$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa File: a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa (raw, json) Hash identifier: wg9QoVe3IcmTFBDBYqOOrz+lSforO9Ij6cOVX19I7EE= Subject key identifier: B5:4E:20:F3:B7:3F:07:C8:D7:D0:FA:C1:F9:AB:FC:ED:19:D7:86:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA547C6C472753EDBD7980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396581 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:54:7c:6c:47:27:53:ed:bd:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9b8b5573-cb34-434d-8a8d-6661deefe59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fc:f0:ee:e9:ef:2b:68:9d:05:56:7f:19:70: 25:6e:67:91:b6:78:1b:a0:9c:ac:2b:46:8c:64:bb: 2a:31:c1:35:65:f8:ff:1b:df:85:d9:2c:fe:07:f1: 44:22:1b:23:2e:5f:b6:af:d0:40:e4:c0:4f:b5:ea: f9:28:cc:fc:48:bd:bd:87:ad:6d:f0:d6:53:41:5b: 34:7a:7c:fe:d2:7c:ba:8c:11:78:eb:56:7e:14:aa: 04:c6:31:29:74:ab:22:91:7a:2e:21:d9:78:0b:3d: 07:f4:83:26:90:1f:47:1a:79:dd:e7:1c:95:8d:45: 65:7f:c3:08:6f:4e:d6:4d:04:bf:3a:71:7c:69:eb: 6e:7a:1f:d5:9a:25:be:46:25:dd:0b:e2:b4:bd:8e: ed:75:93:ab:16:81:e4:a8:8f:8e:72:7a:83:a0:4e: 12:8b:fa:4a:be:27:f2:08:a5:d6:a8:f5:5b:a2:28: de:4b:5b:26:e3:42:c7:76:9c:0d:a8:1c:3c:c4:57: 57:cb:9f:0a:d9:0e:c2:dd:79:21:c5:3e:30:e6:73: 5a:d0:0c:6a:45:a7:2c:d1:91:c1:51:40:a9:42:29: f3:48:96:d5:09:4e:33:72:41:cf:dd:c6:14:b8:2b: 00:5f:94:80:59:fc:75:9c:dd:f0:16:75:62:0d:c1: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4E:20:F3:B7:3F:07:C8:D7:D0:FA:C1:F9:AB:FC:ED:19:D7:86:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2a0c956-30f8-3bf2-82e3-b0cb4d6f6086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:34:b8:3f:67:0e:97:1d:81:63:ac:81:08:c1:96:a2:6c:3c: a5:14:3b:2a:ab:90:44:16:ea:65:cc:2f:af:5c:66:9b:0c:b3: 2f:87:a1:ad:f8:0e:65:fd:78:66:27:66:cb:1b:f8:f5:07:39: ea:42:3e:7b:06:72:84:4e:30:32:22:4a:ec:fc:e2:0e:4e:46: fe:23:ca:29:4a:20:54:ff:29:63:59:50:05:30:6f:22:f0:16: 29:eb:c4:ab:21:c8:58:7f:38:c7:97:3e:66:d6:81:8f:5d:ac: 62:1a:56:e0:c2:dd:41:6d:73:73:db:84:fe:7c:d7:a3:34:a6: f4:9d:9d:db:bd:01:a1:97:c4:a8:cf:25:41:21:8e:06:df:d0: 68:92:8c:0b:cd:a4:3a:0e:a2:11:f2:f4:63:23:c4:ca:4c:06: 21:45:b2:78:ba:fe:3e:0f:75:37:63:c9:e9:bc:e9:68:8c:ed: 63:1f:4d:6d:0e:cc:28:52:d6:35:ee:b6:dd:0e:2a:cc:e6:e7: 0c:a2:3c:31:99:26:78:e6:45:fb:d5:5f:27:10:06:29:a0:1b: 22:8d:c7:c5:a7:5c:7a:3b:b5:16:e6:79:67:c1:c0:df:53:0b: c3:b3:e4:ed:b3:99:64:ce:31:df:24:38:13:e5:b7:84:d4:88: 6c:ad:b0:a3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lR8bEcnU+29eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWI4YjU1NzMtY2IzNC00MzRkLThhOGQtNjY2MWRlZWZlNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/zw7unvK2idBVZ/GXAlbmeRtngboJysK0aM ZLsqMcE1Zfj/G9+F2Sz+B/FEIhsjLl+2r9BA5MBPter5KMz8SL29h61t8NZTQVs0 enz+0ny6jBF461Z+FKoExjEpdKsikXouIdl4Cz0H9IMmkB9HGnnd5xyVjUVlf8MI b07WTQS/OnF8aetueh/VmiW+RiXdC+K0vY7tdZOrFoHkqI+OcnqDoE4Si/pKvify CKXWqPVboijeS1sm40LHdpwNqBw8xFdXy58K2Q7C3XkhxT4w5nNa0AxqRacs0ZHB UUCpQinzSJbVCU4zckHP3cYUuCsAX5SAWfx1nN3wFnViDcHiqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLVOIPO3PwfI19D6wfmr/O0Z14akMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJhMGM5NTYtMzBmOC0z YmYyLTgyZTMtYjBjYjRkNmY2MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9NLg/Zw6XHYFjrIEIwZaibDylFDsqq5BEFupl zC+vXGabDLMvh6Gt+A5l/XhmJ2bLG/j1BznqQj57BnKETjAyIkrs/OIOTkb+I8op SiBU/yljWVAFMG8i8BYp68SrIchYfzjHlz5m1oGPXaxiGlbgwt1BbXNz24T+fNej NKb0nZ3bvQGhl8SozyVBIY4G39BokowLzaQ6DqIR8vRjI8TKTAYhRbJ4uv4+D3U3 Y8npvOlojO1jH01tDswoUtY17rbdDirM5ucMojwxmSZ45kX71V8nEAYpoBsijcfF p1x6O7UW5nlnwcDfUwvDs+Tts5lkzjHfJDgT5beE1IhsrbCj -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:51 2026 by rpki-client