$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa File: 8e22e1de-01c6-3507-ab20-b881646f46fa.roa (raw, json) Hash identifier: sYVuySEn8cs0tE6SIp3jq17bnRGl4JZwG9ydJ73lBLg= Subject key identifier: 3D:27:27:A9:E8:13:53:C0:3B:58:4F:80:D9:E0:DC:DF:1F:53:37:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8049EE079B12E72B2620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396578 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:80:49:ee:07:9b:12:e7:2b:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ffdf91ba-3a3d-434e-85df-c3fb6b5f6621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:54:d3:82:f3:20:ee:0c:4b:f5:ed:5c:0a: 57:4a:2e:81:19:d3:58:e0:74:ba:40:72:45:f0:71: 9d:e7:8b:26:85:4b:e4:07:b5:1d:85:99:17:01:28: fe:c8:3f:5b:79:d7:89:38:9c:e2:bf:02:51:72:a4: e1:74:87:69:d2:68:a3:e0:56:7f:31:e0:f9:43:eb: 29:f7:39:91:42:6f:9a:b9:a2:60:13:91:c3:26:33: 23:b2:b4:34:67:72:a8:dc:a5:32:49:e8:0d:30:9e: 52:11:db:b0:ee:77:df:4c:0a:b2:fb:45:0c:f3:06: 7e:e2:54:f2:6d:1a:0b:0a:e6:16:f5:0d:8e:79:a9: f6:34:0e:55:fd:0e:f1:a6:9b:7a:74:e3:95:a6:18: 47:39:ca:5e:a7:9e:ca:2f:33:df:8b:58:3e:40:3f: 52:26:7a:b2:24:e0:b0:52:42:55:6c:2c:a3:42:09: c9:ae:f4:d3:ec:17:22:5e:50:3c:0d:fa:c6:a4:07: 2e:bc:5c:94:82:a3:e1:dc:70:b7:14:fa:49:20:61: c7:f3:6f:f7:a3:32:2f:00:8e:9e:33:22:d7:1d:d1: aa:27:85:2f:55:2b:44:01:cc:70:ec:5e:c8:fc:7d: 2b:11:b6:9b:30:d3:04:65:aa:48:6d:f5:e6:ad:43: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:27:A9:E8:13:53:C0:3B:58:4F:80:D9:E0:DC:DF:1F:53:37:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:27:5a:e3:c3:a3:8a:d3:04:a1:97:c4:5f:ad:2b:ae:b4:1e: a6:b0:b0:81:ce:71:9c:11:a6:18:fa:55:0f:61:a1:8a:99:9e: ec:a0:0b:ad:26:fe:eb:e7:f9:df:c8:ce:7a:83:fd:5a:41:b3: c0:30:f0:3e:09:c1:0d:be:53:d8:e9:c9:2a:98:22:42:52:06: 02:4e:41:62:38:17:1c:74:d5:0c:2d:b9:5a:93:e9:02:7b:e3: 66:80:66:39:54:28:a4:d6:57:7e:85:88:2b:65:c6:db:40:88: 7d:80:7e:87:51:70:f1:bc:d8:f6:3f:79:c6:ab:cc:71:b5:cc: c5:39:54:7a:06:f3:e0:6a:94:cc:04:a0:3f:f8:8e:67:ee:5c: 94:32:3c:e7:93:b2:92:a5:13:ba:5a:65:41:60:d3:3d:7a:38: 2a:3e:70:aa:1a:95:5d:f3:4a:72:4a:15:54:87:1d:29:d1:23: 14:59:fe:e8:70:39:08:f6:91:10:e1:bb:34:20:ef:fb:44:13: 63:d3:26:9d:b1:5f:26:86:0b:c2:cf:1e:3a:51:16:b5:ac:09: 79:6e:d7:17:ee:40:89:b2:0a:38:8f:94:a2:9a:5f:37:de:ff: 25:dc:88:61:90:8c:bd:0d:91:e5:37:5c:ec:0b:82:9b:44:01: 02:dd:3b:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoBJ7gebEucrJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmZkZjkxYmEtM2EzZC00MzRlLTg1ZGYtYzNmYjZiNWY2NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+lU04LzIO4MS/XtXApXSi6BGdNY4HS6QHJF 8HGd54smhUvkB7UdhZkXASj+yD9bedeJOJzivwJRcqThdIdp0mij4FZ/MeD5Q+sp 9zmRQm+auaJgE5HDJjMjsrQ0Z3Ko3KUySegNMJ5SEduw7nffTAqy+0UM8wZ+4lTy bRoLCuYW9Q2Oean2NA5V/Q7xppt6dOOVphhHOcpep57KLzPfi1g+QD9SJnqyJOCw UkJVbCyjQgnJrvTT7BciXlA8DfrGpAcuvFyUgqPh3HC3FPpJIGHH82/3ozIvAI6e MyLXHdGqJ4UvVStEAcxw7F7I/H0rEbabMNMEZapIbfXmrUOQgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD0nJ6noE1PAO1hPgNng3N8fUzcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUyMmUxZGUtMDFjNi0z NTA3LWFiMjAtYjg4MTY0NmY0NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAiJ1rjw6OK0wShl8RfrSuutB6msLCBznGcEaYY +lUPYaGKmZ7soAutJv7r5/nfyM56g/1aQbPAMPA+CcENvlPY6ckqmCJCUgYCTkFi OBccdNUMLblak+kCe+NmgGY5VCik1ld+hYgrZcbbQIh9gH6HUXDxvNj2P3nGq8xx tczFOVR6BvPgapTMBKA/+I5n7lyUMjznk7KSpRO6WmVBYNM9ejgqPnCqGpVd80py ShVUhx0p0SMUWf7ocDkI9pEQ4bs0IO/7RBNj0yadsV8mhgvCzx46URa1rAl5btcX 7kCJsgo4j5Siml833v8l3IhhkIy9DZHlN1zsC4KbRAEC3Tth -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:02 2026 by rpki-client