$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5668cac5-4fe1-39b6-83cc-2bd982537207.roa File: 5668cac5-4fe1-39b6-83cc-2bd982537207.roa (raw, json) Hash identifier: 3UVEU2BJnkea7Zuf8+q5DsaML63bIlAA2iIxBNa2omk= Subject key identifier: 3D:63:16:84:FD:84:B1:4E:9D:86:88:00:BC:6B:EF:59:19:54:E9:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA51EEA36C07B2238E0E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5668cac5-4fe1-39b6-83cc-2bd982537207.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396567 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:51:ee:a3:6c:07:b2:23:8e:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0d4fd041-9187-48b7-9187-7f6d172a7681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:b9:1d:04:73:43:08:75:81:a1:c5:ca:fe: b1:50:53:f5:18:57:96:fe:0a:f3:f4:f6:80:7a:5c: 1b:92:7f:a7:d0:15:bf:53:3e:02:62:92:0e:d3:61: db:5f:68:1d:d1:51:0d:40:bf:37:19:d7:a6:36:69: c7:87:68:81:ba:3f:56:c3:0a:ef:a3:0a:1d:b4:19: 97:d2:4f:79:c1:b3:04:78:8d:77:00:d8:f9:8c:8f: 56:29:51:17:92:06:28:ca:f3:b6:26:48:83:87:0d: de:0b:59:12:82:31:58:3b:d7:f1:cb:23:fd:2e:0f: ad:3f:48:72:8c:7b:19:b7:30:54:86:7e:f0:36:57: 4d:20:34:09:21:b2:20:3a:2b:e7:21:93:87:a0:3e: 13:54:9e:99:19:61:84:b7:24:d7:e2:ef:59:3b:43: c0:fe:fb:a7:f8:ca:3f:6a:3b:27:ec:88:65:7d:b7: 4c:90:41:04:df:17:a6:0a:0b:5e:84:da:8a:00:f2: 54:75:33:de:42:f1:5e:08:89:82:e0:bf:33:ed:e1: 9e:c1:49:55:5e:58:c9:99:96:21:3a:9b:ff:ad:2d: df:b9:68:9b:c3:21:5e:f9:e7:57:44:e9:f2:60:d9: 1b:96:88:69:37:54:61:58:fd:f0:0d:25:9a:7b:a0: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:63:16:84:FD:84:B1:4E:9D:86:88:00:BC:6B:EF:59:19:54:E9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5668cac5-4fe1-39b6-83cc-2bd982537207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1c:9a:3f:c2:be:02:4e:ac:b5:69:4b:1e:f4:b1:01:c8:d6: fa:ff:fe:f2:fb:db:45:7a:03:af:22:d1:5a:27:25:46:49:87: 9c:4a:ad:c2:97:c1:8c:5f:3e:32:7b:1b:97:42:74:5a:45:f4: 7a:80:ae:38:a7:6c:27:3b:4e:99:e0:61:18:9c:2b:b2:39:2b: 75:fb:d3:8a:4a:bd:8c:4c:16:dd:9a:4e:e3:5b:7c:75:14:f8: 64:b4:04:ba:b0:03:37:5d:a0:e3:2f:12:3f:4a:69:a0:c7:c4: b3:e4:18:f4:e1:6f:5c:5e:70:fc:ef:90:cc:8b:1f:16:da:e6: 3d:4f:13:98:96:88:7c:75:a8:eb:ac:23:fc:f3:b8:a2:b0:aa: 16:bb:c8:11:44:f6:f3:6e:7b:7b:b6:3b:a8:4e:e3:ee:0d:f3: 7a:fb:35:c0:00:85:d7:cd:03:e0:af:5e:3d:5b:2b:9f:84:96: 0f:fd:cb:17:cd:35:4c:c5:28:ba:81:b2:00:db:1a:6d:1a:19: dc:9a:59:56:a4:d3:f9:78:ea:fa:cc:4c:49:3d:72:ca:94:1c: 03:7a:49:22:ea:53:66:8a:07:58:e0:10:bf:48:a8:23:3b:d0: a6:e5:6d:c1:9e:ba:0f:20:ea:d6:a5:45:ed:c0:e6:14:82:e8: c6:8d:d5:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lHuo2wHsiOODgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGQ0ZmQwNDEtOTE4Ny00OGI3LTkxODctN2Y2ZDE3MmE3NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFO5HQRzQwh1gaHFyv6xUFP1GFeW/grz9PaA elwbkn+n0BW/Uz4CYpIO02HbX2gd0VENQL83GdemNmnHh2iBuj9WwwrvowodtBmX 0k95wbMEeI13ANj5jI9WKVEXkgYoyvO2JkiDhw3eC1kSgjFYO9fxyyP9Lg+tP0hy jHsZtzBUhn7wNldNIDQJIbIgOivnIZOHoD4TVJ6ZGWGEtyTX4u9ZO0PA/vun+Mo/ ajsn7IhlfbdMkEEE3xemCgtehNqKAPJUdTPeQvFeCImC4L8z7eGewUlVXljJmZYh Opv/rS3fuWibwyFe+edXROnyYNkblohpN1RhWP3wDSWae6APXQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD1jFoT9hLFOnYaIALxr71kZVOkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTY2OGNhYzUtNGZlMS0z OWI2LTgzY2MtMmJkOTgyNTM3MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAHJo/wr4CTqy1aUse9LEByNb6//7y+9tFegOv ItFaJyVGSYecSq3Cl8GMXz4yexuXQnRaRfR6gK44p2wnO06Z4GEYnCuyOSt1+9OK Sr2MTBbdmk7jW3x1FPhktAS6sAM3XaDjLxI/Smmgx8Sz5Bj04W9cXnD875DMix8W 2uY9TxOYloh8dajrrCP887iisKoWu8gRRPbzbnt7tjuoTuPuDfN6+zXAAIXXzQPg r149WyufhJYP/csXzTVMxSi6gbIA2xptGhncmllWpNP5eOr6zExJPXLKlBwDekki 6lNmigdY4BC/SKgjO9Cm5W3BnroPIOrWpUXtwOYUgujGjdUZ -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:02 2026 by rpki-client