$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa File: 7396e975-80cc-30e4-ba74-b4ba51869d31.roa (raw, json) Hash identifier: tjBgexg8pNVrupRDoEH937xdKc69/6NvFNH8iwSdJcM= Subject key identifier: C6:15:73:67:40:3F:04:32:95:02:14:2B:E3:33:80:28:B4:4A:21:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A09423F31D55AB02E4580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36631 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:09:42:3f:31:d5:5a:b0:2e:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5496fffc-f6ba-4ad8-a298-067175e491e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:bb:dc:ec:c9:5d:e2:ff:13:69:13:37:d7: 83:d6:10:50:74:87:c6:c7:b7:3a:d5:4b:c8:2c:41: 8d:62:c3:21:41:8d:43:4f:9e:cc:82:22:9d:51:4a: c3:61:3c:3a:d6:24:88:ea:53:45:3c:52:e0:24:d3: 26:3e:bb:32:8f:51:25:02:54:25:1a:57:95:6d:ba: e1:0d:af:0f:f4:61:30:12:1b:45:79:0f:b8:93:af: ab:25:74:8f:14:23:4a:1a:d2:30:b1:ed:35:18:84: 1e:f8:bc:ba:b8:e0:dd:18:4c:41:cf:46:9f:3d:e6: d3:3f:77:ae:30:66:61:47:db:16:d3:0d:36:56:02: d8:b0:11:1d:48:1b:fa:95:5d:aa:70:97:9e:aa:b6: d5:9b:fa:23:04:dc:9c:16:ad:44:ea:e1:17:ee:40: e3:a1:2f:39:e7:7f:96:e2:29:3b:dc:4f:ee:2c:98: c2:ea:38:b1:e5:20:97:7b:ab:92:b3:74:1f:ba:62: 1e:a9:3d:00:5c:b0:21:8f:c3:f8:59:56:6e:bb:0e: 15:57:1c:b5:8c:dd:c4:25:7d:83:9d:1f:7a:d7:6e: 1c:ca:06:a7:d1:6f:c7:32:ce:6e:9e:e0:93:60:9d: 77:95:59:a9:75:7c:ef:db:68:53:bf:24:a1:b3:d5: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:73:67:40:3F:04:32:95:02:14:2B:E3:33:80:28:B4:4A:21:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:12:98:14:f2:19:33:03:cc:87:35:ff:a9:0f:97:ac:5d:b2: ea:6c:69:b4:ea:fb:fd:ef:b9:01:48:41:f8:db:35:5a:5a:54: 4d:b5:30:ab:6c:64:6f:36:00:7b:49:a1:a0:7e:90:37:18:cb: 1d:28:3e:bb:9a:44:03:7b:d0:60:3f:15:40:e6:2b:69:08:65: fb:46:23:10:c8:8a:0c:9c:e5:b0:93:27:de:9a:a3:9d:d3:4e: f5:7c:63:89:30:e8:38:92:87:8b:95:79:df:59:1b:00:45:08: 6d:81:cc:b7:eb:43:c4:e2:fe:25:26:b0:28:a4:90:f5:6e:41: bf:41:e2:18:2b:10:71:48:cc:a7:40:ae:2c:d5:2d:ca:d1:99: 86:fc:03:73:b4:95:44:6a:16:22:3f:ae:c8:af:19:fb:25:8d: c7:30:73:d3:cb:5b:87:a9:bf:c9:f4:5e:e4:62:cd:5c:85:c5: f9:8d:59:62:1a:08:50:c1:96:9d:bd:f4:7b:47:92:82:eb:5f: 09:9e:7f:26:4e:07:2d:19:fb:fc:97:80:97:27:4f:bf:16:9a: d7:86:91:52:38:18:22:21:48:f3:d0:b3:fa:d4:ce:c9:b1:da: 0d:5d:14:6c:27:c7:63:43:f6:e6:a7:ca:6f:ab:ae:e3:4c:47: b7:3f:d5:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeglCPzHVWrAuRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTQ5NmZmZmMtZjZiYS00YWQ4LWEyOTgtMDY3MTc1ZTQ5MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qm73OzJXeL/E2kTN9eD1hBQdIfGx7c61UvI LEGNYsMhQY1DT57MgiKdUUrDYTw61iSI6lNFPFLgJNMmPrsyj1ElAlQlGleVbbrh Da8P9GEwEhtFeQ+4k6+rJXSPFCNKGtIwse01GIQe+Ly6uODdGExBz0afPebTP3eu MGZhR9sW0w02VgLYsBEdSBv6lV2qcJeeqrbVm/ojBNycFq1E6uEX7kDjoS8553+W 4ik73E/uLJjC6jix5SCXe6uSs3QfumIeqT0AXLAhj8P4WVZuuw4VVxy1jN3EJX2D nR96124cygan0W/HMs5unuCTYJ13lVmpdXzv22hTvyShs9UsbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYVc2dAPwQylQIUK+MzgCi0SiGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM5NmU5NzUtODBjYy0z MGU0LWJhNzQtYjRiYTUxODY5ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwSmBTyGTMDzIc1/6kPl6xdsupsabTq+/3vuQFIQfjbNVpaVE21 MKtsZG82AHtJoaB+kDcYyx0oPruaRAN70GA/FUDmK2kIZftGIxDIigyc5bCTJ96a o53TTvV8Y4kw6DiSh4uVed9ZGwBFCG2BzLfrQ8Ti/iUmsCikkPVuQb9B4hgrEHFI zKdArizVLcrRmYb8A3O0lURqFiI/rsivGfsljccwc9PLW4epv8n0XuRizVyFxfmN WWIaCFDBlp299HtHkoLrXwmefyZOBy0Z+/yXgJcnT78WmteGkVI4GCIhSPPQs/rU zsmx2g1dFGwnx2ND9uanym+rruNMR7c/1a4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:25 2026 by rpki-client