$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c043915-ad6c-335c-9c63-fadd3147990e.roa File: 5c043915-ad6c-335c-9c63-fadd3147990e.roa (raw, json) Hash identifier: tsovTCVTujmF0OmloelhjRkmHGoA/x0kV6EpFCkq5Tw= Subject key identifier: BF:DB:FF:19:E4:83:81:AA:7D:36:B2:2B:ED:1A:8D:C0:D1:98:E8:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B1949DE749CBEFAC4C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c043915-ad6c-335c-9c63-fadd3147990e.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 20172 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b1:94:9d:e7:49:cb:ef:ac:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=7b5d4256-f338-47c8-b6fd-bfdb4ed9bda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:db:51:79:70:a7:3e:88:d5:6f:62:c7:4d:b2: 00:a7:2e:95:b8:d3:1d:ec:61:6f:24:88:34:09:e9: 0c:85:d5:0e:47:0a:66:e1:da:66:10:bb:ef:f5:9f: 36:db:de:93:72:a2:9c:5f:ab:b1:39:35:50:d7:5f: 91:a4:b9:c6:8a:05:25:94:b5:43:6a:78:5f:37:d5: d0:5a:a9:56:52:34:02:18:b3:82:8d:9e:e1:ca:fe: 1c:39:38:99:1b:9b:d2:20:37:22:fd:6f:df:d1:ca: 93:5b:a9:45:5f:b9:c8:54:0c:3d:be:c9:9f:e3:dd: 60:b8:eb:bf:d5:c4:c1:01:6a:eb:f1:ff:3b:73:a1: 6a:58:71:13:85:56:39:fa:f3:21:e9:63:44:14:25: e7:d1:64:75:ac:0f:fe:a1:ec:43:f4:57:bd:91:7a: 30:51:05:7d:26:db:b9:75:c7:96:b7:c1:b0:5c:e6: c7:14:ac:df:3a:1a:db:fb:7b:6a:57:d1:1a:27:4e: 20:48:01:81:32:a0:ba:37:f2:86:1e:07:3a:91:6a: 18:8c:9a:31:4f:1e:70:20:49:6b:50:b5:73:10:1f: 8b:aa:ab:60:1c:12:0e:ab:fd:d5:b4:a2:6c:e6:11: a4:53:6a:17:11:c6:d6:64:67:21:f1:62:51:08:15: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DB:FF:19:E4:83:81:AA:7D:36:B2:2B:ED:1A:8D:C0:D1:98:E8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c043915-ad6c-335c-9c63-fadd3147990e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:96:f6:f8:3d:7c:9e:53:35:29:ee:f6:5d:83:69:49:d9:b1: 40:6e:ef:87:d9:36:5d:59:74:75:e0:e8:a1:04:6d:6a:9a:22: 18:72:cd:aa:f4:5e:27:86:40:25:31:8f:78:b6:78:1e:2d:2d: 99:3a:98:da:4e:09:92:40:80:20:be:6a:70:de:a2:4b:0f:73: f2:53:a0:98:9e:9f:47:b7:ee:96:38:5d:6d:cb:4a:0a:51:66: 97:f1:2f:8a:a6:cf:99:c8:3b:f0:77:b2:05:9e:f4:69:cd:f2: 7c:36:14:cb:98:d6:42:94:02:42:4e:5c:15:cf:a4:41:e6:f6: db:23:6d:9d:77:84:a1:d4:bf:4b:dc:c1:b6:e5:38:7c:ab:ec: 66:cd:a9:d5:c9:88:06:b9:5f:87:de:50:c5:07:b4:a2:ba:1a: ec:7e:51:2b:c0:90:a7:d9:e1:40:5c:60:1c:2d:8a:b8:aa:26: 78:5a:95:fa:32:6a:d7:b0:cd:10:dd:3c:52:d4:8c:56:60:10: d2:cb:d0:fd:7d:2c:f8:94:7d:f0:57:97:ef:12:ac:df:49:a8: d2:ce:a5:55:35:8a:fa:81:54:1a:0f:b3:3d:c9:3d:69:8b:68: 00:f2:f3:44:c8:2b:98:7f:38:46:02:fd:f1:b4:61:a9:1a:27: 4c:de:2a:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bGUnedJy++sTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk N2I1ZDQyNTYtZjMzOC00N2M4LWI2ZmQtYmZkYjRlZDliZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79tReXCnPojVb2LHTbIApy6VuNMd7GFvJIg0 CekMhdUORwpm4dpmELvv9Z82296TcqKcX6uxOTVQ11+RpLnGigUllLVDanhfN9XQ WqlWUjQCGLOCjZ7hyv4cOTiZG5vSIDci/W/f0cqTW6lFX7nIVAw9vsmf491guOu/ 1cTBAWrr8f87c6FqWHEThVY5+vMh6WNEFCXn0WR1rA/+oexD9Fe9kXowUQV9Jtu5 dceWt8GwXObHFKzfOhrb+3tqV9EaJ04gSAGBMqC6N/KGHgc6kWoYjJoxTx5wIElr ULVzEB+LqqtgHBIOq/3VtKJs5hGkU2oXEcbWZGch8WJRCBVhBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL/b/xnkg4GqfTayK+0ajcDRmOg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMwNDM5MTUtYWQ2Yy0z MzVjLTljNjMtZmFkZDMxNDc5OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeW9vg9fJ5TNSnu9l2DaUnZsUBu74fZNl1ZdHXg6KEEbWqaIhhy zar0XieGQCUxj3i2eB4tLZk6mNpOCZJAgCC+anDeoksPc/JToJien0e37pY4XW3L SgpRZpfxL4qmz5nIO/B3sgWe9GnN8nw2FMuY1kKUAkJOXBXPpEHm9tsjbZ13hKHU v0vcwbblOHyr7GbNqdXJiAa5X4feUMUHtKK6Gux+USvAkKfZ4UBcYBwtiriqJnha lfoyatewzRDdPFLUjFZgENLL0P19LPiUffBXl+8SrN9JqNLOpVU1ivqBVBoPsz3J PWmLaADy80TIK5h/OEYC/fG0YakaJ0zeKu4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:29:34 2026 by rpki-client