$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa File: 70ed49c8-8a01-36c7-865c-4a415f74f74d.roa (raw, json) Hash identifier: qGhi+juKAQYU+tKteHYjhgtGwC8xiBn8ZoB9lMTmiqM= Subject key identifier: 00:5B:6C:E4:5C:14:7E:E4:30:80:2A:BE:73:2D:4B:21:55:B9:0A:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5AD0C32660AE8C6B7800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396541 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5a:d0:c3:26:60:ae:8c:6b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=46063bfd-bc40-48de-a3be-be0902917be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:9b:9b:1a:8e:84:27:c7:65:71:95:0f:f6: a0:4c:2f:d1:29:f5:47:83:7e:f0:c9:67:2b:5b:6e: df:0c:6e:55:66:df:65:3c:d2:91:9b:7c:09:05:4f: 15:ef:12:78:b2:52:78:93:77:50:41:cb:11:59:27: 36:5c:e2:40:12:d5:94:8f:4b:43:a7:f1:a5:cf:af: 68:1e:9b:8e:ff:30:4e:0c:cf:27:9e:60:77:9c:31: 42:49:0e:a6:de:72:6e:ab:a5:a7:1b:e2:fd:64:bd: 7c:36:fd:98:1a:5a:04:10:80:09:54:7a:81:1f:3c: 8f:0d:81:fe:ed:4c:8a:94:21:ea:f4:6a:fa:3b:f7: e3:3e:8d:19:a4:e3:79:8d:6f:2b:5c:63:42:6b:70: a9:b2:cc:72:30:0c:d1:b7:93:ff:a3:2b:6f:5f:12: b5:f1:75:fb:86:0b:e0:6a:d6:1a:ab:14:fa:45:60: 8a:f8:a4:25:a9:4a:70:82:75:a0:32:00:74:5b:d0: 1a:83:45:3b:43:9d:23:fe:6f:71:c5:f5:b0:11:a9: 03:c5:56:8f:76:47:b6:40:4b:29:a4:aa:d9:11:26: 79:98:7b:4a:59:2d:9e:00:f7:ce:fa:96:85:de:43: 22:bc:58:51:01:5e:71:c9:b7:bb:58:b4:a4:d0:77: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:6C:E4:5C:14:7E:E4:30:80:2A:BE:73:2D:4B:21:55:B9:0A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70ed49c8-8a01-36c7-865c-4a415f74f74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:12:43:10:87:40:a2:19:3a:b0:77:37:44:64:d8:c3:93: d6:3f:21:3e:ff:c6:6e:2d:26:ce:d5:5e:97:6d:d4:14:ff:24: 7a:19:e5:ec:7a:8a:ee:85:87:82:d3:c8:e9:9b:68:1c:b1:ac: 17:e2:2c:f7:56:56:6d:67:19:e9:28:b3:8b:74:a9:85:1e:6d: a2:a5:3f:be:22:eb:0f:c8:25:ff:13:f5:e8:01:34:62:80:0a: 32:70:9a:fc:ab:20:78:5d:78:0d:2a:f4:9a:ec:30:86:95:6d: 7c:57:05:ba:11:c9:5b:57:4e:c5:ba:2f:25:56:fe:a5:db:8e: c0:e6:a1:fa:9f:0a:e8:ff:aa:58:d0:9f:88:67:b2:c0:42:22: 2d:8d:18:c4:56:2e:fb:73:f2:bf:4e:c9:64:78:04:9c:68:68: 48:4b:eb:3f:a7:ba:02:01:e3:8a:43:31:3a:6c:f4:b4:ae:bf: 0e:08:3a:9b:15:85:f4:f9:e5:2e:ca:1c:a2:2b:cc:d4:26:b1: aa:06:a2:1a:f8:89:9e:cb:30:6c:0f:7a:2c:e3:e6:b3:69:be: 69:e1:59:06:d8:57:5d:5e:b6:e9:be:fc:07:65:18:d7:b7:e2: d6:92:ab:b8:0f:70:57:16:51:18:c9:26:6c:7e:e9:de:df:d7: 30:3b:f3:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lrQwyZgroxreAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDYwNjNiZmQtYmM0MC00OGRlLWEzYmUtYmUwOTAyOTE3YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFCbmxqOhCfHZXGVD/agTC/RKfVHg37wyWcr W27fDG5VZt9lPNKRm3wJBU8V7xJ4slJ4k3dQQcsRWSc2XOJAEtWUj0tDp/Glz69o HpuO/zBODM8nnmB3nDFCSQ6m3nJuq6WnG+L9ZL18Nv2YGloEEIAJVHqBHzyPDYH+ 7UyKlCHq9Gr6O/fjPo0ZpON5jW8rXGNCa3CpssxyMAzRt5P/oytvXxK18XX7hgvg atYaqxT6RWCK+KQlqUpwgnWgMgB0W9Aag0U7Q50j/m9xxfWwEakDxVaPdke2QEsp pKrZESZ5mHtKWS2eAPfO+paF3kMivFhRAV5xybe7WLSk0HeaOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFABbbORcFH7kMIAqvnMtSyFVuQpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBlZDQ5YzgtOGEwMS0z NmM3LTg2NWMtNGE0MTVmNzRmNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/SBJDEIdAohk6sHc3RGTYw5PWPyE+/8ZuLSbO 1V6XbdQU/yR6GeXseoruhYeC08jpm2gcsawX4iz3VlZtZxnpKLOLdKmFHm2ipT++ IusPyCX/E/XoATRigAoycJr8qyB4XXgNKvSa7DCGlW18VwW6EclbV07Fui8lVv6l 247A5qH6nwro/6pY0J+IZ7LAQiItjRjEVi77c/K/TslkeAScaGhIS+s/p7oCAeOK QzE6bPS0rr8OCDqbFYX0+eUuyhyiK8zUJrGqBqIa+ImeyzBsD3os4+azab5p4VkG 2FddXrbpvvwHZRjXt+LWkqu4D3BXFlEYySZsfune39cwO/Oh -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:39 2026 by rpki-client