$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9df078a9-6a9f-3780-87f3-58f715e79243.roa File: 9df078a9-6a9f-3780-87f3-58f715e79243.roa (raw, json) Hash identifier: aV2clYPjv5q4K/Vv7EvGT+cWce462LZ2L+VNDJg9D0M= Subject key identifier: DF:28:5C:95:C4:32:3B:3B:3E:C5:63:C9:82:DC:4A:5D:EF:AF:50:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A3F8C11255B66A172A500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9df078a9-6a9f-3780-87f3-58f715e79243.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 27544 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3f:8c:11:25:5b:66:a1:72:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4f6feb84-8d04-49e9-ac5d-79c3d53780bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:4b:13:9c:ef:c2:13:38:d1:89:e9:2f:fd: f3:2d:44:af:c1:05:bb:1a:d9:95:e3:2e:42:4b:e1: ca:01:d3:e3:20:a3:49:18:04:59:af:45:3f:b4:46: 8e:ba:5b:bc:2a:af:9c:b3:8e:c4:39:ce:57:10:58: 4a:f5:cc:fd:bb:75:26:9f:49:31:62:c0:51:13:a8: 53:5a:7e:54:a6:11:e2:f8:f5:f1:e7:73:e0:c4:ac: c4:cd:ab:30:dc:7e:b6:b3:6b:e3:ad:8c:e1:49:a2: 17:44:1b:3a:40:97:d6:ed:2c:57:5e:cc:d9:0d:61: 40:a1:d4:0c:20:e0:1f:b9:bc:2b:a0:e1:3a:9e:1b: 1e:ab:91:f6:e8:9a:ac:79:ef:89:12:45:1d:26:d7: 9e:48:bd:1a:ac:69:09:7b:5b:ce:83:4a:6c:8d:b0: 33:3a:61:df:43:6f:2f:fe:c5:f7:05:45:bd:67:94: 06:be:51:d8:e8:ae:0e:e6:79:9f:09:b9:2e:d4:36: 93:ac:91:cf:6b:d3:29:85:f5:c3:f6:b9:68:93:b9: d9:ad:60:e9:d6:29:29:55:ad:aa:24:fd:af:87:09: e2:4d:7e:18:28:f0:4c:da:1a:46:29:c5:60:56:16: ec:0d:47:7a:8b:2a:30:47:63:24:0e:ee:a3:a2:99: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:5C:95:C4:32:3B:3B:3E:C5:63:C9:82:DC:4A:5D:EF:AF:50:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9df078a9-6a9f-3780-87f3-58f715e79243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fc:62:ba:d0:d5:4c:ba:df:5f:66:84:c3:5c:a0:ed:5b:15: 06:b7:d1:87:ef:0e:e7:be:ed:0b:f0:0a:98:04:a0:06:62:1f: 00:fb:15:7e:c6:fc:68:94:02:77:49:1e:b8:c6:d1:ed:86:c2: 31:f1:af:cc:56:2b:6b:90:5e:5f:75:01:da:f5:80:f5:0b:4c: a9:4d:db:82:e0:b8:76:e8:cb:73:89:15:29:e2:a7:89:84:4b: d9:f6:34:96:f1:a8:88:88:bd:11:ed:12:01:88:9d:67:02:3b: 01:8a:52:9b:80:f3:7e:48:2d:74:e4:01:aa:1c:7b:24:d4:6f: 6c:fa:78:7f:b5:fd:b9:b2:18:4b:78:d3:bc:8c:61:d3:25:4f: 7e:65:3b:e6:b1:3c:5b:7a:69:9b:4e:39:61:73:c7:12:5b:45: 51:8d:2a:04:14:c1:3e:54:a8:6d:c3:16:00:65:d0:e7:d3:52: a8:47:d3:d7:82:96:95:a4:f1:23:6a:f3:75:bc:91:8a:2f:7f: aa:bf:b1:f1:f7:49:4b:fd:7f:b3:39:66:83:9a:c0:91:4f:1b: fa:3f:53:91:7e:28:30:2f:44:7b:95:1d:12:4c:a2:60:0b:2b: ec:22:ba:8a:9f:d9:3f:4b:a8:b4:90:00:be:ac:02:2f:bf:ca: 8e:87:ee:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jej+MESVbZqFypQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGY2ZmViODQtOGQwNC00OWU5LWFjNWQtNzljM2Q1Mzc4MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglpLE5zvwhM40YnpL/3zLUSvwQW7GtmV4y5C S+HKAdPjIKNJGARZr0U/tEaOulu8Kq+cs47EOc5XEFhK9cz9u3Umn0kxYsBRE6hT Wn5UphHi+PXx53PgxKzEzasw3H62s2vjrYzhSaIXRBs6QJfW7SxXXszZDWFAodQM IOAfubwroOE6nhseq5H26Jqsee+JEkUdJteeSL0arGkJe1vOg0psjbAzOmHfQ28v /sX3BUW9Z5QGvlHY6K4O5nmfCbku1DaTrJHPa9MphfXD9rlok7nZrWDp1ikpVa2q JP2vhwniTX4YKPBM2hpGKcVgVhbsDUd6iyowR2MkDu6jopmpvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN8oXJXEMjs7PsVjyYLcSl3vr1DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWRmMDc4YTktNmE5Zi0z NzgwLTg3ZjMtNThmNzE1ZTc5MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGr8YrrQ1Uy6319mhMNcoO1bFQa30YfvDue+7QvwCpgEoAZiHwD7 FX7G/GiUAndJHrjG0e2GwjHxr8xWK2uQXl91Adr1gPULTKlN24LguHboy3OJFSni p4mES9n2NJbxqIiIvRHtEgGInWcCOwGKUpuA835ILXTkAaoceyTUb2z6eH+1/bmy GEt407yMYdMlT35lO+axPFt6aZtOOWFzxxJbRVGNKgQUwT5UqG3DFgBl0OfTUqhH 09eClpWk8SNq83W8kYovf6q/sfH3SUv9f7M5ZoOawJFPG/o/U5F+KDAvRHuVHRJM omALK+wiuoqf2T9LqLSQAL6sAi+/yo6H7rY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:41 2026 by rpki-client