$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5764ed15-e57b-35ca-bad0-005217c4c014.roa File: 5764ed15-e57b-35ca-bad0-005217c4c014.roa (raw, json) Hash identifier: 3SOQBMFkEQtpQhOcReYUu4njp9iAnlyOcsRsp3F08rk= Subject key identifier: 69:3F:4E:CC:12:0F:8E:FA:C9:C7:7A:E7:13:DB:63:95:BD:DD:CD:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A076E6970579856E5B800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5764ed15-e57b-35ca-bad0-005217c4c014.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396617 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:07:6e:69:70:57:98:56:e5:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4be31345-d7a8-4376-b0e3-96af618a662b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:72:b6:95:17:fb:06:b4:ee:5d:11:e7:7c: 8b:fc:e2:fb:23:45:27:47:ef:3f:8c:6d:fa:bc:2b: 45:76:2a:6e:60:fc:d0:fc:04:cd:2c:25:75:92:4d: 7e:b6:b0:6c:a4:a3:4d:a8:ff:7f:96:15:1e:c7:a0: 24:53:78:fd:54:be:d8:98:70:8d:56:36:04:09:4a: 10:48:ea:5b:00:53:91:77:04:37:3c:20:0c:9f:d7: 35:29:0d:ce:04:34:80:76:98:c7:08:61:f1:6a:42: e0:ef:aa:dc:16:fc:14:e5:3a:04:91:e9:20:b8:7e: f8:0d:5c:e6:f7:31:42:82:fa:bc:96:0b:54:29:c3: 48:d9:99:2b:4d:45:56:73:d9:cd:47:fe:a2:8f:a6: 48:48:8e:f1:fc:9d:9d:fc:6a:ef:22:4a:2d:cf:aa: 6f:90:77:ca:6b:10:06:2d:ce:fb:1c:3b:cd:50:1a: cd:f9:ab:d8:36:a4:3d:a3:e1:fe:30:9f:06:40:72: 88:06:37:8c:5e:dc:bd:5f:de:95:69:22:ba:3d:d5: 1c:9b:8a:8d:24:14:02:f3:60:70:34:e4:06:d2:41: be:be:cb:2f:01:95:c6:e6:79:9b:7c:de:ad:28:0d: c1:39:ad:02:52:15:71:01:d2:06:ed:52:f8:3e:da: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:4E:CC:12:0F:8E:FA:C9:C7:7A:E7:13:DB:63:95:BD:DD:CD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5764ed15-e57b-35ca-bad0-005217c4c014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0b:4e:0c:89:d6:cc:ab:0b:41:c8:3d:e4:9f:c0:29:ab:2e: 4c:03:c5:99:60:e2:25:f9:ae:b5:bb:5a:cf:6b:ff:23:d8:d2: ca:f2:33:49:2e:20:68:6f:49:de:ac:ea:e8:44:55:40:07:7a: 12:09:04:66:71:9c:61:65:4f:28:9d:95:2b:1d:20:7a:b4:9b: 1f:36:ac:e3:f7:79:16:54:48:cf:a6:83:54:97:7d:f1:4c:ee: 00:4b:ab:5c:57:74:34:2b:f5:30:33:07:e1:40:90:99:5a:49: 10:59:ef:8a:9d:33:b4:51:c9:bb:aa:f8:e5:86:27:1e:e2:22: e0:f6:22:c8:03:5c:30:f4:51:bd:40:63:b6:68:42:73:c3:46: 69:41:ba:68:ea:6a:f5:dc:1b:2b:8a:32:28:72:d0:30:87:f6: 94:f1:41:52:28:c8:88:5d:c5:0f:28:6e:c4:0b:67:3a:27:ca: ac:23:39:24:89:52:f0:5b:31:cd:f1:c6:81:1d:65:b1:38:5d: 3d:d5:f5:64:1c:72:fe:08:19:1b:a7:c6:72:6f:11:8a:87:36: b2:7d:9c:f8:7d:07:19:1d:80:bf:ee:24:e7:da:cb:95:4e:a9: 84:5a:10:36:31:dc:b9:bd:32:8e:50:c2:e4:de:3c:1f:28:74: c4:11:45:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jegduaXBXmFbluAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGJlMzEzNDUtZDdhOC00Mzc2LWIwZTMtOTZhZjYxOGE2NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqhytpUX+wa07l0R53yL/OL7I0UnR+8/jG36 vCtFdipuYPzQ/ATNLCV1kk1+trBspKNNqP9/lhUex6AkU3j9VL7YmHCNVjYECUoQ SOpbAFORdwQ3PCAMn9c1KQ3OBDSAdpjHCGHxakLg76rcFvwU5ToEkekguH74DVzm 9zFCgvq8lgtUKcNI2ZkrTUVWc9nNR/6ij6ZISI7x/J2d/GrvIkotz6pvkHfKaxAG Lc77HDvNUBrN+avYNqQ9o+H+MJ8GQHKIBjeMXty9X96VaSK6PdUcm4qNJBQC82Bw NOQG0kG+vssvAZXG5nmbfN6tKA3BOa0CUhVxAdIG7VL4Ptpi/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGk/TswSD476ycd65xPbY5W93c2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc2NGVkMTUtZTU3Yi0z NWNhLWJhZDAtMDA1MjE3YzRjMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEILTgyJ1syrC0HIPeSfwCmrLkwDxZlg4iX5rrW7Ws9r/yPY0sry M0kuIGhvSd6s6uhEVUAHehIJBGZxnGFlTyidlSsdIHq0mx82rOP3eRZUSM+mg1SX ffFM7gBLq1xXdDQr9TAzB+FAkJlaSRBZ74qdM7RRybuq+OWGJx7iIuD2IsgDXDD0 Ub1AY7ZoQnPDRmlBumjqavXcGyuKMihy0DCH9pTxQVIoyIhdxQ8obsQLZzonyqwj OSSJUvBbMc3xxoEdZbE4XT3V9WQccv4IGRunxnJvEYqHNrJ9nPh9BxkdgL/uJOfa y5VOqYRaEDYx3Lm9Mo5QwuTePB8odMQRRQ4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:36 2026 by rpki-client