$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa File: a5c62b97-bfea-3f1c-889a-6053db0efd70.roa (raw, json) Hash identifier: WJ9N3V4Cl1TgUai8kzlmhQ3xPpJJ0Vsx1n2s0Y3AHWU= Subject key identifier: 79:2B:48:22:F5:1D:CE:4F:C6:78:B9:98:D4:CD:B9:0B:DB:8C:7C:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A4EFD9F26B44BA57F0080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36622 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4e:fd:9f:26:b4:4b:a5:7f:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=cf5905f8-62b5-498d-a197-d0e57bbf4b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:68:f9:f9:53:02:3a:12:8e:ff:5f:ab:48: 8d:b3:a9:ae:4e:05:81:13:a9:8a:c3:74:1e:33:06: 08:6c:ab:bc:4a:9d:da:71:9c:68:58:8b:34:9b:1e: f9:8c:5e:63:0d:89:89:3e:93:64:84:c9:3c:f9:2f: 40:5b:1d:58:3a:68:c9:29:72:97:8a:32:98:cb:6e: 64:ae:df:a7:93:0b:07:36:fa:d2:cf:79:4b:a7:46: 91:5f:4a:c3:21:37:dc:73:63:18:9d:f5:db:82:87: 2a:c3:51:72:40:8e:db:26:14:c9:57:b5:00:91:ee: fa:d8:09:18:16:f4:90:1a:35:ea:93:b2:06:45:53: 62:6e:5d:81:f4:03:20:72:0e:20:85:83:49:03:17: e5:fb:b3:22:8b:bb:d6:9b:61:f6:2f:14:c7:f3:53: 72:7c:18:a8:5b:b6:a6:b4:c8:27:66:6a:23:ac:48: ad:ca:d0:9b:a0:03:27:be:f9:0c:1e:d8:0d:a4:df: b9:8a:51:ac:b9:34:0d:11:7a:27:f4:70:b1:e1:0d: 55:ba:c4:95:72:c9:b7:3e:52:b8:72:3e:8c:7d:43: 78:08:22:33:c4:15:73:09:50:4a:67:4a:d8:6a:f6: 46:10:eb:d3:43:ec:a8:64:1c:a9:5d:ed:2d:88:c7: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2B:48:22:F5:1D:CE:4F:C6:78:B9:98:D4:CD:B9:0B:DB:8C:7C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c62b97-bfea-3f1c-889a-6053db0efd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f4:6d:1c:a3:90:91:88:94:94:a7:d6:4a:0d:46:01:01:6e: 3a:39:ac:33:ee:0b:42:fb:35:62:0f:2d:8a:b4:4e:24:1d:20: 21:36:9c:8f:4f:c0:35:8b:c0:73:23:fa:ed:2e:77:4c:73:fe: 6c:77:cf:f4:22:6b:d4:ae:d4:be:ea:67:cc:06:30:58:31:bd: 34:39:7e:29:5d:83:18:52:94:9b:33:80:9c:9f:65:b4:f9:bf: a9:ed:ce:98:aa:e5:4b:4a:eb:f1:1d:87:29:2d:d5:6d:02:99: cb:e5:1e:bc:15:83:35:bd:78:e9:9c:b2:f6:c5:02:b1:e0:91: 36:02:6d:08:58:9e:2b:a6:ee:44:a3:63:93:3e:01:64:ab:7d: 79:a0:a8:ca:eb:b3:cf:d6:14:89:eb:1a:87:1f:c0:e8:18:3f: a7:7d:eb:50:e4:07:99:7e:ae:17:18:cd:11:28:a7:73:8e:ce: fb:4d:98:21:54:26:98:b0:97:55:c4:01:60:4e:cd:e8:3a:aa: ad:62:47:1a:36:f6:21:f1:ed:9f:db:f3:5f:86:fa:9b:45:f5: 42:36:e0:ce:bc:19:63:14:3f:89:51:57:a8:db:02:22:a9:13: a4:07:e9:ae:5b:49:90:71:4c:3f:5d:d4:c2:c8:52:90:01:d1: 87:cd:ca:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jek79nya0S6V/AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y1OTA1ZjgtNjJiNS00OThkLWExOTctZDBlNTdiYmY0Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIJo+flTAjoSjv9fq0iNs6muTgWBE6mKw3Qe MwYIbKu8Sp3acZxoWIs0mx75jF5jDYmJPpNkhMk8+S9AWx1YOmjJKXKXijKYy25k rt+nkwsHNvrSz3lLp0aRX0rDITfcc2MYnfXbgocqw1FyQI7bJhTJV7UAke762AkY FvSQGjXqk7IGRVNibl2B9AMgcg4ghYNJAxfl+7Mii7vWm2H2LxTH81NyfBioW7am tMgnZmojrEitytCboAMnvvkMHtgNpN+5ilGsuTQNEXon9HCx4Q1VusSVcsm3PlK4 cj6MfUN4CCIzxBVzCVBKZ0rYavZGEOvTQ+yoZBypXe0tiMfwNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkrSCL1Hc5Pxni5mNTNuQvbjHzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVjNjJiOTctYmZlYS0z ZjFjLTg4OWEtNjA1M2RiMGVmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFL0bRyjkJGIlJSn1koNRgEBbjo5rDPuC0L7NWIPLYq0TiQdICE2 nI9PwDWLwHMj+u0ud0xz/mx3z/Qia9Su1L7qZ8wGMFgxvTQ5fildgxhSlJszgJyf ZbT5v6ntzpiq5UtK6/Edhykt1W0CmcvlHrwVgzW9eOmcsvbFArHgkTYCbQhYnium 7kSjY5M+AWSrfXmgqMrrs8/WFInrGocfwOgYP6d961DkB5l+rhcYzREop3OOzvtN mCFUJpiwl1XEAWBOzeg6qq1iRxo29iHx7Z/b81+G+ptF9UI24M68GWMUP4lRV6jb AiKpE6QH6a5bSZBxTD9d1MLIUpAB0YfNyr0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:41 2026 by rpki-client