$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7704561e-7a50-33db-b2ed-dffd20f76124.roa File: 7704561e-7a50-33db-b2ed-dffd20f76124.roa (raw, json) Hash identifier: NJwRUGS91hHxHpZrtb30zoVQ6rPnnXRsudyTcVSJKw8= Subject key identifier: F5:E7:11:EA:5B:96:BA:62:9C:81:3C:D3:0C:26:9E:55:D0:75:C4:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8767EFC3EF049FEF8380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7704561e-7a50-33db-b2ed-dffd20f76124.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397198 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:87:67:ef:c3:ef:04:9f:ef:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bc9aae73-62d8-404f-85b8-ee8e2fb83ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:eb:a3:b0:ab:bf:53:ea:6e:e1:c9:90:e7: b1:bd:7c:2a:11:3b:01:e0:1e:87:78:7f:25:3c:fe: b0:ea:30:0d:40:14:7b:35:40:52:6b:6c:73:26:c0: 69:0b:f9:1f:24:ab:a7:e2:d7:87:98:59:fb:df:97: d5:78:3b:16:a3:7f:61:f4:b4:c7:2a:ef:00:0d:91: c0:63:7f:40:7e:c1:bb:6d:3b:0b:60:c7:57:17:42: d0:60:a5:46:90:95:1a:e3:9d:3e:2a:e8:10:29:88: f5:25:5f:57:3f:0e:47:42:e1:94:c3:80:04:7f:0b: 1d:3a:29:08:25:84:7c:a1:e7:12:b1:3c:0f:47:28: db:ea:39:5b:f9:65:ae:b8:d7:0d:b8:10:8b:8b:52: da:bb:49:84:7f:2c:34:e3:fa:2f:d0:92:51:24:9e: ac:74:18:43:39:4c:a4:db:a0:55:b4:5f:0e:7f:e8: 3b:10:a4:ad:32:4a:24:52:be:ff:23:fa:48:be:1f: df:78:35:07:ef:18:27:72:94:84:16:4c:42:8c:e2: 1f:2e:a8:f4:c3:1a:c1:b1:9e:3b:eb:50:3f:16:ce: 3e:bb:67:d6:ab:f5:26:c2:7a:25:e3:47:31:34:0d: 12:f2:6b:7b:ab:db:65:76:cc:47:a3:8a:77:c6:61: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:11:EA:5B:96:BA:62:9C:81:3C:D3:0C:26:9E:55:D0:75:C4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7704561e-7a50-33db-b2ed-dffd20f76124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cf:15:53:19:f0:9d:40:3c:9a:6f:6f:8e:1a:86:25:cf:8d: c1:b3:1e:18:85:fc:41:1e:37:08:10:79:ff:ec:ef:a2:95:ce: c9:62:82:d3:2e:3f:aa:4a:b3:85:61:6d:f2:6e:f5:2b:fc:00: 2b:87:a5:33:dc:8f:df:9f:78:47:f1:ac:9f:ca:4d:3a:c5:04: 4a:bb:28:00:c0:cb:d3:ca:71:d8:4c:cb:c0:68:96:71:dc:2f: 4c:b6:9d:4d:eb:d2:5c:fd:ff:2d:5d:fb:18:61:67:4d:7b:dc: 5f:12:2c:e1:5c:1b:71:88:a8:cf:d7:3b:15:ab:18:26:14:93: 57:80:c9:22:9b:c1:53:6e:91:44:94:96:1e:2d:7f:4d:49:df: b3:55:e4:50:eb:47:da:a4:1d:4c:9b:74:52:33:f4:1e:ed:f7: 22:10:ba:96:eb:26:55:6d:92:43:fc:a8:d2:53:d7:ab:50:be: 00:ec:71:84:55:35:34:ac:e4:a2:27:94:36:98:37:2a:8a:93: 6f:43:71:ee:ec:ab:a7:d0:05:2f:6f:58:91:8d:a6:1a:71:20: 78:cc:d0:4c:fe:90:f9:2a:2f:b5:b4:d1:10:a5:5f:2b:02:6e: dd:ed:12:6f:ca:b5:dc:30:21:0f:3a:6c:60:8c:8c:3e:a2:12: 53:77:3c:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCodn78PvBJ/vg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmM5YWFlNzMtNjJkOC00MDRmLTg1YjgtZWU4ZTJmYjgzZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngDro7Crv1PqbuHJkOexvXwqETsB4B6HeH8l PP6w6jANQBR7NUBSa2xzJsBpC/kfJKun4teHmFn735fVeDsWo39h9LTHKu8ADZHA Y39AfsG7bTsLYMdXF0LQYKVGkJUa450+KugQKYj1JV9XPw5HQuGUw4AEfwsdOikI JYR8oecSsTwPRyjb6jlb+WWuuNcNuBCLi1Lau0mEfyw04/ov0JJRJJ6sdBhDOUyk 26BVtF8Of+g7EKStMkokUr7/I/pIvh/feDUH7xgncpSEFkxCjOIfLqj0wxrBsZ47 61A/Fs4+u2fWq/Umwnol40cxNA0S8mt7q9tldsxHo4p3xmE5SQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPXnEepblrpinIE80wwmnlXQdcReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzcwNDU2MWUtN2E1MC0z M2RiLWIyZWQtZGZmZDIwZjc2MTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkzxVTGfCdQDyab2+OGoYlz43Bsx4YhfxBHjcI EHn/7O+ilc7JYoLTLj+qSrOFYW3ybvUr/AArh6Uz3I/fn3hH8ayfyk06xQRKuygA wMvTynHYTMvAaJZx3C9Mtp1N69Jc/f8tXfsYYWdNe9xfEizhXBtxiKjP1zsVqxgm FJNXgMkim8FTbpFElJYeLX9NSd+zVeRQ60fapB1Mm3RSM/Qe7fciELqW6yZVbZJD /KjSU9erUL4A7HGEVTU0rOSiJ5Q2mDcqipNvQ3Hu7Kun0AUvb1iRjaYacSB4zNBM /pD5Ki+1tNEQpV8rAm7d7RJvyrXcMCEPOmxgjIw+ohJTdzwu -----END CERTIFICATE-----Generated at Fri Mar 27 00:34:10 2026 by rpki-client