$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa File: 9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa (raw, json) Hash identifier: Son+HOHgXda+ApyAKLiMXW6x/DCHlrJyNVSdm5LL0bg= Subject key identifier: CB:B4:CB:B9:FE:59:8B:CC:D4:BD:1C:64:0C:2B:6A:0E:A1:E0:75:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A4E43B451FB9A98AF9E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397196 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4e:43:b4:51:fb:9a:98:af:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1feb4454-6873-464f-82a4-4b6f126bf469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:dd:03:3e:8e:d3:2d:86:cc:7f:32:45:40: bb:45:5e:47:db:f9:a6:13:be:94:91:e5:74:c6:21: 8e:94:78:9f:2e:9f:07:09:bb:33:44:e0:fb:ac:49: cf:9e:a1:b9:87:d3:dc:67:80:33:ea:6c:7b:ac:15: f3:bd:47:5a:db:13:f0:66:37:9c:7e:ca:f3:54:58: 9d:08:06:7d:4d:a4:fa:0f:6a:b3:f7:d3:7f:38:2d: bd:b3:2c:15:69:b1:5f:74:8d:a9:a7:65:4b:f4:1a: 48:e6:05:28:24:0a:6f:ee:c1:e0:b2:12:ec:9d:05: 32:f9:90:54:61:12:86:48:63:c1:eb:ee:c7:50:17: 7f:c8:8e:83:34:6b:0a:7c:55:a7:54:25:26:61:80: 60:91:3f:80:f0:a0:74:74:85:54:a7:ce:21:d7:0b: 11:a2:38:de:40:b8:f5:57:71:9b:c3:64:18:07:d7: 96:d8:68:60:18:0f:38:7d:0a:ba:63:46:80:81:7e: 8b:58:27:64:23:2d:e7:43:85:e3:40:f4:0d:5d:79: a8:de:19:31:bb:62:bc:0b:20:a1:02:89:6b:c3:40: f9:bc:17:82:24:c4:38:29:b4:55:c5:ee:54:77:8d: d2:06:89:fc:df:fe:86:c0:88:20:3a:d1:da:2d:8a: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B4:CB:B9:FE:59:8B:CC:D4:BD:1C:64:0C:2B:6A:0E:A1:E0:75:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fef6bb0-d84d-3a93-9808-5bdfc1e2bf10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bb:b7:31:95:b7:8e:ef:3d:19:8a:65:83:2a:88:b5:8e:45: d5:79:b6:e5:58:58:e5:0e:b3:ab:18:85:ad:ae:d8:20:0e:b6: b1:48:bc:76:89:cf:0a:4c:be:0d:10:16:08:c7:80:97:25:38: da:66:6d:21:1b:40:65:7f:58:8e:ee:a3:1d:ff:19:49:40:65: a5:c9:80:22:4e:b1:dd:89:c9:06:8d:53:2e:56:d6:cf:74:74: 7a:93:5e:d8:f1:48:ba:29:9d:3e:ed:e8:ed:7b:5b:1f:2b:03: 06:cb:31:20:f7:5f:0e:10:d6:ca:8c:ae:1d:07:fe:a2:6a:95: 01:00:10:50:17:1b:a1:fa:ee:83:cd:0b:86:3d:52:b4:75:16: 1a:c8:38:37:eb:08:9d:64:7c:3e:38:a5:6d:71:9a:87:04:52: 5e:13:7b:95:82:45:4f:95:96:60:5f:10:bd:f0:ab:a6:40:54: 99:fc:27:10:9f:f7:05:3f:99:a2:7e:4f:7b:0b:de:23:a1:bf: 22:41:7f:51:e5:cf:40:f5:1e:e1:c8:32:07:37:ef:ba:17:cb: 98:5f:2e:21:5f:64:f2:58:99:f0:78:34:70:72:0d:5d:89:36: 13:74:45:ee:f8:f0:02:fb:16:25:b0:af:ad:e5:88:86:21:42: 80:c0:b1:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jek5DtFH7mpivnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWZlYjQ0NTQtNjg3My00NjRmLTgyYTQtNGI2ZjEyNmJmNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS/dAz6O0y2GzH8yRUC7RV5H2/mmE76UkeV0 xiGOlHifLp8HCbszROD7rEnPnqG5h9PcZ4Az6mx7rBXzvUda2xPwZjecfsrzVFid CAZ9TaT6D2qz99N/OC29sywVabFfdI2pp2VL9BpI5gUoJApv7sHgshLsnQUy+ZBU YRKGSGPB6+7HUBd/yI6DNGsKfFWnVCUmYYBgkT+A8KB0dIVUp84h1wsRojjeQLj1 V3Gbw2QYB9eW2GhgGA84fQq6Y0aAgX6LWCdkIy3nQ4XjQPQNXXmo3hkxu2K8CyCh Aolrw0D5vBeCJMQ4KbRVxe5Ud43SBon83/6GwIggOtHaLYqmGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMu0y7n+WYvM1L0cZAwrag6h4HXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZlZjZiYjAtZDg0ZC0z YTkzLTk4MDgtNWJkZmMxZTJiZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADa7tzGVt47vPRmKZYMqiLWORdV5tuVYWOUOs6sYha2u2CAOtrFI vHaJzwpMvg0QFgjHgJclONpmbSEbQGV/WI7uox3/GUlAZaXJgCJOsd2JyQaNUy5W 1s90dHqTXtjxSLopnT7t6O17Wx8rAwbLMSD3Xw4Q1sqMrh0H/qJqlQEAEFAXG6H6 7oPNC4Y9UrR1FhrIODfrCJ1kfD44pW1xmocEUl4Te5WCRU+VlmBfEL3wq6ZAVJn8 JxCf9wU/maJ+T3sL3iOhvyJBf1Hlz0D1HuHIMgc377oXy5hfLiFfZPJYmfB4NHBy DV2JNhN0Re748AL7FiWwr63liIYhQoDAsZI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:34 2026 by rpki-client