$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa File: 95df0e6e-cf13-3296-986c-c34958860346.roa (raw, json) Hash identifier: CVu7R8NGTw4vFgOUARDCEcv2oa5uKdEc/bsDrqVF2Z0= Subject key identifier: DB:58:25:21:4C:82:7D:89:80:C0:2B:0D:DE:73:00:BB:EC:69:97:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A22BA0EA361EC06E895A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396583 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:22:ba:0e:a3:61:ec:06:e8:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e9b70c1a-dfda-476b-b603-34b5ecf29a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:67:b2:08:7a:49:2d:61:20:5c:f8:ca:c9: bd:a0:f1:61:ba:64:3f:63:f2:57:88:be:66:6c:88: 18:f9:f0:20:0e:ad:56:27:a4:77:e6:63:e4:df:c9: 96:7a:79:b4:7b:4c:6e:f9:71:b9:f9:51:ad:43:82: 7f:b9:e9:f5:47:db:b3:f1:48:88:8d:e7:35:89:9e: c3:75:fc:60:d4:c4:b2:38:26:82:14:be:27:ba:6c: c1:5b:0e:a6:7e:a2:ce:ae:b6:25:33:6e:0d:69:ad: fe:77:f4:a5:fb:61:6b:fd:88:a9:98:5b:c0:88:8d: 41:ee:c7:82:f5:fe:90:2a:96:aa:89:b3:99:bc:1b: ec:cd:4f:cf:4b:5e:b3:ab:5b:0f:64:0f:91:04:d7: 28:97:a2:dd:6c:7e:02:05:d7:80:45:84:0c:93:99: 0e:36:5f:5a:2b:94:42:62:6d:52:29:20:6b:f5:75: 8a:ba:21:22:6f:89:1b:88:71:e6:63:b3:2d:09:47: 35:48:dc:b4:3f:a2:b4:e8:5f:cd:14:c8:ac:86:2b: 51:21:dd:86:3d:d6:2c:19:1f:00:38:18:bb:bf:2e: 78:a2:56:a7:52:10:a8:a4:23:d6:49:10:37:16:38: 05:62:57:39:0b:f9:b4:fa:fc:a4:38:0a:0c:8f:08: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:58:25:21:4C:82:7D:89:80:C0:2B:0D:DE:73:00:BB:EC:69:97:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95df0e6e-cf13-3296-986c-c34958860346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:45:5b:9c:07:35:71:7e:83:37:b2:88:f4:e7:0f:4e:42:05: 3b:7e:6a:35:29:74:8d:e1:78:87:10:ed:d3:82:19:9a:1a:1c: 35:c5:e2:ff:da:34:15:1a:cd:fa:84:b3:94:bf:39:96:d9:8e: f1:5a:95:a3:c2:86:e7:a3:f8:1f:10:46:5f:9c:08:11:15:c3: 06:c6:36:23:82:9c:75:c3:c7:77:25:20:40:7a:f6:a1:2b:89: d7:1e:07:73:95:e8:dd:ec:59:50:36:d9:10:68:e3:37:63:66: 4a:2e:e6:36:be:f6:bc:fb:02:c9:1d:ad:58:0c:20:93:00:9f: ff:e0:9d:ab:bd:ae:ca:36:1d:04:a1:56:eb:d9:24:ff:10:78: d0:08:b4:af:f5:af:82:15:94:de:57:16:cc:d9:a8:24:e3:d4: 1d:8c:fa:04:a6:4d:97:ca:52:ab:90:6b:f8:94:ea:5f:3f:79: 5a:7d:bc:97:19:69:48:82:1d:a2:19:42:47:75:01:ca:7b:a4: 37:8f:bf:3d:f8:c6:86:6a:25:43:11:a4:d3:d7:6d:65:02:72: 18:98:98:d1:60:3f:09:18:34:06:cd:50:96:88:e8:94:d3:68: 96:a9:97:f4:d4:01:cc:b9:24:83:a1:34:cd:e1:6a:5e:72:9c: 2d:e6:10:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiK6DqNh7AbolaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTliNzBjMWEtZGZkYS00NzZiLWI2MDMtMzRiNWVjZjI5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmFnsgh6SS1hIFz4ysm9oPFhumQ/Y/JXiL5m bIgY+fAgDq1WJ6R35mPk38mWenm0e0xu+XG5+VGtQ4J/uen1R9uz8UiIjec1iZ7D dfxg1MSyOCaCFL4numzBWw6mfqLOrrYlM24Naa3+d/Sl+2Fr/YipmFvAiI1B7seC 9f6QKpaqibOZvBvszU/PS16zq1sPZA+RBNcol6LdbH4CBdeARYQMk5kONl9aK5RC Ym1SKSBr9XWKuiEib4kbiHHmY7MtCUc1SNy0P6K06F/NFMishitRId2GPdYsGR8A OBi7vy54olanUhCopCPWSRA3FjgFYlc5C/m0+vykOAoMjwht0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtYJSFMgn2JgMArDd5zALvsaZdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkZjBlNmUtY2YxMy0z Mjk2LTk4NmMtYzM0OTU4ODYwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlFW5wHNXF+gzeyiPTnD05CBTt+ajUpdI3heIcQ7dOCGZoaHDXF 4v/aNBUazfqEs5S/OZbZjvFalaPChuej+B8QRl+cCBEVwwbGNiOCnHXDx3clIEB6 9qEridceB3OV6N3sWVA22RBo4zdjZkou5ja+9rz7AskdrVgMIJMAn//gnau9rso2 HQShVuvZJP8QeNAItK/1r4IVlN5XFszZqCTj1B2M+gSmTZfKUquQa/iU6l8/eVp9 vJcZaUiCHaIZQkd1Acp7pDePvz34xoZqJUMRpNPXbWUCchiYmNFgPwkYNAbNUJaI 6JTTaJapl/TUAcy5JIOhNM3hal5ynC3mEMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:03 2026 by rpki-client