$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87a415ff-9ec1-3f99-a567-ddd9fcf75b9e.roa File: 87a415ff-9ec1-3f99-a567-ddd9fcf75b9e.roa (raw, json) Hash identifier: 1DepT1d2Cb9fx7vxHg79PWAFUcr36LD6eLJ0FzK0DgA= Subject key identifier: F0:FA:70:B5:94:6B:0A:57:B6:EA:D6:7C:47:2D:A7:9A:E9:EA:90:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A813AA5F87EDC48EE75C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87a415ff-9ec1-3f99-a567-ddd9fcf75b9e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 20172 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:81:3a:a5:f8:7e:dc:48:ee:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a15c0dbc-ecbb-4e52-898f-7b19d1a4b809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:45:fe:fe:1e:43:6d:94:b1:d3:ad:24:75: f1:7d:b2:db:85:06:79:0f:6e:4a:70:33:74:7d:ba: ce:20:8f:12:c6:38:2a:c0:cb:ce:21:1c:f3:89:93: 9f:7b:44:bc:97:88:c7:dd:f6:14:50:e4:44:90:49: f2:81:4d:ac:b0:c7:47:e7:f8:db:7d:ca:6f:1d:3e: f5:9e:bd:ab:41:59:c2:48:09:f8:6a:89:83:5d:71: 49:47:39:47:fb:0d:99:41:be:3f:b4:e5:46:de:cd: 28:47:6c:f7:bf:8c:fc:7e:c7:bf:ef:e9:4c:4c:ad: a2:38:4e:68:ac:0c:76:7e:b8:a8:5e:3b:8a:a7:2f: 6a:15:31:33:66:90:34:14:c0:dc:04:b2:c7:48:1a: 6b:9a:f8:71:9d:58:87:ef:59:30:04:0a:69:9b:95: 5c:d2:68:ff:53:92:a8:89:bb:dd:94:85:9a:2b:95: d6:e0:7d:06:9b:bc:e8:80:4b:3a:56:de:1f:ed:03: ae:22:2a:37:8f:fb:95:5b:80:4b:11:8c:92:32:ee: ee:85:5a:b6:72:a8:0b:98:eb:6d:20:46:50:2c:e9: a8:a8:5b:c5:d7:98:55:cf:08:a8:03:24:9c:99:02: 79:7c:a2:18:70:58:0d:6d:a8:ff:3d:5a:30:0f:91: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:70:B5:94:6B:0A:57:B6:EA:D6:7C:47:2D:A7:9A:E9:EA:90:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87a415ff-9ec1-3f99-a567-ddd9fcf75b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:75:5d:44:4d:c8:32:9e:d6:a8:ab:b3:63:47:8f:97:a2: 45:32:e3:dc:1f:63:be:c6:82:75:0d:5c:84:57:fc:66:de:05: 31:3c:e1:3d:54:8a:f2:99:fa:da:38:37:a8:65:51:a4:67:81: 77:24:3f:16:34:71:67:4a:b7:7c:88:13:c9:4b:19:e0:55:a2: 62:7c:1c:74:2d:0d:49:1a:1c:1c:78:2e:b1:7f:74:3e:dc:d1: 53:e1:51:98:0b:41:5a:a7:fa:87:15:f9:bc:c9:7e:cb:b1:b4: df:31:fa:e6:44:8b:61:51:21:59:fe:7a:0a:dc:a7:20:6a:b4: 87:b5:52:ef:94:b0:44:4e:d9:15:51:43:ef:04:8a:93:ee:b9: 7f:71:d7:f0:49:48:c6:71:c2:cc:33:58:12:d2:67:f0:aa:44: ae:e9:3b:10:08:aa:62:3e:c5:9a:30:b1:3e:62:c2:99:71:96: 7a:5a:a2:74:04:1f:1c:39:af:5e:c3:1d:4d:2a:fe:51:b0:78: 7a:a8:c2:cb:ce:f7:b7:ae:79:78:f9:2d:ec:28:59:20:35:d0: 06:4a:74:00:b4:c9:af:be:c2:79:d0:63:e9:09:6c:74:99:76: 1a:5d:64:61:79:94:a9:0f:ef:9a:3b:f4:9c:03:ff:3b:45:6a: 02:15:c9:89 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoE6pfh+3EjudcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTE1YzBkYmMtZWNiYi00ZTUyLTg5OGYtN2IxOWQxYTRiODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK5F/v4eQ22UsdOtJHXxfbLbhQZ5D25KcDN0 fbrOII8SxjgqwMvOIRzziZOfe0S8l4jH3fYUUOREkEnygU2ssMdH5/jbfcpvHT71 nr2rQVnCSAn4aomDXXFJRzlH+w2ZQb4/tOVG3s0oR2z3v4z8fse/7+lMTK2iOE5o rAx2frioXjuKpy9qFTEzZpA0FMDcBLLHSBprmvhxnViH71kwBAppm5Vc0mj/U5Ko ibvdlIWaK5XW4H0Gm7zogEs6Vt4f7QOuIio3j/uVW4BLEYySMu7uhVq2cqgLmOtt IEZQLOmoqFvF15hVzwioAyScmQJ5fKIYcFgNbaj/PVowD5ElzQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPD6cLWUawpXturWfEctp5rp6pBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdhNDE1ZmYtOWVjMS0z Zjk5LWE1NjctZGRkOWZjZjc1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDlXVdRE3IMp7WqKuzY0ePl6JFMuPcH2O+xoJ1 DVyEV/xm3gUxPOE9VIrymfraODeoZVGkZ4F3JD8WNHFnSrd8iBPJSxngVaJifBx0 LQ1JGhwceC6xf3Q+3NFT4VGYC0Fap/qHFfm8yX7LsbTfMfrmRIthUSFZ/noK3Kcg arSHtVLvlLBETtkVUUPvBIqT7rl/cdfwSUjGccLMM1gS0mfwqkSu6TsQCKpiPsWa MLE+YsKZcZZ6WqJ0BB8cOa9ewx1NKv5RsHh6qMLLzve3rnl4+S3sKFkgNdAGSnQA tMmvvsJ50GPpCWx0mXYaXWRheZSpD++aO/ScA/87RWoCFcmJ -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:20 2026 by rpki-client