$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa File: 59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa (raw, json) Hash identifier: ftBBXIYFF3ffq8UombmAvvMnWF7CrBMrXe/0n1l0YvY= Subject key identifier: B4:B6:F7:BF:B9:5A:BB:D1:C9:6F:C9:5D:F3:93:3D:C5:9F:61:02:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B50A8FE077B6EEA41800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 22547 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b5:0a:8f:e0:77:b6:ee:a4:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=2d4ab7af-354e-41a9-9a75-a474e67e353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:c1:91:76:e7:f3:72:f7:9c:44:12:e9:73: 0d:5f:e5:e9:f4:4f:e4:e3:1c:ec:7d:5f:35:27:6f: 43:4e:6d:ee:e4:64:f0:0f:a8:74:3c:ec:f2:ab:da: 8f:d9:37:d9:6e:85:84:32:6a:e4:21:9c:1e:ce:70: 29:8d:73:9d:b6:a2:69:01:a9:a0:89:26:7f:72:4e: cb:75:12:7f:9e:b7:1b:0b:d7:57:1a:f0:36:93:36: 6d:ca:64:7a:b7:c5:81:9d:6d:65:af:34:25:21:54: eb:f3:70:27:99:a9:65:fa:d0:03:69:e8:06:5e:5d: a8:82:b9:06:41:d8:7f:81:da:a3:03:6a:8e:05:ea: e7:92:fa:d0:59:7e:48:c8:ac:e0:86:bc:aa:39:60: 19:73:9f:2c:f4:7e:ab:78:2e:4d:bd:be:9d:47:11: 3f:c8:c0:1a:f0:5a:87:e4:23:de:8f:ff:10:9c:d1: bf:29:a7:47:cd:80:c2:8d:fa:94:92:89:c7:6c:f0: f7:f5:1e:8b:ca:da:cd:72:7e:bf:80:2f:00:3a:90: af:b4:a9:0e:82:70:f1:02:0b:2f:3d:cc:d4:43:2a: 5c:03:c0:5a:64:1d:93:65:aa:95:19:b6:7f:50:eb: 64:a3:0c:79:cb:f1:5e:94:93:81:56:15:4f:a9:23: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:F7:BF:B9:5A:BB:D1:C9:6F:C9:5D:F3:93:3D:C5:9F:61:02:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59d8e4fb-a3d9-31f2-ba7f-ae15c7c2d43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:04:12:94:9d:5a:e4:38:c8:2f:95:4d:f6:11:b8:19:5d:4f: f7:54:ed:51:39:e8:ab:0f:fa:06:c1:4a:b5:e5:32:6e:2c:15: 61:1d:a1:23:09:53:58:43:4d:00:1b:b6:be:dc:13:ad:30:cf: 9c:0a:83:6e:78:4b:dd:aa:52:26:82:32:52:81:c0:82:43:82: a0:2b:c5:a7:19:48:98:87:47:5b:b3:ce:4d:05:a1:6d:d1:11: 7b:14:5c:3c:86:83:7e:e1:42:a3:2a:f4:3f:63:84:19:7a:71: 30:62:85:ca:63:45:d0:56:39:08:c0:6c:48:94:4a:77:36:ee: 2a:24:fa:f9:28:c1:87:60:41:4c:7c:17:7b:89:69:1d:4b:c5: 94:74:a6:e5:6d:da:67:11:27:b6:f8:d4:93:78:06:24:dd:4f: 9c:7c:30:12:79:47:d7:a0:fb:6a:c5:f1:8e:59:7a:28:8f:aa: 64:f5:22:68:8e:51:56:5c:98:8b:12:b7:dd:38:4c:5a:10:48: 4d:5c:a4:b5:79:3e:13:ea:4f:45:63:1f:9f:c0:9d:b0:19:26: f4:3e:a9:1b:5b:57:7c:fc:66:dc:a4:46:7e:37:ff:fb:8e:d7: 4f:ad:14:39:41:6b:47:f6:67:2c:72:2e:dc:69:bd:13:1c:58: c5:4b:48:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErUKj+B3tu6kGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmQ0YWI3YWYtMzU0ZS00MWE5LTlhNzUtYTQ3NGU2N2UzNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1TBkXbn83L3nEQS6XMNX+Xp9E/k4xzsfV81 J29DTm3u5GTwD6h0POzyq9qP2TfZboWEMmrkIZweznApjXOdtqJpAamgiSZ/ck7L dRJ/nrcbC9dXGvA2kzZtymR6t8WBnW1lrzQlIVTr83Anmall+tADaegGXl2ogrkG Qdh/gdqjA2qOBernkvrQWX5IyKzghryqOWAZc58s9H6reC5Nvb6dRxE/yMAa8FqH 5CPej/8QnNG/KadHzYDCjfqUkonHbPD39R6LytrNcn6/gC8AOpCvtKkOgnDxAgsv PczUQypcA8BaZB2TZaqVGbZ/UOtkowx5y/FelJOBVhVPqSPo5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLS297+5WrvRyW/JXfOTPcWfYQIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTlkOGU0ZmItYTNkOS0z MWYyLWJhN2YtYWUxNWM3YzJkNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwEEpSdWuQ4yC+VTfYRuBldT/dU7VE56KsP+gbBSrXlMm4sFWEd oSMJU1hDTQAbtr7cE60wz5wKg254S92qUiaCMlKBwIJDgqArxacZSJiHR1uzzk0F oW3REXsUXDyGg37hQqMq9D9jhBl6cTBihcpjRdBWOQjAbEiUSnc27iok+vkowYdg QUx8F3uJaR1LxZR0puVt2mcRJ7b41JN4BiTdT5x8MBJ5R9eg+2rF8Y5ZeiiPqmT1 ImiOUVZcmIsSt904TFoQSE1cpLV5PhPqT0VjH5/AnbAZJvQ+qRtbV3z8ZtykRn43 //uO10+tFDlBa0f2ZyxyLtxpvRMcWMVLSFM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:37 2026 by rpki-client