$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa File: 6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa (raw, json) Hash identifier: oks7FDk7XoJeDh68Bbl8YSNBKOwdE2LyfFoM9DZcsRE= Subject key identifier: 6D:54:62:2A:90:74:B1:8D:AD:12:A8:CD:45:5C:3D:8A:85:6B:5D:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D09124E25585212C91AF11EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397196 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:4e:25:58:52:12:c9:1a:f1:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=083e94fb-779b-405f-89a3-4c4a2c193eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:6c:2b:80:06:0c:f5:d6:92:cc:a4:9b:6c: 13:d6:f7:5b:d4:40:23:e9:04:61:4a:b3:62:a0:4c: e9:ab:bd:b2:84:eb:ed:fc:b3:dc:e4:28:41:a3:e7: 62:62:44:9b:ad:67:c3:44:1e:19:b8:da:53:f7:5c: fd:6a:17:a5:3f:9e:c3:75:d3:99:90:38:be:50:78: 3c:be:f0:4c:94:8c:43:28:32:0a:bc:b4:f1:64:a9: bf:fc:12:62:8e:39:28:8b:6a:80:c3:fb:d1:6b:f6: 2a:7e:9f:b0:90:ff:bb:08:ad:12:24:cc:cd:d2:27: 5b:e0:b1:fd:7c:d1:17:fa:47:8c:f5:01:2d:bb:82: fe:91:7a:2a:ed:dd:fd:be:52:e8:71:d2:a2:b5:69: 14:2c:0c:ff:22:c0:dd:ba:bf:bc:6e:88:d8:eb:02: 18:3c:82:12:65:49:df:93:65:f6:d9:58:4e:84:b1: b0:09:72:6e:f7:35:6e:7d:54:6b:da:dc:f0:1a:44: 6d:c9:a4:e1:e1:ba:75:a5:c3:28:6c:3d:ea:46:02: b3:b5:9b:f2:7b:c0:ed:49:ae:15:2c:62:71:99:39: 07:cf:64:a4:94:5b:1f:24:b1:ed:d2:30:ea:01:71: 03:82:b0:52:55:30:bc:7c:c1:b9:89:e4:9b:92:95: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:54:62:2A:90:74:B1:8D:AD:12:A8:CD:45:5C:3D:8A:85:6B:5D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fa:a5:bc:fc:59:42:56:1e:10:84:97:9b:75:12:51:ef:f6: 33:86:30:41:e8:63:bc:0d:8a:77:44:95:f9:13:8c:6e:5a:0f: 54:bc:53:7c:24:71:5e:9a:e0:6b:40:8f:ed:9c:12:4d:c5:84: 05:f5:f3:ce:9b:58:92:b5:2e:4f:ae:08:c0:bf:0a:34:4b:4b: ae:40:cc:85:c3:f7:11:f9:fb:7c:c3:24:4c:96:bc:eb:48:4c: 7f:18:88:40:93:fa:14:f7:43:f6:14:7f:08:02:fa:55:e9:e6: 77:91:c5:ca:63:38:d8:d1:7d:db:80:f2:d4:89:70:12:de:fe: ac:64:8f:92:a7:85:15:9a:de:64:a6:44:12:db:4d:37:9c:37: 57:08:94:c7:73:33:f3:6d:a3:f9:5d:0f:f2:a3:2a:b2:ab:e1: 32:87:63:9a:f0:e5:88:32:36:ac:d2:19:ba:a6:5e:b3:68:6c: e2:80:b0:a0:7b:bc:70:a4:85:c8:d9:16:17:0e:14:d9:c3:ca: 00:62:df:cd:7e:83:8f:85:96:e2:69:d8:ea:ce:c0:6d:95:72: 75:9e:95:82:0f:d9:ad:c6:c6:ca:a0:e0:8a:54:1c:00:d8:00: 57:0d:00:54:98:93:f3:da:2d:80:82:0a:fa:63:50:79:1b:97: 8c:54:0d:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEk4lWFISyRrxHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDgzZTk0ZmItNzc5Yi00MDVmLTg5YTMtNGM0YTJjMTkzZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDtsK4AGDPXWksykm2wT1vdb1EAj6QRhSrNi oEzpq72yhOvt/LPc5ChBo+diYkSbrWfDRB4ZuNpT91z9ahelP57DddOZkDi+UHg8 vvBMlIxDKDIKvLTxZKm//BJijjkoi2qAw/vRa/Yqfp+wkP+7CK0SJMzN0idb4LH9 fNEX+keM9QEtu4L+kXoq7d39vlLocdKitWkULAz/IsDdur+8bojY6wIYPIISZUnf k2X22VhOhLGwCXJu9zVufVRr2tzwGkRtyaTh4bp1pcMobD3qRgKztZvye8DtSa4V LGJxmTkHz2SklFsfJLHt0jDqAXEDgrBSVTC8fMG5ieSbkpUdYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1UYiqQdLGNrRKozUVcPYqFa139MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZmZTIzMTMtNzRiZi0z NDVhLTkzMGUtZjZmZjhjMzZiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABP6pbz8WUJWHhCEl5t1ElHv9jOGMEHoY7wNindElfkTjG5aD1S8 U3wkcV6a4GtAj+2cEk3FhAX1886bWJK1Lk+uCMC/CjRLS65AzIXD9xH5+3zDJEyW vOtITH8YiECT+hT3Q/YUfwgC+lXp5neRxcpjONjRfduA8tSJcBLe/qxkj5KnhRWa 3mSmRBLbTTecN1cIlMdzM/Nto/ldD/KjKrKr4TKHY5rw5YgyNqzSGbqmXrNobOKA sKB7vHCkhcjZFhcOFNnDygBi381+g4+FluJp2OrOwG2VcnWelYIP2a3Gxsqg4IpU HADYAFcNAFSYk/PaLYCCCvpjUHkbl4xUDYI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:12:55 2026 by rpki-client