$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa File: 69222725-8683-36f9-af8b-fa06924ec7d4.roa (raw, json) Hash identifier: IqxZmnUVvO/igZIYFvLyD+kqLTe6nIxkGlhYLUvOf+U= Subject key identifier: 81:69:D6:B2:C5:92:46:C6:D6:02:23:3A:86:BA:32:7A:0D:10:1C:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A16CE076BFE5FFDBB4560 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396580 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:16:ce:07:6b:fe:5f:fd:bb:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=922d52e4-e989-4848-907f-8e13f653f81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:e1:9c:19:58:2b:92:9e:e6:d5:9c:a2:39: a9:8f:f4:69:8f:77:ae:73:39:3a:1d:1e:20:0a:4f: 78:fc:6d:85:c5:8d:0f:fe:dc:6e:2d:f7:72:a7:3c: 1b:67:d0:b2:fc:c7:42:b4:e8:e0:93:b5:a7:8f:97: 15:c1:1a:fa:2c:75:19:21:e2:63:78:46:09:ec:0c: c4:39:27:cb:5e:e8:d8:9b:25:cf:ee:00:5e:82:89: 47:5f:bd:65:92:bd:a1:a6:3a:b3:9b:44:b8:01:58: 68:21:72:69:47:75:b3:cb:46:8b:a7:c1:4a:45:45: 5c:79:3b:fe:0d:29:3e:3f:29:2d:11:00:a1:52:53: f9:a7:b3:e5:27:ac:d1:a6:bc:14:2d:a7:95:96:85: fc:d0:16:f5:38:57:2f:40:c5:56:c0:4c:82:4e:fd: 8b:b9:e2:16:78:11:6b:75:8d:44:df:57:43:09:bf: 5c:e4:b3:71:5d:45:11:4c:a2:d3:8f:3a:6d:12:2f: 54:5a:ab:a5:1f:0f:3b:0b:b8:9d:5c:fb:9d:12:19: fa:1d:ce:e6:39:64:64:3e:85:93:26:f7:a0:d0:a1: a1:ec:04:36:1f:9c:83:cc:ce:c2:ad:fb:24:93:fa: 32:f3:0b:14:14:5f:ca:d9:ee:7a:60:11:9a:20:24: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:69:D6:B2:C5:92:46:C6:D6:02:23:3A:86:BA:32:7A:0D:10:1C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69222725-8683-36f9-af8b-fa06924ec7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d3:da:e7:36:69:bd:6d:4e:4a:75:86:d8:d2:54:e3:16:ab: 36:7f:64:f3:a6:77:dd:e4:11:70:cc:0e:a8:3e:fd:49:96:e6: 4d:27:fd:08:48:4d:16:42:fb:bb:b3:be:0b:ec:f1:e6:83:48: 0b:9a:30:fb:4e:6e:c3:ec:16:d2:d6:78:88:ec:68:65:0d:7c: df:ff:ea:b0:00:86:9a:fd:a8:5a:81:9c:5b:7b:34:1d:58:2b: 10:12:76:d5:85:51:69:1c:1b:c0:23:52:2d:db:29:c9:d6:61: f4:a5:4d:ed:48:72:ab:fe:49:0f:90:30:aa:5b:34:9b:87:f9: 84:8a:5d:e0:0f:5f:4c:24:61:b3:60:39:14:7e:75:17:1d:6d: 3a:87:10:a0:9f:44:ec:9e:7f:40:c0:d4:fe:2f:c6:66:f6:e8: 79:f2:cb:e0:9d:67:32:96:88:03:47:e5:d5:b5:d2:60:6a:75: 0d:ca:8d:25:74:28:83:48:e3:89:18:f0:60:e9:99:b5:6d:74: 29:40:6a:0e:fe:e6:6e:71:f8:fb:7b:b6:70:f7:7c:4c:95:25: 5e:9b:c5:63:c2:26:50:83:c1:7d:a9:ba:57:91:0b:60:06:dd: c6:30:52:2d:17:41:7e:93:83:99:22:72:75:ca:92:59:6a:e8: e7:55:c0:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jehbOB2v+X/27RWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTIyZDUyZTQtZTk4OS00ODQ4LTkwN2YtOGUxM2Y2NTNmODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY3hnBlYK5Ke5tWcojmpj/Rpj3euczk6HR4g Ck94/G2FxY0P/txuLfdypzwbZ9Cy/MdCtOjgk7Wnj5cVwRr6LHUZIeJjeEYJ7AzE OSfLXujYmyXP7gBegolHX71lkr2hpjqzm0S4AVhoIXJpR3Wzy0aLp8FKRUVceTv+ DSk+PyktEQChUlP5p7PlJ6zRprwULaeVloX80Bb1OFcvQMVWwEyCTv2LueIWeBFr dY1E31dDCb9c5LNxXUURTKLTjzptEi9UWqulHw87C7idXPudEhn6Hc7mOWRkPoWT Jveg0KGh7AQ2H5yDzM7Crfskk/oy8wsUFF/K2e56YBGaICRx2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIFp1rLFkkbG1gIjOoa6MnoNEBw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkyMjI3MjUtODY4My0z NmY5LWFmOGItZmEwNjkyNGVjN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzT2uc2ab1tTkp1htjSVOMWqzZ/ZPOmd93kEXDMDqg+/UmW5k0n /QhITRZC+7uzvgvs8eaDSAuaMPtObsPsFtLWeIjsaGUNfN//6rAAhpr9qFqBnFt7 NB1YKxASdtWFUWkcG8AjUi3bKcnWYfSlTe1Icqv+SQ+QMKpbNJuH+YSKXeAPX0wk YbNgORR+dRcdbTqHEKCfROyef0DA1P4vxmb26Hnyy+CdZzKWiANH5dW10mBqdQ3K jSV0KINI44kY8GDpmbVtdClAag7+5m5x+Pt7tnD3fEyVJV6bxWPCJlCDwX2puleR C2AG3cYwUi0XQX6Tg5kicnXKkllq6OdVwFA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:18 2026 by rpki-client