$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa File: 81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa (raw, json) Hash identifier: Xu2Xfwoi1oyXxwX+LtuT7dpcsVTr5knuW2RSigm1J7M= Subject key identifier: 11:0D:30:24:22:88:F9:BB:EE:C4:26:2D:6E:2E:E7:F7:3C:33:8C:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D09124E9AFC7A732B26BD4980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396546 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:4e:9a:fc:7a:73:2b:26:bd:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=758a94e1-9b92-4f9d-bf0c-92bc4c603ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:54:33:e5:b9:ac:87:72:4d:bc:08:7c:6a: 91:12:2b:7d:8b:42:e6:9e:14:1b:ec:d3:71:08:33: 4b:49:e1:97:52:6e:40:93:3d:05:0a:4c:0a:94:57: 4f:97:bf:6e:ab:7c:f7:ea:5d:9f:33:4c:aa:07:47: fc:74:8e:ad:8a:d2:b7:55:eb:65:d6:c0:79:c1:18: a6:85:15:e2:1d:e4:b1:40:09:5a:64:bd:c9:50:81: f3:cf:dc:08:82:df:f5:bf:ec:35:f5:87:08:c8:e5: dd:bf:eb:4b:ed:c0:52:b3:f2:57:84:fe:b3:b5:1a: 34:2b:3f:ef:f2:ed:6a:90:5b:39:7e:e4:e0:7d:b5: d6:fd:3e:be:ac:99:64:7c:5c:34:77:6f:4c:8c:17: 2e:0c:80:8f:55:18:79:de:eb:eb:4a:b3:54:2e:fc: f5:29:0b:13:e3:43:65:09:bf:8f:8a:0d:1b:0f:c3: 88:50:a2:e1:cf:5e:85:35:4c:5b:ef:a5:29:54:6c: ce:7d:b0:18:bf:51:7c:1a:f8:a1:2f:41:96:14:7f: 17:e2:7b:be:16:f8:31:cb:6c:47:a2:f7:d5:a9:83: cc:4b:08:cd:e0:c3:d9:42:85:0d:2f:36:22:02:c4: d4:c7:07:a3:6d:33:26:cc:cf:6e:d8:a8:f0:98:8d: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0D:30:24:22:88:F9:BB:EE:C4:26:2D:6E:2E:E7:F7:3C:33:8C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:69:82:2a:dc:91:cf:27:4d:33:3f:17:8c:22:31:a6:9c:bd: 00:5d:ee:c0:a7:b3:71:04:76:08:96:ef:dc:e5:93:71:aa:2d: e4:63:6e:0f:91:ed:3a:e4:c8:72:63:c2:d9:5f:a6:51:92:12: 84:0f:0e:c3:ea:7d:2c:0f:d1:b1:fe:a4:ec:55:8e:40:02:83: 3a:8c:40:ad:3f:4d:1f:df:86:29:12:e0:05:da:a7:a9:4e:89: d1:52:b6:00:02:ff:5c:af:ac:0e:b3:50:13:fd:cf:8d:e9:ee: dd:00:7c:ab:8b:41:c4:86:a2:75:9c:09:34:05:f2:11:42:a0: 63:e2:33:b3:0d:1b:07:fd:91:01:af:98:2c:29:0e:ff:6d:e4: 69:c9:18:c9:8b:71:5e:c4:ac:7f:fc:44:e6:bc:a1:32:57:d1: bb:07:c1:f7:b0:81:46:90:8b:70:67:8c:41:52:38:f8:93:d5: 1c:06:bc:97:dd:76:8f:ea:cb:48:8a:4e:70:92:b0:c0:13:b5: fc:71:17:f1:13:82:c0:17:f8:15:a2:aa:05:d3:bc:d6:e5:2f: 7d:3e:4b:9e:7f:df:af:29:f0:4c:2a:b9:a3:6f:85:e1:93:05: c2:28:25:ed:ec:cb:9c:c3:0b:63:d4:6e:89:42:01:7f:88:9c: 27:13:ec:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEk6a/HpzKya9SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzU4YTk0ZTEtOWI5Mi00ZjlkLWJmMGMtOTJiYzRjNjAzZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JUM+W5rIdyTbwIfGqREit9i0LmnhQb7NNx CDNLSeGXUm5Akz0FCkwKlFdPl79uq3z36l2fM0yqB0f8dI6titK3Vetl1sB5wRim hRXiHeSxQAlaZL3JUIHzz9wIgt/1v+w19YcIyOXdv+tL7cBSs/JXhP6ztRo0Kz/v 8u1qkFs5fuTgfbXW/T6+rJlkfFw0d29MjBcuDICPVRh53uvrSrNULvz1KQsT40Nl Cb+Pig0bD8OIUKLhz16FNUxb76UpVGzOfbAYv1F8GvihL0GWFH8X4nu+Fvgxy2xH ovfVqYPMSwjN4MPZQoUNLzYiAsTUxwejbTMmzM9u2KjwmI1UBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBENMCQiiPm77sQmLW4u5/c8M4wsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFiZjcwZjItMDEwYy0z YWE4LTg0MDEtOGU0YWE5YTI1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF9pgirckc8nTTM/F4wiMaacvQBd7sCns3EEdgiW79zlk3GqLeRj bg+R7TrkyHJjwtlfplGSEoQPDsPqfSwP0bH+pOxVjkACgzqMQK0/TR/fhikS4AXa p6lOidFStgAC/1yvrA6zUBP9z43p7t0AfKuLQcSGonWcCTQF8hFCoGPiM7MNGwf9 kQGvmCwpDv9t5GnJGMmLcV7ErH/8ROa8oTJX0bsHwfewgUaQi3BnjEFSOPiT1RwG vJfddo/qy0iKTnCSsMATtfxxF/ETgsAX+BWiqgXTvNblL30+S55/368p8EwquaNv heGTBcIoJe3sy5zDC2PUbolCAX+InCcT7NQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:18 2026 by rpki-client