$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa File: 8a471311-857d-3cf9-8b32-779e318296f8.roa (raw, json) Hash identifier: O5+3V1GESZuxQlJzUR8UMmKIv1TURYqttPLHSIXnUb4= Subject key identifier: 32:B0:5A:4C:37:0A:DD:A9:EA:3E:43:5B:26:01:72:63:35:B7:CF:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B562694071D13C67D100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 36632 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b5:62:69:40:71:d1:3c:67:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=68b05665-d11d-4e7b-80a0-886a88ae69b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:82:3b:10:0c:b8:0f:e0:2c:76:6d:46:b7: 27:a6:d4:37:c9:4f:3a:d1:6e:30:98:be:1f:7a:fa: 30:1c:d6:26:20:f0:81:50:dd:75:7d:11:b6:5e:67: f2:71:82:6d:ac:73:c1:37:7d:e1:ff:85:fa:1c:b6: 43:bb:0e:4f:22:d6:9a:9d:c2:eb:28:0f:7d:cf:5d: 2e:91:6b:b5:58:a1:2e:5d:46:dd:b7:80:6d:dc:f5: b6:a6:38:8d:8a:54:fd:2b:04:6d:1b:93:4a:3c:c3: 57:fe:fd:56:a1:0d:f4:e2:14:4d:7f:70:2c:9a:64: 4e:68:c3:36:79:44:01:e9:f3:44:10:6a:37:ea:ad: ca:8f:dd:54:8b:bc:5f:dc:90:30:bb:fd:91:54:2d: 61:e3:52:01:b4:f0:4a:19:95:2e:ba:18:c7:15:a0: b9:dc:5e:ad:d6:90:8a:29:3c:90:11:28:b3:a7:c9: 76:21:07:19:6f:d8:78:dd:96:c2:8c:92:61:6d:25: 50:72:84:9c:78:76:48:5a:b9:85:e8:03:c1:a1:8e: a8:a4:9d:dc:43:9b:ba:69:f9:25:3a:f5:1e:96:a5: 48:5d:42:52:f1:2b:28:e1:b1:68:3a:29:d1:2b:76: a9:5f:63:1c:2a:ef:13:26:e7:55:47:95:8e:6b:c6: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B0:5A:4C:37:0A:DD:A9:EA:3E:43:5B:26:01:72:63:35:B7:CF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ae:73:19:b0:76:dd:11:e3:c7:26:fa:dd:16:e3:ad:5b:14: 46:c4:4b:cf:41:be:97:fa:fb:19:74:be:61:bf:8f:ab:ce:14: b7:68:49:5e:86:3e:57:92:61:df:af:4d:1a:b6:5c:8d:3d:69: fe:72:30:43:5c:95:03:f5:44:e5:2b:91:df:8d:9a:0a:15:0f: ac:2a:db:e7:1e:b6:5d:bb:07:82:90:a1:b5:bf:04:79:72:9d: ca:46:b3:27:ea:3f:32:78:14:0d:48:2f:91:ae:c8:50:d4:a3: df:4a:b2:af:98:53:37:46:cb:d2:02:2b:a9:68:61:fe:e4:a0: 02:62:08:22:7a:cf:90:46:3a:93:c0:a8:c1:b7:ad:4d:42:5f: 28:6e:05:ea:a7:f3:ec:29:da:08:08:02:89:78:7a:98:d9:61: ba:8c:1e:c0:47:c3:96:a1:8d:1c:27:69:4a:a8:4e:ca:07:7b: 11:aa:3e:a5:3c:3e:3d:d1:1a:ea:f1:7e:62:fc:c0:e3:dc:e5: f4:d0:27:29:25:29:ff:35:c1:e5:cb:c3:c3:03:fa:7a:db:55: b5:09:e2:e3:25:1a:05:96:27:5d:66:6e:7b:3a:a5:ba:82:e0: 69:01:7b:45:6e:97:f2:6a:0d:65:8c:f0:c0:1e:44:e0:08:ba: f3:bb:5d:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErViaUBx0Txn0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjhiMDU2NjUtZDExZC00ZTdiLTgwYTAtODg2YTg4YWU2OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ+COxAMuA/gLHZtRrcnptQ3yU860W4wmL4f evowHNYmIPCBUN11fRG2XmfycYJtrHPBN33h/4X6HLZDuw5PItaancLrKA99z10u kWu1WKEuXUbdt4Bt3PW2pjiNilT9KwRtG5NKPMNX/v1WoQ304hRNf3AsmmROaMM2 eUQB6fNEEGo36q3Kj91Ui7xf3JAwu/2RVC1h41IBtPBKGZUuuhjHFaC53F6t1pCK KTyQESizp8l2IQcZb9h43ZbCjJJhbSVQcoSceHZIWrmF6APBoY6opJ3cQ5u6afkl OvUelqVIXUJS8Sso4bFoOinRK3apX2McKu8TJudVR5WOa8ac1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKwWkw3Ct2p6j5DWyYBcmM1t8+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGE0NzEzMTEtODU3ZC0z Y2Y5LThiMzItNzc5ZTMxODI5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCucxmwdt0R48cm+t0W461bFEbES89Bvpf6+xl0vmG/j6vOFLdo SV6GPleSYd+vTRq2XI09af5yMENclQP1ROUrkd+NmgoVD6wq2+cetl27B4KQobW/ BHlyncpGsyfqPzJ4FA1IL5GuyFDUo99Ksq+YUzdGy9ICK6loYf7koAJiCCJ6z5BG OpPAqMG3rU1CXyhuBeqn8+wp2ggIAol4epjZYbqMHsBHw5ahjRwnaUqoTsoHexGq PqU8Pj3RGurxfmL8wOPc5fTQJyklKf81weXLw8MD+nrbVbUJ4uMlGgWWJ11mbns6 pbqC4GkBe0Vul/JqDWWM8MAeROAIuvO7XaM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:23 2026 by rpki-client