$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa File: 81de3853-d3ac-3ad4-a376-ac18677d11aa.roa (raw, json) Hash identifier: P2BEjqQF2MjQZo2v6yAPzGd0hWTV1zaCVg45TL6YELA= Subject key identifier: B5:07:CC:23:10:E9:19:22:D1:88:D2:01:88:64:72:53:FC:B1:B0:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D359FE056C2F0F2072C7DC5A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 2620:74:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:e0:56:c2:f0:f2:07:2c:7d:c5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=79fd755a-69b0-4701-9802-ced8bed1be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:78:57:63:27:b6:0b:5e:39:0d:63:82:e4: 42:d9:a3:48:e1:90:e4:3f:3e:6c:0e:06:4e:79:5e: c7:03:c6:bd:7e:db:36:7f:eb:e4:3a:18:83:2e:c3: 9f:4a:31:5d:33:32:1a:f1:1b:60:da:cc:92:fd:df: f7:f8:47:e8:e9:90:1b:68:0d:e3:13:0f:1e:b9:0c: 95:84:c5:71:1e:65:55:84:51:6b:f0:36:41:16:cd: 82:0d:1d:0a:86:6e:75:0d:85:5b:c2:3a:23:af:9d: 61:18:fe:1e:e8:4b:90:13:8a:0a:b4:03:44:3a:0d: e6:fa:d2:21:8f:9d:e1:28:b6:f3:5c:36:2f:30:51: 8f:ac:b1:09:9e:08:ab:21:a7:cf:17:fa:f1:c9:61: 9b:0a:5a:f1:c1:c3:3a:bb:80:95:03:56:46:18:72: 55:b7:15:2c:f1:c6:d5:2e:7a:37:0d:91:89:1f:4d: f1:42:75:a9:29:94:7a:bf:3c:33:f2:79:30:89:37: d9:f5:79:97:ac:a7:01:fa:7b:56:75:92:fa:c4:55: 3a:ab:17:ca:2a:a4:ad:34:00:e6:85:28:e0:1f:1c: cf:aa:ff:de:77:1a:af:a6:dc:6a:1b:c1:f4:a9:2d: 2c:23:da:b8:1c:51:05:85:66:27:92:b6:d7:1f:f2: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:CC:23:10:E9:19:22:D1:88:D2:01:88:64:72:53:FC:B1:B0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:47:40:c0:0c:e2:05:31:39:7f:ad:45:b8:71:30:3b:e5:a4: cf:e8:6e:94:66:b8:e0:a3:1f:0c:73:9d:67:04:11:21:e8:94: ef:7d:d3:40:9e:a1:f2:cd:ab:87:bd:35:5d:6a:8c:76:fe:e9: a9:8c:69:86:21:23:ce:35:61:18:0b:0d:74:35:b0:a9:59:9d: 09:9c:fa:a7:b1:e1:df:3f:43:ee:1b:8b:46:d7:6e:f8:e1:60: f2:05:b5:d4:0c:74:8a:a0:13:0a:62:e1:20:1b:6b:2a:79:9f: f7:b5:a8:3d:40:07:96:76:af:5e:2b:17:63:30:b5:20:d0:52: 69:e9:a6:3d:13:ea:24:8b:16:87:f7:3d:eb:7d:eb:e6:5b:a3: c0:cf:4a:e8:4d:3a:76:5f:5f:75:02:11:4d:df:8a:f5:9d:09: 44:98:fc:fc:cd:a7:a8:ac:41:b9:7b:6f:cb:0e:15:35:2f:bd: 21:8a:c7:0e:9c:ef:c8:b2:29:d4:c2:97:3f:68:08:da:01:ff: 75:85:53:e8:3c:c9:f4:48:e8:96:c6:6b:52:25:bc:58:ae:c8: 0e:be:03:c4:52:02:be:d2:a0:5f:25:12:3e:de:43:ba:af:85: 41:65:84:7f:d9:48:42:65:41:eb:56:72:e0:10:31:a7:34:a6: 90:fd:95:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n+BWwvDyByx9xaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NzlmZDc1NWEtNjliMC00NzAxLTk4MDItY2VkOGJlZDFiZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzF4V2MntgteOQ1jguRC2aNI4ZDkPz5sDgZO eV7HA8a9fts2f+vkOhiDLsOfSjFdMzIa8Rtg2syS/d/3+Efo6ZAbaA3jEw8euQyV hMVxHmVVhFFr8DZBFs2CDR0Khm51DYVbwjojr51hGP4e6EuQE4oKtANEOg3m+tIh j53hKLbzXDYvMFGPrLEJngirIafPF/rxyWGbClrxwcM6u4CVA1ZGGHJVtxUs8cbV Lno3DZGJH03xQnWpKZR6vzwz8nkwiTfZ9XmXrKcB+ntWdZL6xFU6qxfKKqStNADm hSjgHxzPqv/edxqvptxqG8H0qS0sI9q4HFEFhWYnkrbXH/LTKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUHzCMQ6Rki0YjSAYhkclP8sbDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFkZTM4NTMtZDNhYy0z YWQ0LWEzNzYtYWMxODY3N2QxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdHQMAM4gUxOX+tRbhxMDvlpM/obpRmuOCjHwxznWcEESHolO99 00CeofLNq4e9NV1qjHb+6amMaYYhI841YRgLDXQ1sKlZnQmc+qex4d8/Q+4bi0bX bvjhYPIFtdQMdIqgEwpi4SAbayp5n/e1qD1AB5Z2r14rF2MwtSDQUmnppj0T6iSL Fof3Pet96+Zbo8DPSuhNOnZfX3UCEU3fivWdCUSY/PzNp6isQbl7b8sOFTUvvSGK xw6c78iyKdTClz9oCNoB/3WFU+g8yfRI6JbGa1IlvFiuyA6+A8RSAr7SoF8lEj7e Q7qvhUFlhH/ZSEJlQetWcuAQMac0ppD9lTo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:42 2026 by rpki-client