$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa File: 9a60c7f2-bd29-3f81-b246-434634385d0d.roa (raw, json) Hash identifier: wqX95E6xTg040tPMWYR3BILXdvsf41oBEvFSQzAp3NA= Subject key identifier: 28:37:54:78:E4:54:36:C9:0B:B7:CA:28:E2:AB:27:EC:D6:32:A2:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A08873100B2BB7C3FDEE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36620 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:08:87:31:00:b2:bb:7c:3f:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=239dc61b-bce8-4a5b-afb7-9cd0be838fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:c7:96:1c:5b:cd:a3:a6:58:4e:6f:dc:e2: fa:5a:c9:09:13:6c:eb:bd:bc:d8:c7:50:ec:e4:e1: 0f:f5:ac:83:75:1d:90:1b:09:a8:3d:94:aa:54:59: 67:73:e0:f2:cb:b3:1d:4d:fc:92:46:a7:78:f3:e5: d5:73:7b:8c:fa:0c:97:1f:89:cf:43:02:31:cf:91: f0:93:fb:5e:7f:79:3e:5d:80:2c:18:55:ef:8b:99: fc:70:8e:3d:f3:46:97:10:94:ef:39:56:05:df:b8: 4a:5a:70:48:5f:ff:36:b7:cc:7a:79:7d:ff:5b:fb: 2a:df:af:6a:1c:f8:30:22:79:8c:2f:3d:c5:b1:16: ad:9d:4c:3a:81:ed:8e:de:a2:0b:a2:be:b2:e5:9c: 8f:ed:25:a8:6d:c9:d2:7f:50:39:1b:31:08:eb:45: 31:15:7e:e6:d4:cb:32:9f:5e:a4:f4:08:1c:3b:86: 29:b7:21:19:40:7a:60:c3:50:a5:6f:73:98:eb:09: 36:d1:df:38:60:3f:b0:ba:47:63:0d:f6:1e:db:a0: 55:26:1c:5b:22:eb:84:4a:c3:ae:7b:42:cf:9a:b8: 93:19:6f:76:61:99:76:5f:6c:67:a5:84:3b:db:4e: 4b:56:d0:f9:d2:bd:66:fa:5b:26:cd:36:00:c4:63: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:54:78:E4:54:36:C9:0B:B7:CA:28:E2:AB:27:EC:D6:32:A2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a60c7f2-bd29-3f81-b246-434634385d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:38:d6:dc:bf:8c:71:e7:81:1b:8e:fc:78:46:ee:12:15:1d: be:a5:c2:1c:30:9a:b5:05:a9:fb:5a:98:1b:1d:29:dc:fa:f4: f4:98:dc:5e:a4:61:79:31:2f:7a:16:19:99:6e:2e:84:04:01: f5:1d:7b:92:55:f6:8b:7a:78:e6:2f:5b:73:7c:b4:bc:05:2d: 65:4d:c1:3d:1d:74:ce:f2:29:fd:3e:8c:cb:73:77:78:18:30: 21:8b:92:62:4d:86:c2:99:0a:24:38:d4:12:24:03:57:af:34: 80:43:95:cc:21:96:fc:d7:29:15:91:e4:fa:ad:29:a0:a4:fe: 74:13:17:a4:c0:17:47:03:24:15:50:66:dc:b2:d4:d2:e7:c9: 91:d5:ba:1e:89:db:89:0e:e1:28:76:9e:46:87:7d:82:70:d7: d7:82:fa:4a:e0:7f:49:31:62:20:82:f2:68:a6:65:c3:13:3d: f1:9f:c2:a8:c2:eb:ab:ba:f1:0b:b3:62:ea:fd:e0:0c:23:f2: 8a:dc:a0:78:0f:f3:91:46:3c:57:46:ae:3d:0e:12:c4:c8:d9: a1:d5:a6:01:e2:7a:74:31:38:b8:80:ad:dc:79:4e:dc:7b:22: 43:b3:24:16:fd:66:fa:15:bd:84:7a:c9:09:ea:59:08:29:92: 74:b3:6f:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jegiHMQCyu3w/3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjM5ZGM2MWItYmNlOC00YTViLWFmYjctOWNkMGJlODM4ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIrHlhxbzaOmWE5v3OL6WskJE2zrvbzYx1Ds 5OEP9ayDdR2QGwmoPZSqVFlnc+Dyy7MdTfySRqd48+XVc3uM+gyXH4nPQwIxz5Hw k/tef3k+XYAsGFXvi5n8cI4980aXEJTvOVYF37hKWnBIX/82t8x6eX3/W/sq369q HPgwInmMLz3FsRatnUw6ge2O3qILor6y5ZyP7SWobcnSf1A5GzEI60UxFX7m1Msy n16k9AgcO4YptyEZQHpgw1Clb3OY6wk20d84YD+wukdjDfYe26BVJhxbIuuESsOu e0LPmriTGW92YZl2X2xnpYQ7205LVtD50r1m+lsmzTYAxGMWtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCg3VHjkVDbJC7fKKOKrJ+zWMqKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE2MGM3ZjItYmQyOS0z ZjgxLWIyNDYtNDM0NjM0Mzg1ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGE41ty/jHHngRuO/HhG7hIVHb6lwhwwmrUFqftamBsdKdz69PSY 3F6kYXkxL3oWGZluLoQEAfUde5JV9ot6eOYvW3N8tLwFLWVNwT0ddM7yKf0+jMtz d3gYMCGLkmJNhsKZCiQ41BIkA1evNIBDlcwhlvzXKRWR5PqtKaCk/nQTF6TAF0cD JBVQZtyy1NLnyZHVuh6J24kO4Sh2nkaHfYJw19eC+krgf0kxYiCC8mimZcMTPfGf wqjC66u68QuzYur94Awj8orcoHgP85FGPFdGrj0OEsTI2aHVpgHienQxOLiArdx5 Ttx7IkOzJBb9ZvoVvYR6yQnqWQgpknSzb2s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:23 2026 by rpki-client