$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa File: 858d2db0-cf70-3659-a965-60917e6c90e8.roa (raw, json) Hash identifier: VoOiO2NnzszlPzlDxByclA7KqXsNQ8wqyUHz9lGtlpE= Subject key identifier: 6E:B1:8E:80:BD:74:86:D9:0D:4B:A0:76:20:84:42:14:FF:28:CE:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379F09E58C28885B069CB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 22547 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f0:9e:58:c2:88:85:b0:69:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=599ef3e6-449c-499c-b9d9-89bf4b68fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:59:e2:db:eb:a4:b6:68:c8:47:18:92:66: fb:db:e3:72:62:d0:4c:b3:a0:ae:67:85:b6:65:4a: d5:8e:ac:9b:a9:9c:b8:b9:ef:33:a3:6b:90:43:99: 93:de:57:9c:9e:ae:7f:84:4d:02:9d:11:58:5b:ba: f5:a6:6a:8d:26:51:22:6e:dc:56:03:a5:7f:14:3e: 2a:14:58:48:0b:b9:04:b0:c8:e5:2a:66:b6:d5:90: ab:c6:ff:68:4b:52:bb:5a:b7:d5:46:5a:8f:5a:10: 0a:d6:d7:d1:4c:aa:17:2f:39:41:64:88:34:bd:06: c1:40:52:3f:cb:dd:5a:52:d2:d3:cd:29:c1:2d:7d: 2a:7a:8d:d6:a1:3b:8c:08:29:8b:8a:bd:32:49:81: 60:27:63:bd:cb:53:ee:35:e5:4c:9a:6d:9d:49:e5: ed:99:cf:bd:45:11:a7:5d:b2:af:2b:7d:4d:c0:35: 73:ee:47:08:30:01:29:e4:cc:13:95:a1:6f:46:c9: 20:40:22:2e:76:70:18:31:34:42:1d:fc:e1:44:40: 95:32:da:9b:4b:3e:e9:34:2b:ff:14:cc:20:dc:6c: 46:68:02:9a:a3:ea:34:33:d6:c9:5c:2c:0f:bf:34: f9:8d:81:aa:e8:41:5d:fe:f7:e5:b3:78:bf:85:57: 9c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B1:8E:80:BD:74:86:D9:0D:4B:A0:76:20:84:42:14:FF:28:CE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ed:31:4e:6b:6d:83:8f:4b:89:8e:23:04:a2:46:55:e5:71: 8b:bf:6d:08:70:94:55:81:b9:47:fd:d2:b5:a2:0c:43:bb:b3: b2:f5:cf:6a:e1:07:fb:c7:e1:5b:aa:11:6e:d1:9f:9c:a8:cd: e9:6b:7e:74:63:4a:24:7c:5a:9a:07:a2:4a:4d:fc:6f:61:53: b9:3f:d1:b9:ac:ae:ca:28:01:a3:ba:6e:de:b6:1c:24:d3:03: 7c:6a:dc:e8:da:11:9b:3b:a9:71:57:39:32:12:e5:ea:01:ae: 0c:1b:aa:2f:26:85:92:49:7c:10:4b:a9:d0:7b:8b:3c:d7:81: eb:da:f1:55:0a:8c:f5:4c:ac:90:4a:5a:bc:a7:9c:3f:54:bf: c6:a2:c4:90:4d:c6:0a:d0:87:d2:3c:f7:a6:68:17:dd:02:00: 3b:b0:99:ea:b5:2c:d0:0f:e9:ef:96:54:dd:7a:ae:9e:ed:ca: 25:53:b1:f9:77:b7:fd:99:c3:72:57:65:3b:78:a9:9e:a1:bb: b1:93:f9:f7:f4:62:9b:d6:fd:57:e6:ac:37:78:f8:c0:e6:41: ae:ee:a1:53:a7:ac:62:52:05:4c:fb:98:88:67:52:a7:c6:95: a9:3f:5b:99:62:bc:25:09:1b:5b:e5:ab:b0:95:8c:42:3f:1f: 26:e6:74:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jefCeWMKIhbBpy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTk5ZWYzZTYtNDQ5Yy00OTljLWI5ZDktODliZjRiNjhmZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jtZ4tvrpLZoyEcYkmb72+NyYtBMs6CuZ4W2 ZUrVjqybqZy4ue8zo2uQQ5mT3lecnq5/hE0CnRFYW7r1pmqNJlEibtxWA6V/FD4q FFhIC7kEsMjlKma21ZCrxv9oS1K7WrfVRlqPWhAK1tfRTKoXLzlBZIg0vQbBQFI/ y91aUtLTzSnBLX0qeo3WoTuMCCmLir0ySYFgJ2O9y1PuNeVMmm2dSeXtmc+9RRGn XbKvK31NwDVz7kcIMAEp5MwTlaFvRskgQCIudnAYMTRCHfzhRECVMtqbSz7pNCv/ FMwg3GxGaAKao+o0M9bJXCwPvzT5jYGq6EFd/vfls3i/hVecJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG6xjoC9dIbZDUugdiCEQhT/KM4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4ZDJkYjAtY2Y3MC0z NjU5LWE5NjUtNjA5MTdlNmM5MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGTtMU5rbYOPS4mOIwSiRlXlcYu/bQhwlFWBuUf90rWiDEO7s7L1 z2rhB/vH4VuqEW7Rn5yozelrfnRjSiR8WpoHokpN/G9hU7k/0bmsrsooAaO6bt62 HCTTA3xq3OjaEZs7qXFXOTIS5eoBrgwbqi8mhZJJfBBLqdB7izzXgeva8VUKjPVM rJBKWrynnD9Uv8aixJBNxgrQh9I896ZoF90CADuwmeq1LNAP6e+WVN16rp7tyiVT sfl3t/2Zw3JXZTt4qZ6hu7GT+ff0YpvW/VfmrDd4+MDmQa7uoVOnrGJSBUz7mIhn UqfGlak/W5livCUJG1vlq7CVjEI/HybmdGk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:16 2026 by rpki-client