$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa File: 85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json) Hash identifier: tA0q+B1o7t2IQ4xb1KX31hGrxuaiLsT7wQbjA95SXQg= Subject key identifier: C1:C9:F9:55:0E:25:29:63:2A:A6:C7:3B:AB:12:22:24:5B:80:95:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A3F7BD1AA9F45BC34C600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396573 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3f:7b:d1:aa:9f:45:bc:34:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=78d69799-984d-4d47-a83e-aefe4a69874f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:cb:0c:3f:c1:64:af:ef:8b:7c:b7:d9:58: f0:58:57:86:27:3e:7c:57:7d:f3:14:cc:81:cb:50: 20:b4:e0:d6:31:9a:bf:47:37:3b:74:9e:b9:78:2b: 2b:34:5e:b1:83:b4:89:96:b0:6b:e3:75:97:97:d3: aa:3d:f1:d1:c5:f5:dd:55:f4:ea:01:9e:ef:c3:9d: 23:89:bf:50:d3:8b:99:ab:0b:73:d1:b6:47:e3:53: 7e:6a:19:7a:a3:ea:18:07:b6:b7:f2:39:dc:40:d1: a7:60:1f:e4:3e:35:60:b2:c9:39:6c:10:24:f3:f8: 01:d1:32:fa:d9:a0:28:99:e1:89:20:9f:38:21:dc: b0:e4:f5:e3:0e:45:04:28:e0:31:70:60:07:4e:0c: c3:8b:05:2e:f8:21:3e:74:79:98:4b:54:fe:4c:80: 87:30:99:9c:d0:fc:c0:eb:e5:09:1b:33:76:5a:90: 2f:7f:e7:36:22:69:7c:b6:10:f5:de:8c:1f:b4:83: 0d:ef:2a:53:00:93:2a:34:78:3d:a2:7b:32:54:df: a0:d3:9e:8a:1b:f7:98:e4:e2:4d:ef:1c:39:04:ac: 79:0c:e6:b1:8a:81:8d:17:8d:47:5c:65:7b:92:4c: 3f:e0:4e:91:7b:01:a0:f8:e9:e6:a1:24:e2:25:e5: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:F9:55:0E:25:29:63:2A:A6:C7:3B:AB:12:22:24:5B:80:95:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5e:7d:5c:42:26:2c:3b:39:9e:66:36:d8:d5:b2:52:63:84: 83:0a:d3:03:40:d9:b3:17:6f:bd:87:52:e0:f4:c8:3b:b6:7c: ee:18:90:21:7d:4e:c8:0d:39:5f:71:90:9d:37:d5:46:a7:f7: e9:02:19:b1:96:65:21:69:65:5a:3b:e9:22:d3:5a:8a:a9:88: b2:a7:c1:c2:7c:97:4a:a6:ef:c6:4b:d1:ef:8c:ef:8d:59:dd: 03:1c:27:ae:5d:a0:79:fd:e0:3d:b4:a9:d5:e4:6e:3e:ea:15: 7e:4b:75:42:09:36:c6:84:64:b7:16:3e:3b:d6:73:18:66:1d: 09:07:24:c6:aa:c8:90:59:da:21:13:a6:a6:f3:83:58:5e:c4: 2f:d5:d5:a8:ec:36:52:41:01:42:a0:9e:aa:79:24:0d:f6:d7: db:aa:97:c2:93:de:9a:28:1f:e3:7d:45:40:be:ad:2b:d5:1b: 9f:ce:a4:c9:29:ed:a8:b1:05:60:b9:2a:e2:61:a0:19:c0:f8: 03:e6:28:ff:33:77:26:60:58:44:eb:2a:ac:82:e1:bc:39:ed: 84:8d:55:7b:3f:61:1e:1c:56:3d:1f:e5:74:4b:a0:9d:f6:2c: 3e:fb:dd:75:08:41:cd:c2:fe:98:c3:2c:ec:28:3b:a4:3f:60: 2e:93:f9:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jej970aqfRbw0xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NzhkNjk3OTktOTg0ZC00ZDQ3LWE4M2UtYWVmZTRhNjk4NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BvLDD/BZK/vi3y32VjwWFeGJz58V33zFMyB y1AgtODWMZq/Rzc7dJ65eCsrNF6xg7SJlrBr43WXl9OqPfHRxfXdVfTqAZ7vw50j ib9Q04uZqwtz0bZH41N+ahl6o+oYB7a38jncQNGnYB/kPjVgssk5bBAk8/gB0TL6 2aAomeGJIJ84Idyw5PXjDkUEKOAxcGAHTgzDiwUu+CE+dHmYS1T+TICHMJmc0PzA 6+UJGzN2WpAvf+c2Iml8thD13owftIMN7ypTAJMqNHg9onsyVN+g056KG/eY5OJN 7xw5BKx5DOaxioGNF41HXGV7kkw/4E6RewGg+OnmoSTiJeUN6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHJ+VUOJSljKqbHO6sSIiRbgJW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhM2FjNGEtODNmMy0z ZjYwLTkwZmEtZTUwMmU4M2Y3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEtefVxCJiw7OZ5mNtjVslJjhIMK0wNA2bMXb72HUuD0yDu2fO4Y kCF9TsgNOV9xkJ031Uan9+kCGbGWZSFpZVo76SLTWoqpiLKnwcJ8l0qm78ZL0e+M 741Z3QMcJ65doHn94D20qdXkbj7qFX5LdUIJNsaEZLcWPjvWcxhmHQkHJMaqyJBZ 2iETpqbzg1hexC/V1ajsNlJBAUKgnqp5JA3219uql8KT3pooH+N9RUC+rSvVG5/O pMkp7aixBWC5KuJhoBnA+APmKP8zdyZgWETrKqyC4bw57YSNVXs/YR4cVj0f5XRL oJ32LD773XUIQc3C/pjDLOwoO6Q/YC6T+e0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:49 2026 by rpki-client