$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa File: 8b33777f-7214-304c-bfa7-6094a66eb134.roa (raw, json) Hash identifier: SsXzVnN6LySHteB1nQ3vXKMT6ugyn+4+hA1RUvGpXFs= Subject key identifier: 02:C0:3B:6B:BE:6F:E7:6A:92:B0:96:E6:FF:C3:EB:68:9A:2D:0D:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B670659BF73B553BA000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397195 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b6:70:65:9b:f7:3b:55:3b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a7c1c3d5-b2d3-4ca0-9416-21ab93b7ffab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:a9:b6:38:35:9f:88:4f:61:8e:91:98:f8: 27:86:6e:64:fa:0b:68:ce:8e:6e:1a:c7:d2:06:bf: 1e:8c:5b:57:1d:72:a1:a8:2b:91:01:4a:09:5c:c7: 02:c6:ee:ae:68:85:f3:a0:22:31:78:70:d1:99:f1: f2:32:f8:2d:34:84:8e:51:6c:9b:90:79:c1:4b:78: 71:33:23:b4:fe:85:88:93:3d:e2:bc:c0:ef:cc:f8: af:79:a7:7b:09:6f:fa:dc:c7:c1:a6:a0:38:89:df: 37:39:25:b4:fa:59:d0:63:df:8c:ab:ed:16:35:48: 1b:34:a6:ea:c0:56:e3:db:41:88:aa:fa:89:1d:12: 71:5e:4d:33:cc:e8:bf:9b:23:12:56:4b:de:46:e9: 68:50:fa:dc:fd:7c:1c:7c:e4:98:fc:77:c6:1e:23: 10:6a:84:aa:af:b7:6a:82:70:9d:56:44:b4:fc:41: 54:56:b3:e1:2f:83:95:a1:ae:c3:0e:68:a4:12:9d: d0:45:4c:e4:f8:87:5d:64:da:71:c2:b7:40:07:2a: 67:56:65:04:88:8c:fd:09:ab:fe:64:ce:81:23:1f: bf:ad:b5:78:32:28:ce:9f:92:a8:59:a3:40:61:32: 3a:80:ac:0b:27:0e:73:be:ad:37:ed:e4:fe:ea:38: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:3B:6B:BE:6F:E7:6A:92:B0:96:E6:FF:C3:EB:68:9A:2D:0D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:59:6d:b4:c2:ab:2c:00:31:2d:6a:e7:2e:44:b9:b7:b9:03: 9f:a5:a0:22:03:2f:13:37:99:9f:95:70:cb:8c:2a:88:5d:8c: a3:e0:41:a3:e9:40:81:4d:b1:fe:e2:39:71:8a:0d:e5:79:a9: 04:d3:6b:f9:35:73:f7:88:49:ec:6e:62:4b:23:82:49:e3:54: 49:c0:e4:22:0e:12:db:c9:8e:bf:88:6b:fa:28:9c:ea:71:4b: 1e:bf:ce:af:0f:cc:df:59:02:8e:ba:ed:83:01:aa:05:f2:d8: 5a:5b:1d:fc:1d:a6:76:ff:11:68:12:9e:57:ae:c5:e0:fb:3f: d7:56:a8:42:0e:96:0b:39:52:4a:99:12:f3:98:5f:95:55:95: 16:1e:b0:78:83:bc:c7:06:a2:ff:fc:a7:07:82:1b:93:ea:30: 21:b1:8b:54:93:0d:0a:83:9d:63:2d:99:a8:a7:5e:63:84:56: 92:5c:1a:b5:6b:c5:1d:51:f1:2f:1b:ba:8f:02:6d:94:e4:19: 09:06:b6:27:6c:b7:39:10:04:8e:23:8c:db:a9:74:ea:32:27: 3c:20:87:02:6d:67:30:c5:8e:0d:46:29:e5:4f:ae:88:b5:30: fa:c6:54:e3:f2:51:09:9f:c2:3d:60:66:13:67:dd:d0:09:e3: 1b:5f:2d:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErZwZZv3O1U7oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTdjMWMzZDUtYjJkMy00Y2EwLTk0MTYtMjFhYjkzYjdmZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3qptjg1n4hPYY6RmPgnhm5k+gtozo5uGsfS Br8ejFtXHXKhqCuRAUoJXMcCxu6uaIXzoCIxeHDRmfHyMvgtNISOUWybkHnBS3hx MyO0/oWIkz3ivMDvzPivead7CW/63MfBpqA4id83OSW0+lnQY9+Mq+0WNUgbNKbq wFbj20GIqvqJHRJxXk0zzOi/myMSVkveRuloUPrc/XwcfOSY/HfGHiMQaoSqr7dq gnCdVkS0/EFUVrPhL4OVoa7DDmikEp3QRUzk+IddZNpxwrdABypnVmUEiIz9Cav+ ZM6BIx+/rbV4MijOn5KoWaNAYTI6gKwLJw5zvq037eT+6jhL+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALAO2u+b+dqkrCW5v/D62iaLQ01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIzMzc3N2YtNzIxNC0z MDRjLWJmYTctNjA5NGE2NmViMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNZbbTCqywAMS1q5y5Eube5A5+loCIDLxM3mZ+VcMuMKohdjKPg QaPpQIFNsf7iOXGKDeV5qQTTa/k1c/eISexuYksjgknjVEnA5CIOEtvJjr+Ia/oo nOpxSx6/zq8PzN9ZAo667YMBqgXy2FpbHfwdpnb/EWgSnleuxeD7P9dWqEIOlgs5 UkqZEvOYX5VVlRYesHiDvMcGov/8pweCG5PqMCGxi1STDQqDnWMtmainXmOEVpJc GrVrxR1R8S8buo8CbZTkGQkGtidstzkQBI4jjNupdOoyJzwghwJtZzDFjg1GKeVP roi1MPrGVOPyUQmfwj1gZhNn3dAJ4xtfLRE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:49 2026 by rpki-client