$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66f2862d-b428-3db3-955a-c183fc061648.roa File: 66f2862d-b428-3db3-955a-c183fc061648.roa (raw, json) Hash identifier: mIOQSCsmk2mwJe8qmfGxhv70FtSdjDdGoTpb0HWphTo= Subject key identifier: 46:02:E7:97:A2:7F:19:1B:F5:4B:B6:B6:B6:B5:88:0D:EB:91:BB:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B318B7DA54DA09745C20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66f2862d-b428-3db3-955a-c183fc061648.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 396596 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b3:18:b7:da:54:da:09:74:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=3f2f10ae-8923-4693-987f-81c385ce052c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:c3:21:f7:d0:70:ae:a2:9e:2f:bd:58:85: 00:d2:1e:f5:25:6f:e7:5f:42:56:d4:c0:6d:85:17: d3:7d:eb:f0:f3:75:2d:52:12:16:3a:3b:ec:f9:d3: a0:76:c4:32:1f:c4:84:63:8b:c6:1b:d7:f3:00:57: e6:6d:61:db:29:4c:92:b0:15:02:d3:c9:fb:8d:27: 35:5c:d4:9e:19:24:aa:bf:5f:ac:ef:54:16:05:c8: 86:03:da:1e:e8:27:15:5f:64:90:bd:9a:5b:77:9f: 0f:27:f0:37:15:e4:49:ca:c4:8e:5d:a3:a2:e8:2f: 79:91:87:24:82:b5:06:21:43:79:8d:73:63:83:51: 84:4e:77:a6:3f:a6:1f:43:3c:f9:9b:0d:4e:db:c7: c7:74:ed:61:47:57:0d:a9:37:58:39:57:56:d3:b1: 6e:c8:3c:14:83:e3:01:bf:4c:62:a2:fe:dd:d7:88: 21:0e:3c:90:21:a5:ab:a7:ae:45:e2:68:20:90:b0: af:a4:bb:f6:46:2a:f5:90:02:22:81:71:04:4d:51: 7e:b7:11:3f:4f:e4:cc:5b:86:dc:23:df:27:47:bb: 28:bc:df:60:bb:0b:6d:00:0e:6b:3c:15:37:4f:25: ec:57:0d:4a:98:8e:ee:d4:87:c8:a3:de:89:95:74: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:E7:97:A2:7F:19:1B:F5:4B:B6:B6:B6:B5:88:0D:EB:91:BB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66f2862d-b428-3db3-955a-c183fc061648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ea:a1:6c:34:e6:8b:82:dd:a2:a2:2e:cf:83:01:31:c8:dc: 78:cf:0f:cf:06:62:ce:e3:37:26:a8:db:28:fb:ac:3a:c3:8e: 66:15:12:38:bb:ff:0a:e4:b3:b3:56:24:88:1e:d3:da:52:fc: b4:ee:bb:57:ea:bd:a9:92:be:45:fa:c5:65:c1:51:64:30:44: 3f:2f:cc:fa:f8:d2:98:f1:23:05:1a:c4:ca:ab:6f:59:75:60: 4e:ad:ac:f7:8e:e6:58:9c:5a:70:d8:6d:fd:3f:8a:b9:3a:78: d2:61:0c:c1:44:1a:10:f5:df:db:9c:a5:58:21:7d:6d:8b:0d: cc:8e:d3:5d:2e:e7:eb:e8:39:26:2a:aa:9b:ba:0c:60:37:bf: fa:64:25:be:d1:78:16:f2:c5:a3:c1:7e:02:a8:41:72:94:82: 7f:79:9a:74:01:24:55:0e:01:15:03:a2:3d:14:50:75:fe:92: c1:65:70:0a:eb:e1:2f:76:fe:b1:82:4c:9b:70:5f:da:8f:2a: ca:e4:be:ff:63:ea:37:19:0d:11:fa:a5:84:06:b2:da:0d:d0: d9:48:8a:9f:6d:2e:b2:08:81:46:93:7a:38:78:e4:3e:42:57: 16:fd:fb:0d:f5:f6:73:e5:11:26:3d:ec:b1:1d:80:53:ea:5c: 7f:9c:32:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bMYt9pU2gl0XCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk M2YyZjEwYWUtODkyMy00NjkzLTk4N2YtODFjMzg1Y2UwNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVHDIffQcK6ini+9WIUA0h71JW/nX0JW1MBt hRfTfevw83UtUhIWOjvs+dOgdsQyH8SEY4vGG9fzAFfmbWHbKUySsBUC08n7jSc1 XNSeGSSqv1+s71QWBciGA9oe6CcVX2SQvZpbd58PJ/A3FeRJysSOXaOi6C95kYck grUGIUN5jXNjg1GETnemP6YfQzz5mw1O28fHdO1hR1cNqTdYOVdW07FuyDwUg+MB v0xiov7d14ghDjyQIaWrp65F4mggkLCvpLv2Rir1kAIigXEETVF+txE/T+TMW4bc I98nR7sovN9guwttAA5rPBU3TyXsVw1KmI7u1IfIo96JlXTWGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYC55eifxkb9Uu2tra1iA3rkbsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZmMjg2MmQtYjQyOC0z ZGIzLTk1NWEtYzE4M2ZjMDYxNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbqoWw05ouC3aKiLs+DATHI3HjPD88GYs7jNyao2yj7rDrDjmYV Eji7/wrks7NWJIge09pS/LTuu1fqvamSvkX6xWXBUWQwRD8vzPr40pjxIwUaxMqr b1l1YE6trPeO5licWnDYbf0/irk6eNJhDMFEGhD139ucpVghfW2LDcyO010u5+vo OSYqqpu6DGA3v/pkJb7ReBbyxaPBfgKoQXKUgn95mnQBJFUOARUDoj0UUHX+ksFl cArr4S92/rGCTJtwX9qPKsrkvv9j6jcZDRH6pYQGstoN0NlIip9tLrIIgUaTejh4 5D5CVxb9+w319nPlESY97LEdgFPqXH+cMpA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:46 2026 by rpki-client