$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa File: a7aa733b-30fd-3e28-8eee-188f7143db4c.roa (raw, json) Hash identifier: 7goZ2ilypTGX9Jag6ULeX4v91ySMMbRIdXnXDziaehQ= Subject key identifier: B1:E2:F6:0B:53:11:D4:20:35:34:A1:4D:66:5D:A1:30:5E:F5:05:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B21CABD5B6F31F3DA980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396580 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:1c:ab:d5:b6:f3:1f:3d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=02519b73-b7d7-41e2-ad49-5aa989a181bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:73:52:23:12:3e:55:c4:dc:c0:cf:ec:46: 8b:c4:f5:ad:9d:9c:a6:e8:c7:5e:b2:08:8a:be:e4: c1:99:76:37:28:3b:24:1c:85:c0:5f:ef:0d:b3:59: 4c:54:09:36:52:df:a2:24:97:46:d7:e4:0f:ee:e1: 82:0f:1f:2c:6f:dd:74:21:8c:fa:1c:d7:11:33:5d: 5a:40:a3:ed:5b:09:7f:bb:69:f1:96:0d:9a:f3:7f: be:7d:f4:4c:45:3b:83:48:a2:be:69:88:b3:10:a5: 6a:6c:cf:59:7e:38:de:12:f0:bb:5a:a0:6b:fa:f9: 6b:01:61:d7:f8:96:cf:f5:1f:5d:b4:61:d3:1d:29: 37:94:d9:6b:73:c1:8c:00:bd:38:4a:82:89:4c:ca: f2:c3:e8:66:e8:7b:4b:bb:f9:e7:38:b2:ca:0e:07: 10:bb:ea:72:6c:b1:bc:81:36:53:d0:82:21:41:e3: 3c:d2:29:4d:42:43:95:c9:87:c7:b5:cf:d7:2e:40: 03:84:5d:66:87:fb:dd:63:db:55:5f:bd:d1:7c:27: 9f:8e:38:dd:b1:2c:82:c3:bf:bb:5a:4b:3c:30:e3: f6:d7:68:da:07:5e:68:ef:4e:4a:63:e8:59:76:e5: 48:aa:d9:ba:4d:53:1a:0e:11:2b:22:a5:26:fe:95: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:F6:0B:53:11:D4:20:35:34:A1:4D:66:5D:A1:30:5E:F5:05:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:37:db:36:ea:fe:e8:83:52:58:34:b9:41:3c:c9:9d:42:90: d3:38:d9:cf:27:c3:08:fe:e1:8b:f9:cf:f5:b6:de:b1:39:26: 51:b3:79:b3:5d:e9:eb:90:61:db:36:31:ad:6b:4f:03:42:b6: 17:9e:3c:fb:52:7d:e3:bd:bd:1f:ea:3f:94:e4:15:e7:a8:02: 19:b1:77:24:c1:5f:b4:7b:87:4a:c5:7b:61:a4:c4:17:5a:40: af:74:a0:74:1d:f3:44:ef:0e:b9:ac:ff:3d:90:4d:89:37:84: ee:bd:96:e5:23:7a:a2:c1:b2:e6:08:a1:f9:70:ef:cc:a3:24: 13:88:f8:c8:73:f2:df:31:66:0f:09:69:04:43:a4:1d:b8:f1: ed:2c:a9:f4:06:d3:32:97:16:02:fe:b5:a5:f1:61:07:9b:af: 26:f7:2d:2c:dd:9d:93:fa:86:d7:0e:64:c2:be:0a:88:36:32: 9e:ed:3b:5d:c2:02:6e:55:b4:6e:d9:72:52:20:61:9a:f7:35: bc:67:c0:e7:a3:3c:fd:94:f2:7e:d8:7f:51:fb:81:88:5a:80: ff:83:fb:2f:c9:71:fd:94:53:42:82:d8:22:83:22:ff:74:bd: 77:e1:ee:ba:94:2a:80:68:81:ee:0e:43:2d:c5:b6:3d:b2:47: eb:bc:88:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bIcq9W28x89qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk MDI1MTliNzMtYjdkNy00MWUyLWFkNDktNWFhOTg5YTE4MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJpzUiMSPlXE3MDP7EaLxPWtnZym6MdesgiK vuTBmXY3KDskHIXAX+8Ns1lMVAk2Ut+iJJdG1+QP7uGCDx8sb910IYz6HNcRM11a QKPtWwl/u2nxlg2a83++ffRMRTuDSKK+aYizEKVqbM9ZfjjeEvC7WqBr+vlrAWHX +JbP9R9dtGHTHSk3lNlrc8GMAL04SoKJTMryw+hm6HtLu/nnOLLKDgcQu+pybLG8 gTZT0IIhQeM80ilNQkOVyYfHtc/XLkADhF1mh/vdY9tVX73RfCefjjjdsSyCw7+7 Wks8MOP212jaB15o705KY+hZduVIqtm6TVMaDhErIqUm/pWY5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHi9gtTEdQgNTShTWZdoTBe9QUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdhYTczM2ItMzBmZC0z ZTI4LThlZWUtMTg4ZjcxNDNkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIs32zbq/uiDUlg0uUE8yZ1CkNM42c8nwwj+4Yv5z/W23rE5JlGz ebNd6euQYds2Ma1rTwNCtheePPtSfeO9vR/qP5TkFeeoAhmxdyTBX7R7h0rFe2Gk xBdaQK90oHQd80TvDrms/z2QTYk3hO69luUjeqLBsuYIoflw78yjJBOI+Mhz8t8x Zg8JaQRDpB248e0sqfQG0zKXFgL+taXxYQebryb3LSzdnZP6htcOZMK+Cog2Mp7t O13CAm5VtG7ZclIgYZr3NbxnwOejPP2U8n7Yf1H7gYhagP+D+y/Jcf2UU0KC2CKD Iv90vXfh7rqUKoBoge4OQy3Ftj2yR+u8iOE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:11:06 2026 by rpki-client