$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa File: a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa (raw, json) Hash identifier: 6YNRPP3/YrP33CczmQ9g11Ny2oaM3dvm6i16hqs6uL8= Subject key identifier: 68:57:E6:4C:2D:DD:1A:3C:DB:F5:A8:B6:D9:C5:4B:9B:95:C7:71:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA515CD83820CB1271A780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19836 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:51:5c:d8:38:20:cb:12:71:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2b471911-5c02-4f95-887d-34326d3d9bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:1c:4d:df:bc:d5:59:92:ae:05:a1:20:54: 87:17:56:ee:e3:26:ea:ac:62:69:cb:e7:01:05:8e: fd:5a:2f:3a:01:9e:ce:cc:ba:84:10:1c:f6:77:9b: 6a:52:97:87:41:f8:2b:85:de:42:8d:07:a2:93:b9: a3:13:06:38:1b:18:b9:27:ed:1f:a7:64:b8:5d:85: ee:71:5e:eb:9e:93:6f:75:a8:82:df:65:c4:1f:8a: ae:41:63:88:05:01:04:cc:b8:2f:9b:e0:4d:08:60: 07:1d:cf:ff:f3:f6:e2:93:1a:58:f4:76:cd:2d:44: df:3d:a5:0a:1c:92:35:b2:b1:32:af:0c:ec:74:af: 37:e6:4b:18:35:0d:2f:f7:07:ff:8c:e3:06:1c:92: 08:7b:fc:23:87:1a:27:0c:f5:63:7d:f6:d6:29:9c: fe:73:ab:4e:b6:3c:ac:a5:c0:55:16:b5:f6:15:74: b2:49:b5:b4:bc:be:bf:7e:9f:55:6f:80:73:73:e1: 62:4e:cd:02:99:49:73:6f:bb:3f:0a:57:87:b1:3f: 25:b3:94:60:ae:42:6c:5b:46:0f:96:1b:c6:7a:f9: f3:b9:9d:b6:9b:c1:bb:48:0d:bc:c7:48:49:e8:54: 1c:77:f7:2b:fb:9a:62:26:30:52:89:e9:d1:30:9d: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:E6:4C:2D:DD:1A:3C:DB:F5:A8:B6:D9:C5:4B:9B:95:C7:71:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a705dcf6-7b03-39b6-9bef-dc5a317266a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f2:c6:de:ed:28:7a:3c:6d:6d:f9:ac:77:32:10:bc:2b:0f: 17:39:e5:93:1e:39:51:6f:a4:67:f2:19:be:ee:4e:f0:ee:30: 91:fc:52:a4:e0:f3:cd:3f:46:5a:64:5b:a0:ba:ec:56:f0:a0: d4:9c:55:d1:43:11:b9:d8:ab:20:e1:b8:29:d6:e3:54:61:ab: 03:c6:be:ee:d9:3e:c1:ac:d1:c6:e0:4f:c1:5e:a1:89:21:f1: 4d:1e:00:5e:31:c0:df:b1:b9:27:3f:f4:34:d9:01:de:d0:f6: ff:36:9a:86:59:11:e8:b1:7b:19:fc:23:f0:af:f0:ab:d6:d7: 4d:c0:ca:d5:e8:7c:7c:29:d3:79:8e:31:3a:3c:49:98:6d:64: ce:7e:9a:1f:27:a3:92:d4:df:c3:81:ad:da:9c:bf:2f:6e:f3: 17:a9:0a:fb:42:da:a9:d0:7b:b9:2f:f7:35:6c:b9:b3:c0:15: 01:5d:7c:98:56:ac:15:6a:c0:67:cf:3f:95:c3:55:13:c9:0d: 85:0c:e1:80:bb:5e:ff:4a:d6:2b:1a:28:16:8a:35:81:39:c2: 94:62:3a:04:fa:fd:ac:36:73:dc:2d:16:21:1c:d4:35:80:01: 4f:4a:c3:b1:d8:0a:10:0d:67:c9:b9:cc:7c:44:5f:0d:61:ba: f9:f5:d8:30 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lFc2DggyxJxp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MmI0NzE5MTEtNWMwMi00Zjk1LTg4N2QtMzQzMjZkM2Q5YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L0cTd+81VmSrgWhIFSHF1bu4ybqrGJpy+cB BY79Wi86AZ7OzLqEEBz2d5tqUpeHQfgrhd5CjQeik7mjEwY4Gxi5J+0fp2S4XYXu cV7rnpNvdaiC32XEH4quQWOIBQEEzLgvm+BNCGAHHc//8/bikxpY9HbNLUTfPaUK HJI1srEyrwzsdK835ksYNQ0v9wf/jOMGHJIIe/wjhxonDPVjffbWKZz+c6tOtjys pcBVFrX2FXSySbW0vL6/fp9Vb4Bzc+FiTs0CmUlzb7s/CleHsT8ls5RgrkJsW0YP lhvGevnzuZ22m8G7SA28x0hJ6FQcd/cr+5piJjBSienRMJ1hFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGhX5kwt3Ro82/WottnFS5uVx3EpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcwNWRjZjYtN2IwMy0z OWI2LTliZWYtZGM1YTMxNzI2NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA68sbe7Sh6PG1t+ax3MhC8Kw8XOeWTHjlRb6Rn 8hm+7k7w7jCR/FKk4PPNP0ZaZFuguuxW8KDUnFXRQxG52Ksg4bgp1uNUYasDxr7u 2T7BrNHG4E/BXqGJIfFNHgBeMcDfsbknP/Q02QHe0Pb/NpqGWRHosXsZ/CPwr/Cr 1tdNwMrV6Hx8KdN5jjE6PEmYbWTOfpofJ6OS1N/Dga3anL8vbvMXqQr7Qtqp0Hu5 L/c1bLmzwBUBXXyYVqwVasBnzz+Vw1UTyQ2FDOGAu17/StYrGigWijWBOcKUYjoE +v2sNnPcLRYhHNQ1gAFPSsOx2AoQDWfJucx8RF8NYbr59dgw -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:45 2026 by rpki-client