$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95422eec-18b9-3c98-930d-b02068707efa.roa File: 95422eec-18b9-3c98-930d-b02068707efa.roa (raw, json) Hash identifier: TW5PraceDCcr/BZKKBv2P1VmNOdWNbzAHW7la+nr45A= Subject key identifier: 7E:8A:1D:9A:A6:77:BB:DA:43:21:1C:9A:B2:A8:0B:07:50:84:42:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA583823B3E824075A6280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95422eec-18b9-3c98-930d-b02068707efa.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397207 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:38:23:b3:e8:24:07:5a:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ce0a20e2-27c4-4171-afe9-1469f561b4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:45:d4:aa:c9:a1:08:e1:8d:db:19:39:14:81: 13:84:a5:f9:39:b7:47:eb:bb:ff:8b:22:48:f3:59: ac:84:dc:1d:77:9f:dc:cb:6b:be:ad:99:ad:fd:e9: f6:19:94:f1:04:f0:22:48:45:aa:aa:79:2e:55:75: 37:72:06:bb:27:b2:4e:c7:5a:25:69:2c:15:2b:de: 8b:8d:10:32:e5:12:80:0a:7a:57:ed:22:4d:90:49: 4a:a2:e7:6f:52:cb:2f:35:94:ad:2f:15:ff:61:16: 83:07:52:c2:7a:81:e2:8d:c0:3f:76:14:b3:54:a2: 0b:49:68:bc:8d:25:1a:c3:4b:27:83:de:7b:88:08: 2a:18:5b:d0:bb:3f:0f:97:f1:06:ce:1d:9a:bc:f2: c9:82:05:af:32:5c:7b:97:6a:7e:aa:be:2f:bf:75: b3:42:69:d2:29:19:9f:b3:f0:7e:1c:0c:19:93:4c: 87:b4:1b:e3:d3:93:72:ce:e8:b6:62:4b:88:1b:d3: 10:81:79:4e:5e:e7:02:43:02:ad:5a:44:23:d4:f8: 3b:57:ad:32:0a:53:44:74:6b:6d:e8:b2:75:16:88: b5:20:b6:68:e6:01:15:96:86:af:55:f0:38:7a:cc: 35:e3:b1:6d:2a:7a:79:f0:27:4e:30:d1:eb:a3:75: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8A:1D:9A:A6:77:BB:DA:43:21:1C:9A:B2:A8:0B:07:50:84:42:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95422eec-18b9-3c98-930d-b02068707efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:28:07:27:06:f0:bc:cd:97:6f:a9:26:10:9e:bb:fa:d5:c3: 2b:2e:91:f3:66:af:e2:2f:4c:52:58:dd:2d:ca:10:c4:3a:5a: a9:a2:c8:0a:73:a2:52:5f:fe:ec:07:be:62:4d:69:6b:16:fa: ee:1a:4f:30:6e:ef:2b:9b:21:84:bc:26:d2:5b:91:cf:fd:6d: 0d:4e:2f:c9:5c:1a:dc:27:d5:31:1f:ab:df:79:37:a0:3a:7e: 77:e4:a5:13:c7:3c:dc:87:cf:b0:8f:5e:27:04:3a:36:eb:21: 2e:c9:d0:5f:e9:c3:dd:47:ad:54:95:27:0a:a4:72:b0:53:32: cd:1b:b1:75:48:4b:10:d5:60:9c:95:58:1b:d2:5e:d7:d9:7d: 3b:c9:ac:62:cd:e4:b0:f9:85:9c:fd:0d:43:20:0e:b0:07:28: 6c:aa:27:68:53:fb:e2:e3:cd:76:17:84:aa:89:42:c2:4f:9b: f5:d1:33:86:f2:96:6f:b0:a3:c3:5d:33:c9:04:b3:45:50:81: 8d:fd:18:7c:b8:67:86:fb:d8:79:c8:42:ef:b7:ba:21:ba:98: c4:9f:28:09:ce:4a:22:08:66:68:17:d7:2a:c4:36:75:7e:24: 9f:18:52:7c:a0:1e:07:f0:97:75:19:f4:61:45:53:b2:8c:1a: 86:c1:f6:fb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lg4I7PoJAdaYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2UwYTIwZTItMjdjNC00MTcxLWFmZTktMTQ2OWY1NjFiNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkXUqsmhCOGN2xk5FIEThKX5ObdH67v/iyJI 81mshNwdd5/cy2u+rZmt/en2GZTxBPAiSEWqqnkuVXU3cga7J7JOx1olaSwVK96L jRAy5RKACnpX7SJNkElKoudvUssvNZStLxX/YRaDB1LCeoHijcA/dhSzVKILSWi8 jSUaw0sng957iAgqGFvQuz8Pl/EGzh2avPLJggWvMlx7l2p+qr4vv3WzQmnSKRmf s/B+HAwZk0yHtBvj05Nyzui2YkuIG9MQgXlOXucCQwKtWkQj1Pg7V60yClNEdGtt 6LJ1Foi1ILZo5gEVloavVfA4esw147FtKnp58CdOMNHro3UijQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH6KHZqmd7vaQyEcmrKoCwdQhEL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU0MjJlZWMtMThiOS0z Yzk4LTkzMGQtYjAyMDY4NzA3ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQKAcnBvC8zZdvqSYQnrv61cMrLpHzZq/iL0xS WN0tyhDEOlqposgKc6JSX/7sB75iTWlrFvruGk8wbu8rmyGEvCbSW5HP/W0NTi/J XBrcJ9UxH6vfeTegOn535KUTxzzch8+wj14nBDo26yEuydBf6cPdR61UlScKpHKw UzLNG7F1SEsQ1WCclVgb0l7X2X07yaxizeSw+YWc/Q1DIA6wByhsqidoU/vi4812 F4SqiULCT5v10TOG8pZvsKPDXTPJBLNFUIGN/Rh8uGeG+9h5yELvt7ohupjEnygJ zkoiCGZoF9cqxDZ1fiSfGFJ8oB4H8Jd1GfRhRVOyjBqGwfb7 -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:07 2026 by rpki-client