$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa File: 5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa (raw, json) Hash identifier: 4/2BafPPvxMEdzSG9tHZbyjUa7QVNuTdFm9Up5nxBiQ= Subject key identifier: 1A:93:6E:3E:DA:EE:B4:78:FD:A1:D6:82:1C:85:F8:C6:EE:19:E4:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379FD3636B16891F857F7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396614 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fd:36:36:b1:68:91:f8:57:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=840b9997-5faa-4682-b201-836f6ea7221d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:30:71:93:4e:0f:7d:48:c4:84:c9:4e:01: 24:fd:ab:8b:9a:2d:0a:4b:7b:d2:07:2c:1d:78:6d: ca:cc:ac:6d:c7:78:56:f8:0c:fb:e9:32:1c:df:3a: e4:b7:d8:fb:0e:fb:e7:f1:f6:f2:e3:f2:8f:ff:89: 79:c3:f5:07:e9:45:44:99:05:49:a4:3c:60:9d:9c: dd:a6:d5:46:ba:e3:e9:2c:4d:c7:96:e0:5f:1c:1d: 4a:0a:c2:b9:fe:a7:29:e7:9a:23:50:20:23:a3:53: f3:ea:96:1f:ff:10:4d:ee:cb:a8:a8:03:2f:3a:0f: 6d:51:f9:c4:b1:0d:0d:47:db:9e:65:08:bd:62:f9: 3c:c5:bd:6c:4f:72:8f:90:04:44:c6:98:1e:70:bc: d8:55:3a:e1:83:7e:0e:14:3b:9b:0f:55:dd:19:f6: 0a:ae:67:ad:6c:33:72:59:9d:77:ac:49:81:58:69: a3:18:6d:50:af:c3:ad:5e:08:08:79:ac:3b:de:49: 93:eb:10:f8:7d:5d:60:da:e2:f3:99:1a:79:bb:81: 85:1d:4f:9a:04:92:dd:a1:a7:3f:46:e1:e9:09:d9: 67:d4:cd:6e:27:58:0d:c6:99:7f:f9:a3:2b:b5:75: 7f:a7:95:c0:4e:30:e3:89:48:9e:40:00:98:c7:74: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:93:6E:3E:DA:EE:B4:78:FD:A1:D6:82:1C:85:F8:C6:EE:19:E4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c1:6f:b5:0b:76:df:ab:3d:56:10:25:5c:bb:15:15:0e:95: ac:fb:c3:ed:b5:c4:03:a6:0c:05:6b:6f:97:a8:c6:ff:60:dc: 1d:c1:d0:e3:63:fe:ad:ab:21:78:89:de:9e:fc:7a:84:63:51: ab:ec:08:e8:0b:d9:e8:e4:40:63:2f:9c:2b:29:58:19:3f:d5: 32:34:34:32:74:05:3b:bf:4c:f5:6b:ce:91:59:dd:c0:c4:0e: bd:8f:17:7d:cf:64:90:2d:ed:ab:fd:59:0e:68:67:09:80:81: 0c:02:b4:ac:00:c8:a4:7a:0e:1f:67:f5:fe:6e:3c:77:20:28: 5a:24:7b:bf:e8:84:04:ab:53:1b:30:ef:36:a2:e1:2e:d2:b3: 9c:11:e2:e3:42:f0:72:c5:84:e2:86:8d:32:a7:c9:88:a8:87: 7d:de:11:28:58:80:81:a8:4d:0e:1c:9a:0e:6f:77:8d:dd:b8: 7d:da:98:f3:22:74:71:51:4d:de:f6:27:13:f4:ec:d2:0e:ff: 41:a9:89:fd:ae:d3:18:dd:b4:73:47:ef:b9:67:1b:e7:33:81: dc:95:7f:3d:7b:2b:7d:e4:35:3e:b1:bb:20:a1:43:83:86:a8: a3:42:10:2d:59:96:05:13:a8:c2:85:fa:c7:c5:c3:d3:af:58: d0:c8:0e:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jef02NrFokfhX98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODQwYjk5OTctNWZhYS00NjgyLWIyMDEtODM2ZjZlYTcyMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb8wcZNOD31IxITJTgEk/auLmi0KS3vSBywd eG3KzKxtx3hW+Az76TIc3zrkt9j7Dvvn8fby4/KP/4l5w/UH6UVEmQVJpDxgnZzd ptVGuuPpLE3HluBfHB1KCsK5/qcp55ojUCAjo1Pz6pYf/xBN7suoqAMvOg9tUfnE sQ0NR9ueZQi9Yvk8xb1sT3KPkARExpgecLzYVTrhg34OFDubD1XdGfYKrmetbDNy WZ13rEmBWGmjGG1Qr8OtXggIeaw73kmT6xD4fV1g2uLzmRp5u4GFHU+aBJLdoac/ RuHpCdln1M1uJ1gNxpl/+aMrtXV/p5XATjDjiUieQACYx3T0XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqTbj7a7rR4/aHWghyF+MbuGeTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQxZjFlYjQtODQzNC0z Zjc1LTk0ZmQtMDM4MmM2NTI2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDBb7ULdt+rPVYQJVy7FRUOlaz7w+21xAOmDAVrb5eoxv9g3B3B 0ONj/q2rIXiJ3p78eoRjUavsCOgL2ejkQGMvnCspWBk/1TI0NDJ0BTu/TPVrzpFZ 3cDEDr2PF33PZJAt7av9WQ5oZwmAgQwCtKwAyKR6Dh9n9f5uPHcgKFoke7/ohASr Uxsw7zai4S7Ss5wR4uNC8HLFhOKGjTKnyYioh33eEShYgIGoTQ4cmg5vd43duH3a mPMidHFRTd72JxP07NIO/0Gpif2u0xjdtHNH77lnG+czgdyVfz17K33kNT6xuyCh Q4OGqKNCEC1ZlgUTqMKF+sfFw9OvWNDIDq4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:53 2026 by rpki-client