$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa File: 9ec387ab-2513-39d5-a179-3603f4d786d1.roa (raw, json) Hash identifier: jGq6XPvl0UYvT60T6za/9Bv/u7rgLnD7u0CFSJsYj1M= Subject key identifier: 3A:F6:67:45:A6:1A:8E:B6:ED:E2:70:40:4C:15:39:4B:99:1E:3B:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D386A65B377DC39ADAB779EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 2620:74:c8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:65:b3:77:dc:39:ad:ab:77:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=41f6fb37-610b-4b2b-92b9-9c76e635bc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:9a:90:f6:98:17:27:20:ac:bb:6c:19:4c: 04:fb:e2:f4:28:6d:d6:b8:67:26:11:7d:f4:b7:ed: 36:1c:b8:21:23:13:45:66:8a:89:24:99:d6:55:92: 47:e4:f0:f2:b9:61:59:b0:5d:3f:fd:b1:59:d5:4b: 48:9c:a6:88:7c:99:8b:a8:58:9f:fe:39:87:c5:15: cf:ad:7b:ec:de:54:da:07:7e:cc:a8:58:33:eb:75: 14:4c:46:07:f5:dd:71:da:34:3c:16:e4:10:3c:65: 59:d5:c8:ec:ae:fe:ce:a5:3e:8c:65:85:cc:7b:c5: 45:04:14:5f:79:bf:b0:48:c1:9d:25:ce:2f:14:dc: 8f:b1:c0:36:ff:11:e2:b1:5a:1a:98:73:68:e3:28: 49:7f:78:28:74:84:f0:0b:24:40:1a:72:b0:08:f0: c4:9b:51:4d:13:90:b3:7e:09:56:f8:0b:4a:c0:f9: 7f:77:5e:b5:a6:6c:b4:c2:bd:f7:ca:02:fa:ad:e6: f1:7b:24:74:6b:96:d7:ef:31:4b:aa:5b:a3:f3:9e: 91:35:45:8c:e6:ff:cb:cb:0e:d2:e2:40:17:69:d8: 8f:22:97:4e:e0:15:cd:21:fb:1b:65:8f:4d:f9:e1: 13:02:49:f0:26:d3:63:90:25:d6:27:09:8f:f4:83: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:67:45:A6:1A:8E:B6:ED:E2:70:40:4C:15:39:4B:99:1E:3B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ec387ab-2513-39d5-a179-3603f4d786d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c8::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0a:68:b9:1c:39:da:69:4a:5a:d3:7e:b2:ac:5f:6b:62:f7: 19:6c:81:28:be:7c:bb:6a:b9:16:37:f1:7f:f0:17:be:95:d5: 34:7a:e7:1a:f9:3d:28:7c:bc:41:cb:d2:d3:fe:1f:e8:f1:fc: 61:e5:48:bb:b5:fc:5f:82:96:f9:de:bc:c9:ef:f4:3c:18:4a: 1b:03:bd:d7:fe:4e:33:d0:a3:2a:d0:d0:00:a2:a5:ed:5d:47: e8:7f:4e:43:69:29:31:6a:c1:33:fb:09:77:13:bf:f1:a7:02: 14:82:a0:e0:05:5e:24:d6:98:73:d9:9e:14:af:7a:d3:c0:17: 86:91:50:29:35:20:07:3b:76:41:b3:9d:32:c0:7d:15:b1:ac: da:97:4e:a8:3d:db:d4:cb:df:9d:cb:82:6f:c9:27:b0:9f:aa: c5:3e:5f:68:70:ba:f6:e7:48:4c:5d:ff:b1:32:3e:f3:2f:69: d6:8f:1b:4f:a4:aa:f2:c2:3a:68:fb:ba:8d:2b:2d:c8:13:45: 0d:57:8e:34:a5:f7:b6:03:f0:e8:05:81:5c:69:fd:ed:32:35: a0:21:99:97:01:60:25:d5:13:f0:d2:fb:35:4f:6a:14:85:51: 3b:40:01:d8:20:2b:d7:86:00:7e:1f:b1:d9:5e:b3:02:2f:e3: 6d:02:c8:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04amWzd9w5rat3nqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDFmNmZiMzctNjEwYi00YjJiLTkyYjktOWM3NmU2MzViYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymakPaYFycgrLtsGUwE++L0KG3WuGcmEX30 t+02HLghIxNFZoqJJJnWVZJH5PDyuWFZsF0//bFZ1UtInKaIfJmLqFif/jmHxRXP rXvs3lTaB37MqFgz63UUTEYH9d1x2jQ8FuQQPGVZ1cjsrv7OpT6MZYXMe8VFBBRf eb+wSMGdJc4vFNyPscA2/xHisVoamHNo4yhJf3godITwCyRAGnKwCPDEm1FNE5Cz fglW+AtKwPl/d161pmy0wr33ygL6rebxeyR0a5bX7zFLqluj856RNUWM5v/Lyw7S 4kAXadiPIpdO4BXNIfsbZY9N+eETAknwJtNjkCXWJwmP9IOIqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDr2Z0WmGo627eJwQEwVOUuZHjtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWVjMzg3YWItMjUxMy0z OWQ1LWExNzktMzYwM2Y0ZDc4NmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAdADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQKaLkcOdppSlrTfrKsX2ti9xlsgSi+fLtquRY38X/wF76V1TR6 5xr5PSh8vEHL0tP+H+jx/GHlSLu1/F+ClvnevMnv9DwYShsDvdf+TjPQoyrQ0ACi pe1dR+h/TkNpKTFqwTP7CXcTv/GnAhSCoOAFXiTWmHPZnhSvetPAF4aRUCk1IAc7 dkGznTLAfRWxrNqXTqg929TL353Lgm/JJ7CfqsU+X2hwuvbnSExd/7EyPvMvadaP G0+kqvLCOmj7uo0rLcgTRQ1XjjSl97YD8OgFgVxp/e0yNaAhmZcBYCXVE/DS+zVP ahSFUTtAAdggK9eGAH4fsdleswIv420CyC0= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:20 2026 by rpki-client