$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/674dd3b3-8bc2-390b-bb14-ef95bf97915e.roa File: 674dd3b3-8bc2-390b-bb14-ef95bf97915e.roa (raw, json) Hash identifier: cInpdBK+opbvEALcT8KUn9DTHVkE9PMGLJ6R+JNHun0= Subject key identifier: DA:F7:6A:85:12:7B:AB:02:EE:C3:D9:CB:77:8D:DB:B3:5B:41:59:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A24FB6AE354B8DE1AEC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/674dd3b3-8bc2-390b-bb14-ef95bf97915e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396593 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:24:fb:6a:e3:54:b8:de:1a:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1aa92119-01f9-478a-8b4e-b3dcbd7bdcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:a5:46:34:0f:4a:b8:3d:f8:64:f4:4b:37: e5:c2:43:6c:c6:37:bc:c4:e9:b1:ac:20:f7:2e:4f: ec:1b:3e:f5:a2:ad:04:d1:a0:a3:e2:1f:6a:df:8f: 40:07:5b:32:07:2b:9a:92:e0:50:d9:41:e1:37:68: 9b:77:2a:6a:56:96:44:7e:d5:2e:17:2e:1b:ea:e6: bd:d8:a7:79:d6:9a:4f:28:4b:85:99:84:22:95:9b: 32:c4:4e:79:53:3d:11:2e:1e:1b:92:ac:42:e3:51: 4f:49:5b:f1:f8:00:f9:91:0b:51:1e:8b:21:5e:17: 24:87:71:32:4e:13:1e:e1:39:57:5e:71:89:79:11: c5:28:c4:9b:0f:2f:f8:3a:6b:95:ce:db:ad:8c:90: 7b:0a:38:9d:a2:9d:21:c7:10:2b:d9:13:0f:00:10: d2:d1:61:7b:2d:1e:10:31:82:ad:a2:3a:cd:54:e0: bf:db:73:fc:c6:0c:f5:9f:4c:45:35:77:2e:2d:28: c8:fe:a6:39:13:17:b3:d1:b3:57:66:6c:1b:08:b7: 28:92:4e:ce:6e:e7:ab:dc:62:ab:98:6f:cb:e6:af: d7:f5:09:b7:0a:2d:62:ff:5b:3f:bd:64:ff:6d:62: a3:31:aa:2d:0a:09:3d:f3:ce:56:2f:71:96:9c:23: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F7:6A:85:12:7B:AB:02:EE:C3:D9:CB:77:8D:DB:B3:5B:41:59:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/674dd3b3-8bc2-390b-bb14-ef95bf97915e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8b:87:07:c2:bc:b5:c8:03:91:1c:26:b8:18:38:e7:b7:bb: 53:ab:30:ca:6c:6f:28:47:7c:73:ff:dc:0c:83:82:72:cb:04: 84:40:28:a1:63:88:6f:4b:15:55:fc:bb:62:f9:ba:fb:06:b8: c8:28:f5:79:c0:ca:b1:ff:ba:22:1d:ea:ed:1b:c8:2c:96:e1: ab:d2:6e:3e:5f:14:22:16:a4:99:4e:d1:cb:f6:e9:6b:5b:63: 81:e8:aa:0c:37:5e:ad:be:44:1f:9f:3e:a9:10:ff:88:c5:5a: 37:8b:73:e7:ee:0c:e4:7e:30:eb:d0:59:54:6e:fb:5d:e9:80: d8:a8:8b:ff:a6:0e:59:80:1a:de:62:4f:f8:87:22:be:4b:41: a1:bb:25:75:c5:39:1c:ac:20:50:d0:2e:f0:8c:a4:09:86:12: fb:97:8f:ee:dc:79:73:65:c2:39:de:34:29:76:96:67:c2:3b: dc:19:c8:9a:65:8e:47:ac:13:83:b4:6d:63:66:fa:93:48:6d: de:bb:6d:d9:21:94:15:19:f1:a0:30:31:12:28:c7:8a:ff:e5: 98:af:3d:d0:20:36:08:80:1d:2a:03:ee:62:8c:a1:3e:a9:39: ad:80:2e:de:ce:78:69:ba:b1:41:05:17:26:93:a4:8a:44:ed: 30:78:c9:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiT7auNUuN4a7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWFhOTIxMTktMDFmOS00NzhhLThiNGUtYjNkY2JkN2JkY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PylRjQPSrg9+GT0SzflwkNsxje8xOmxrCD3 Lk/sGz71oq0E0aCj4h9q349AB1syByuakuBQ2UHhN2ibdypqVpZEftUuFy4b6ua9 2Kd51ppPKEuFmYQilZsyxE55Uz0RLh4bkqxC41FPSVvx+AD5kQtRHoshXhckh3Ey ThMe4TlXXnGJeRHFKMSbDy/4OmuVztutjJB7Cjidop0hxxAr2RMPABDS0WF7LR4Q MYKtojrNVOC/23P8xgz1n0xFNXcuLSjI/qY5Exez0bNXZmwbCLcokk7Obuer3GKr mG/L5q/X9Qm3Ci1i/1s/vWT/bWKjMaotCgk9885WL3GWnCORtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNr3aoUSe6sC7sPZy3eN27NbQVn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjc0ZGQzYjMtOGJjMi0z OTBiLWJiMTQtZWY5NWJmOTc5MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeLhwfCvLXIA5EcJrgYOOe3u1OrMMpsbyhHfHP/3AyDgnLLBIRA KKFjiG9LFVX8u2L5uvsGuMgo9XnAyrH/uiId6u0byCyW4avSbj5fFCIWpJlO0cv2 6WtbY4Hoqgw3Xq2+RB+fPqkQ/4jFWjeLc+fuDOR+MOvQWVRu+13pgNioi/+mDlmA Gt5iT/iHIr5LQaG7JXXFORysIFDQLvCMpAmGEvuXj+7ceXNlwjneNCl2lmfCO9wZ yJpljkesE4O0bWNm+pNIbd67bdkhlBUZ8aAwMRIox4r/5ZivPdAgNgiAHSoD7mKM oT6pOa2ALt7OeGm6sUEFFyaTpIpE7TB4yaE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:33 2026 by rpki-client