$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa File: a21d70ab-a157-3b94-a224-f34d1ef3955a.roa (raw, json) Hash identifier: 7ppcOPwdbbljNMuPiwg3itUwSqoEdZgxsHzSVYvSqeU= Subject key identifier: B2:C6:7C:79:E8:5F:2F:0A:7F:55:A6:D3:73:93:77:A5:1B:73:97:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A408B6855C23B1944EDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397207 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:8b:68:55:c2:3b:19:44:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7e65d72a-f706-4b63-8064-20f102b7de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:99:91:6e:d8:9e:38:90:20:5b:61:46:b6: 22:cb:38:f9:a9:81:a0:3a:4b:ce:fe:07:66:bb:17: 48:ed:0c:ef:3e:45:80:94:4d:e8:b8:5c:51:2d:7a: 0c:8a:17:25:f9:84:ad:16:07:5d:12:78:d5:9a:c9: ba:48:34:a9:6c:47:16:37:d2:1d:00:10:6b:c7:0b: fd:0c:fe:1d:66:cb:cc:cb:47:7f:5c:f7:9a:4b:31: b4:5d:ba:91:cd:e9:bc:c4:70:24:e9:4b:02:ec:a9: 44:1f:3f:d8:c4:59:a9:72:d6:ec:96:1b:cb:42:8b: 85:c8:b6:17:44:61:ba:6d:0f:93:71:6b:35:7d:fd: 1a:22:79:23:8c:32:04:fd:fb:fc:b5:33:5c:5c:69: 50:1f:71:5c:ec:2a:e3:40:0b:7d:ae:1a:83:c9:93: 6a:dc:25:61:6c:d5:31:26:8c:21:42:7d:95:b4:07: fc:ba:bf:b1:00:82:43:30:a8:ad:90:96:6d:dd:3b: 21:61:5a:3c:d6:c3:36:49:d0:11:b3:75:cc:75:9f: b7:e0:ba:7f:34:69:92:8a:93:3d:09:c7:b5:98:91: 38:8b:da:7f:10:23:5e:92:33:6c:a7:fd:ab:8c:1b: 20:46:af:f6:8f:f5:a9:dc:cb:c5:6e:4b:7d:9d:c8: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C6:7C:79:E8:5F:2F:0A:7F:55:A6:D3:73:93:77:A5:1B:73:97:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a21d70ab-a157-3b94-a224-f34d1ef3955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4d:cb:74:01:d2:6b:0d:b1:96:c2:21:f8:cd:e6:69:31:e6: 98:04:56:8c:34:20:51:92:0b:42:5a:a4:b5:ae:d1:4a:54:12: 5e:2a:8e:e9:a6:bf:12:29:f7:f9:ac:3b:fb:32:3e:d9:20:c2: 67:0c:a0:66:90:af:65:ae:64:c7:00:b3:bd:e0:7d:66:e8:63: 4f:33:39:43:b9:2c:5d:2f:5b:20:a2:82:10:02:bf:73:58:88: 9f:0b:63:4c:fd:38:9c:10:62:a2:c5:ba:f1:b5:42:f6:54:72: 84:3b:22:00:10:d9:03:d1:54:22:4c:b7:bd:80:00:d0:4c:4e: e5:f9:c1:53:58:fd:f1:f9:dc:80:fd:e6:31:43:12:7a:59:82: 7e:87:1f:de:73:94:de:62:ea:4a:af:fa:35:65:0a:a0:fd:f0: ab:88:4f:d6:a2:01:14:e2:de:50:ad:67:b2:e1:48:8c:41:41: 1d:0a:f1:d8:e3:f3:13:65:53:08:8f:47:12:5a:ea:8d:3c:1b: 91:a9:f8:a7:38:ec:a0:69:fd:3d:86:7c:62:de:f3:af:3b:5f: bb:39:dd:4b:b2:62:9c:71:b2:3a:05:35:1f:d9:0f:a4:c5:11: ae:a9:5b:05:cb:39:43:bb:0e:75:6a:60:7f:2f:a9:c1:0c:08: 15:e3:2d:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekCLaFXCOxlE7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2U2NWQ3MmEtZjcwNi00YjYzLTgwNjQtMjBmMTAyYjdkZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru6ZkW7YnjiQIFthRrYiyzj5qYGgOkvO/gdm uxdI7QzvPkWAlE3ouFxRLXoMihcl+YStFgddEnjVmsm6SDSpbEcWN9IdABBrxwv9 DP4dZsvMy0d/XPeaSzG0XbqRzem8xHAk6UsC7KlEHz/YxFmpctbslhvLQouFyLYX RGG6bQ+TcWs1ff0aInkjjDIE/fv8tTNcXGlQH3Fc7CrjQAt9rhqDyZNq3CVhbNUx JowhQn2VtAf8ur+xAIJDMKitkJZt3TshYVo81sM2SdARs3XMdZ+34Lp/NGmSipM9 Cce1mJE4i9p/ECNekjNsp/2rjBsgRq/2j/Wp3MvFbkt9ncjC1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLGfHnoXy8Kf1Wm03OTd6Ubc5cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIxZDcwYWItYTE1Ny0z Yjk0LWEyMjQtZjM0ZDFlZjM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADBNy3QB0msNsZbCIfjN5mkx5pgEVow0IFGSC0JapLWu0UpUEl4q jummvxIp9/msO/syPtkgwmcMoGaQr2WuZMcAs73gfWboY08zOUO5LF0vWyCighAC v3NYiJ8LY0z9OJwQYqLFuvG1QvZUcoQ7IgAQ2QPRVCJMt72AANBMTuX5wVNY/fH5 3ID95jFDEnpZgn6HH95zlN5i6kqv+jVlCqD98KuIT9aiARTi3lCtZ7LhSIxBQR0K 8djj8xNlUwiPRxJa6o08G5Gp+Kc47KBp/T2GfGLe8687X7s53UuyYpxxsjoFNR/Z D6TFEa6pWwXLOUO7DnVqYH8vqcEMCBXjLeM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:07 2026 by rpki-client