$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa File: 72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa (raw, json) Hash identifier: kQg0T2Ut80LV9xH/QnJyJgE4YFIFuaaULpQi2kK9cno= Subject key identifier: B5:42:28:3B:08:13:B4:54:C6:C0:76:BB:8D:8A:7A:18:A1:B5:EB:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B1AF6073B8BC263B7C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396605 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b1:af:60:73:b8:bc:26:3b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=2445d239-786b-42e9-a7e8-efee13b26a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:21:4a:fa:a1:a0:94:1b:69:ef:c3:2c:8d: 50:5c:e6:09:b4:a8:2a:75:b3:98:9d:e8:b9:72:69: b1:e7:d6:6a:bd:65:4a:ca:6b:d1:80:7f:9c:80:4d: a2:d6:5c:02:49:ff:ab:95:b9:1c:28:e3:d9:7b:98: 5a:c9:5b:ad:83:3f:c4:21:e5:33:8c:d6:ef:c1:92: c4:c9:f1:d3:09:d8:18:de:85:2d:22:86:48:6a:cd: ce:72:6f:ab:2d:06:dc:4e:12:b1:03:1a:a7:81:29: ba:82:5d:d2:f6:1c:7d:1b:c3:fd:d5:a3:14:68:97: 6e:1e:19:a7:0a:07:c5:f5:6c:50:13:7c:1c:65:30: 17:8a:14:0e:5a:27:47:12:71:fb:a8:c6:40:20:b7: 51:36:a4:dc:30:e7:fb:78:d3:1f:d3:45:40:6f:71: ea:e8:b9:0e:be:34:9e:37:41:1a:6a:00:90:81:64: f7:39:92:4b:3d:cc:47:58:8d:d2:3d:87:31:ce:78: e6:5b:b3:86:01:72:13:ae:87:f4:72:ad:76:fc:a8: 61:c4:9f:74:ad:b8:0f:81:67:f7:5b:87:79:1d:f6: f4:00:15:04:48:c9:fc:27:f1:4b:83:c8:50:36:a9: 59:b5:61:fe:69:ec:a7:1d:fe:20:4f:7a:b5:b8:77: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:28:3B:08:13:B4:54:C6:C0:76:BB:8D:8A:7A:18:A1:B5:EB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e7:04:2f:52:48:9b:1c:76:c5:de:96:ea:66:03:db:d9:13: e7:40:68:5f:77:0d:9a:ce:6e:8b:98:7f:f6:63:97:ab:79:83: ea:0c:52:5e:dd:69:93:ea:e0:8b:72:36:06:14:7d:09:aa:c0: e8:9e:cd:c0:dd:89:e4:d6:fa:79:71:86:42:ef:e2:ec:4c:2d: 3a:33:15:b3:52:6f:c3:94:d1:1f:47:22:86:b4:c8:5b:cb:29: 37:d6:99:61:e2:cd:37:8d:c0:68:f0:98:43:d0:d1:bd:45:84: a0:4c:74:fd:1e:af:a0:09:96:0e:bb:d1:ae:72:e1:6a:3a:93: d3:f6:76:90:f4:80:5f:74:61:6c:db:f7:ce:96:9a:18:6a:02: 1d:06:1c:66:44:3d:11:29:cd:26:41:8b:20:62:dd:4e:10:c4: d1:ba:11:73:b9:d1:6e:ca:70:21:be:6d:0d:57:c5:11:5e:b9: 37:c3:a7:36:c0:cc:db:fd:02:27:87:12:bc:0d:58:db:19:88: 73:67:9e:51:51:f2:60:a1:43:cb:94:70:60:ef:6f:32:a3:0b: e4:66:e1:65:61:5c:0f:d9:ae:d4:ce:82:87:a9:74:c9:3a:9a: c7:08:43:e8:fd:61:3d:ce:8a:b9:df:aa:56:94:44:f1:a4:b0: 13:ea:8d:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErGvYHO4vCY7fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjQ0NWQyMzktNzg2Yi00MmU5LWE3ZTgtZWZlZTEzYjI2YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYhSvqhoJQbae/DLI1QXOYJtKgqdbOYnei5 cmmx59ZqvWVKymvRgH+cgE2i1lwCSf+rlbkcKOPZe5hayVutgz/EIeUzjNbvwZLE yfHTCdgY3oUtIoZIas3Ocm+rLQbcThKxAxqngSm6gl3S9hx9G8P91aMUaJduHhmn CgfF9WxQE3wcZTAXihQOWidHEnH7qMZAILdRNqTcMOf7eNMf00VAb3Hq6LkOvjSe N0EaagCQgWT3OZJLPcxHWI3SPYcxznjmW7OGAXITrof0cq12/KhhxJ90rbgPgWf3 W4d5Hfb0ABUESMn8J/FLg8hQNqlZtWH+aeynHf4gT3q1uHdtlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVCKDsIE7RUxsB2u42KehihtesyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJlNTkyZjItMWU4NC0z MThiLWEyNWYtNzdlNmFlNGY1YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjnBC9SSJscdsXelupmA9vZE+dAaF93DZrObouYf/Zjl6t5g+oM Ul7daZPq4ItyNgYUfQmqwOiezcDdieTW+nlxhkLv4uxMLTozFbNSb8OU0R9HIoa0 yFvLKTfWmWHizTeNwGjwmEPQ0b1FhKBMdP0er6AJlg670a5y4Wo6k9P2dpD0gF90 YWzb986WmhhqAh0GHGZEPREpzSZBiyBi3U4QxNG6EXO50W7KcCG+bQ1XxRFeuTfD pzbAzNv9AieHErwNWNsZiHNnnlFR8mChQ8uUcGDvbzKjC+Rm4WVhXA/ZrtTOgoep dMk6mscIQ+j9YT3OirnfqlaURPGksBPqjdo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:32 2026 by rpki-client