$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa File: 90e8a39a-2e32-3402-8589-dad42daf7449.roa (raw, json) Hash identifier: 3voZy2gFDKJ91/nbjtgG1o6u6q0WQ+082w7vkYmEFHA= Subject key identifier: 70:A0:08:F9:53:69:75:32:40:47:9A:B6:54:98:87:81:D8:8B:5B:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AEF574E58A3111044400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 397195 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:ae:f5:74:e5:8a:31:11:04:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=b5bd99aa-4e72-4438-8e8a-f9582b55fa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:46:05:3d:02:06:ea:fe:05:2c:45:1e:21: a1:a5:c8:2d:2e:8b:85:29:2e:b5:0f:b7:da:e3:94: 03:7e:aa:aa:7b:88:5a:7e:4e:92:34:72:40:55:0c: 20:e5:27:f8:e7:0d:7a:0d:42:c4:c4:06:9e:2f:6d: 29:35:f0:fe:c4:59:28:c8:6c:ca:d7:c0:9a:13:97: 60:7d:52:e7:74:46:80:07:04:73:b0:7d:59:26:32: 77:76:14:19:25:f8:62:d7:14:ca:1e:f7:51:cc:78: c3:25:4f:a7:db:f6:25:ac:97:e6:d2:f0:be:67:de: c7:73:0e:03:65:9a:8b:63:29:a9:43:38:55:da:30: 6f:27:11:36:d3:e8:27:f0:b5:e8:0d:5c:b4:f7:ae: 8a:fc:7a:00:25:3e:6a:44:d1:94:ec:8e:84:f6:de: 46:81:1e:a4:bd:c8:91:0d:2b:ca:fb:9c:b7:d2:cc: ad:ce:f3:73:44:c4:f7:2e:74:78:97:d3:f1:44:58: 12:1f:0b:86:d0:ce:5c:3e:c7:2f:15:57:59:4a:89: 4a:d9:08:f4:83:ca:64:11:39:9b:e1:ce:3a:44:10: ef:32:2a:1a:e7:6b:31:96:62:66:ec:1e:29:7f:11: 10:a5:af:38:b3:45:4d:43:ac:3d:4f:90:c9:21:fe: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:08:F9:53:69:75:32:40:47:9A:B6:54:98:87:81:D8:8B:5B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:58:51:18:b2:bf:fa:2d:45:cf:0b:5f:34:75:d8:16:3c:f0: d2:90:75:4b:71:6e:e4:0a:df:51:08:3a:ec:24:68:e9:e6:66: f2:3f:0a:aa:c3:39:c2:b8:73:1e:c2:e4:1c:82:66:43:31:fa: 43:fe:4b:cd:16:1a:68:c8:da:62:71:86:76:71:15:55:71:e6: a3:ff:18:7d:33:44:4a:66:35:f6:c9:4f:3e:8f:1f:8f:51:40: 40:48:1a:98:8a:0e:98:13:69:3a:25:dd:39:74:57:ba:62:90: 52:4b:ba:2e:45:ee:d1:e8:88:3e:c9:da:3b:83:ef:a4:f7:cf: c6:1a:2e:f6:fc:45:cb:3c:c3:67:10:1f:71:c4:01:9f:27:ba: 66:01:04:1a:f4:99:5e:2e:43:9b:98:b9:a7:bb:81:51:bd:ed: c0:cb:b9:18:57:98:d7:49:d9:99:f7:43:06:ed:95:5c:78:8e: e1:ec:21:e1:15:c8:c2:f8:60:e8:27:f1:f2:1f:d9:bd:5f:63: 11:e3:0b:91:e5:6f:a8:01:e6:73:3a:8c:d1:08:20:a0:64:cc: 2d:62:ea:d8:82:3f:4e:c1:f3:8e:a8:28:fc:f4:22:90:20:16: 59:d8:99:79:d0:a6:17:0f:3a:cd:07:81:9f:1b:e6:b7:4a:7a: 8b:7d:3e:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a71dOWKMREERAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk YjViZDk5YWEtNGU3Mi00NDM4LThlOGEtZjk1ODJiNTVmYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE1GBT0CBur+BSxFHiGhpcgtLouFKS61D7fa 45QDfqqqe4hafk6SNHJAVQwg5Sf45w16DULExAaeL20pNfD+xFkoyGzK18CaE5dg fVLndEaABwRzsH1ZJjJ3dhQZJfhi1xTKHvdRzHjDJU+n2/YlrJfm0vC+Z97Hcw4D ZZqLYympQzhV2jBvJxE20+gn8LXoDVy0966K/HoAJT5qRNGU7I6E9t5GgR6kvciR DSvK+5y30sytzvNzRMT3LnR4l9PxRFgSHwuG0M5cPscvFVdZSolK2Qj0g8pkETmb 4c46RBDvMioa52sxlmJm7B4pfxEQpa84s0VNQ6w9T5DJIf5KsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCgCPlTaXUyQEeatlSYh4HYi1txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBlOGEzOWEtMmUzMi0z NDAyLTg1ODktZGFkNDJkYWY3NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdYURiyv/otRc8LXzR12BY88NKQdUtxbuQK31EIOuwkaOnmZvI/ CqrDOcK4cx7C5ByCZkMx+kP+S80WGmjI2mJxhnZxFVVx5qP/GH0zREpmNfbJTz6P H49RQEBIGpiKDpgTaTol3Tl0V7pikFJLui5F7tHoiD7J2juD76T3z8YaLvb8Rcs8 w2cQH3HEAZ8numYBBBr0mV4uQ5uYuae7gVG97cDLuRhXmNdJ2Zn3QwbtlVx4juHs IeEVyML4YOgn8fIf2b1fYxHjC5Hlb6gB5nM6jNEIIKBkzC1i6tiCP07B846oKPz0 IpAgFlnYmXnQphcPOs0HgZ8b5rdKeot9Pso= -----END CERTIFICATE-----Generated at Thu Mar 26 14:00:52 2026 by rpki-client