMuEfTy+DVnNTZYcuyEjaYS83/Sfwr6 51n7WRkM6pcRXwtcwUuvE4CAiFQzS5yaofU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:28 2026 by rpki-client