$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fefcb66-85a2-3540-bce1-d7e6ccc257f4.roa File: 5fefcb66-85a2-3540-bce1-d7e6ccc257f4.roa (raw, json) Hash identifier: 2Gc4pbwPI0swVeFZszHJRiUEqOCx991LGY/2uY3DjMM= Subject key identifier: 13:EE:B6:8B:D7:92:10:C0:93:A1:31:05:C5:F5:2F:81:4B:E7:69:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B256AAC7F407C1346600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fefcb66-85a2-3540-bce1-d7e6ccc257f4.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396540 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:56:aa:c7:f4:07:c1:34:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=da44571d-5b45-426d-98d0-b27a6b3923a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:30:ae:ea:97:fb:b0:5e:dd:6c:eb:37:d2: 20:0e:8a:b1:bb:dc:f1:28:43:93:0a:2e:68:12:d7: 7f:b2:3d:9c:73:fa:cf:00:1c:3a:72:c8:7a:e3:e8: 0c:f3:41:45:2b:7f:58:64:50:6a:da:b1:af:57:c2: ca:fb:d5:b1:40:34:6d:97:45:ea:6c:27:31:41:82: 96:95:28:33:94:bc:06:57:b4:87:00:77:7c:9c:7f: 2a:97:c9:e8:12:bd:a1:0b:c0:10:06:07:ad:0a:ea: 8e:be:d2:e6:73:bb:a3:31:f1:1e:ec:ad:11:58:26: f7:89:fe:82:d0:db:5a:ed:06:04:05:56:af:b8:0b: 24:0f:25:dd:e1:e9:b8:a4:19:3c:70:91:92:cc:0d: e2:a7:47:e1:13:09:cb:e5:d6:4c:e4:ba:c0:11:bf: e4:71:c6:27:a3:d4:9f:83:86:b5:d3:69:d8:4f:ad: 0c:d8:92:26:2f:f9:0f:cc:86:c2:d4:60:7e:02:70: ad:2b:0b:9e:6c:06:46:67:40:33:0b:99:d9:bf:7c: 7f:ad:6b:ab:0f:32:d0:86:54:5c:50:cc:11:22:3b: 8e:45:07:a2:fe:55:0e:69:67:aa:8a:af:41:5e:8f: 17:4a:9f:2b:f1:d4:e2:75:de:3e:67:c8:02:91:01: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:B6:8B:D7:92:10:C0:93:A1:31:05:C5:F5:2F:81:4B:E7:69:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fefcb66-85a2-3540-bce1-d7e6ccc257f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2f:62:ad:6e:98:27:e5:f5:06:fe:9c:b3:b3:92:bf:e9:f4: 27:9d:6d:71:cc:de:23:56:fe:30:86:0f:f0:59:47:d2:dc:f2: a3:1d:83:a5:d4:04:25:f4:45:1a:0f:a7:80:87:c0:6e:a1:8c: 55:e0:b4:09:76:d9:a3:a7:36:cd:f1:30:09:cd:af:be:94:78: 7d:a8:19:32:d8:9b:d0:c2:b4:58:dc:b3:0b:40:96:85:06:de: 55:0e:31:35:c4:21:3b:4b:a1:f4:93:93:be:b3:60:0c:b9:b5: cf:c6:a7:fc:04:30:12:a4:50:5c:af:69:09:01:6c:52:5e:86: 81:5c:22:87:6f:1d:71:37:46:b6:e6:c6:b1:c7:d2:d7:1e:47: ab:d2:9d:2b:a4:97:e3:aa:d1:63:fb:1d:e3:f1:bf:df:c6:37: eb:ce:de:62:24:e6:71:0a:58:e8:41:b0:60:c5:a4:49:b3:bd: a7:f0:4b:85:43:70:12:70:d7:ca:32:92:7b:d1:22:4f:43:50: 40:79:0f:1a:0b:a2:73:ee:25:07:e7:1e:f9:7f:c5:a4:3c:7d: a4:1c:98:b8:b7:28:62:f2:3d:d9:d5:95:e7:74:76:67:95:10: cd:07:0c:6e:96:11:23:97:58:9a:54:27:63:bf:74:13:82:21: aa:af:1c:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bJWqsf0B8E0ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk ZGE0NDU3MWQtNWI0NS00MjZkLTk4ZDAtYjI3YTZiMzkyM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj4wruqX+7Be3WzrN9IgDoqxu9zxKEOTCi5o Etd/sj2cc/rPABw6csh64+gM80FFK39YZFBq2rGvV8LK+9WxQDRtl0XqbCcxQYKW lSgzlLwGV7SHAHd8nH8ql8noEr2hC8AQBgetCuqOvtLmc7ujMfEe7K0RWCb3if6C 0Nta7QYEBVavuAskDyXd4em4pBk8cJGSzA3ip0fhEwnL5dZM5LrAEb/kccYno9Sf g4a102nYT60M2JImL/kPzIbC1GB+AnCtKwuebAZGZ0AzC5nZv3x/rWurDzLQhlRc UMwRIjuORQei/lUOaWeqiq9BXo8XSp8r8dTidd4+Z8gCkQEeWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPutovXkhDAk6ExBcX1L4FL52lMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWZlZmNiNjYtODVhMi0z NTQwLWJjZTEtZDdlNmNjYzI1N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0vYq1umCfl9Qb+nLOzkr/p9CedbXHM3iNW/jCGD/BZR9Lc8qMd g6XUBCX0RRoPp4CHwG6hjFXgtAl22aOnNs3xMAnNr76UeH2oGTLYm9DCtFjcswtA loUG3lUOMTXEITtLofSTk76zYAy5tc/Gp/wEMBKkUFyvaQkBbFJehoFcIodvHXE3 RrbmxrHH0tceR6vSnSukl+Oq0WP7HePxv9/GN+vO3mIk5nEKWOhBsGDFpEmzvafw S4VDcBJw18oyknvRIk9DUEB5DxoLonPuJQfnHvl/xaQ8faQcmLi3KGLyPdnVled0 dmeVEM0HDG6WESOXWJpUJ2O/dBOCIaqvHEI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:31:40 2026 by rpki-client