$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8541cc4-0ff2-3a08-bb20-7c9966c4c823.roa File: a8541cc4-0ff2-3a08-bb20-7c9966c4c823.roa (raw, json) Hash identifier: AGsc95eG04LhCczEq+lMMHHjb9asJYO0NGohhPL/s1g= Subject key identifier: 99:11:B0:98:70:30:A6:4C:F6:B3:79:53:1B:EE:AB:EC:53:0E:93:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B0E1B484872E2560B200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8541cc4-0ff2-3a08-bb20-7c9966c4c823.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396543 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:e1:b4:84:87:2e:25:60:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=ae47416c-34e7-45e5-bad0-eb83c971cb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:52:3c:f7:d6:77:4d:33:68:cb:e6:9b:c6: 7d:91:2e:98:b7:7a:7c:13:de:e2:bd:38:ff:7d:7b: 8f:95:34:61:95:1b:7a:4a:a3:b5:f2:3d:34:fb:5e: ae:6b:11:8e:00:e6:ea:8e:2c:67:de:f2:bc:ab:be: 4a:59:a0:67:37:7f:80:53:bb:f3:7c:73:b3:db:ea: a1:77:8d:59:7e:2f:6c:37:35:7f:1e:66:b9:6b:d5: 62:d1:39:86:5e:87:7a:78:7a:63:79:ea:dc:d8:e1: 98:6d:c8:9f:54:72:06:d4:d9:db:c8:26:31:8b:da: c8:e2:cb:b9:70:58:ed:50:9e:a3:db:bb:a7:db:42: e5:3b:4a:2c:48:42:3a:31:53:d8:c7:2b:99:50:f5: e8:54:96:24:ee:47:1e:89:46:0a:ac:fc:17:65:9a: fa:16:3a:51:15:49:7e:cd:3a:d8:4d:fb:1f:d0:f8: 8d:aa:83:17:b6:ee:ae:29:89:f8:74:c5:ba:77:a6: e2:2b:59:5b:41:83:d8:28:60:87:cc:76:b9:eb:1f: 53:c3:12:59:e4:85:6d:d5:01:d1:9f:10:04:30:39: f1:70:cd:92:d8:42:56:cc:b0:15:df:53:f0:c2:68: 4c:cd:5c:f4:75:b7:2e:b3:46:86:2d:c2:e5:4d:73: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:B0:98:70:30:A6:4C:F6:B3:79:53:1B:EE:AB:EC:53:0E:93:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8541cc4-0ff2-3a08-bb20-7c9966c4c823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:54:a5:0f:0a:56:be:19:b8:41:0a:e4:51:15:ac:02:73:47: 18:d3:f9:0e:e0:dd:bf:67:72:f5:79:f8:a7:31:05:ff:b7:ea: e1:99:62:68:b1:f7:21:0f:80:d2:99:e2:c3:29:2d:ae:40:f3: a8:76:bf:7a:97:56:72:d2:78:99:63:6a:dd:2b:ee:11:95:c1: 5c:68:ff:72:65:af:f6:c9:ab:0b:75:6f:52:7a:ae:a1:44:fb: 59:cd:2a:a8:96:79:73:4a:be:64:a6:fa:b1:9f:bb:44:88:5a: 4b:33:fe:cd:4c:14:8c:6a:60:16:77:6d:0d:06:fc:7c:4b:be: c8:3e:2a:c1:96:0b:47:09:8c:43:59:a9:0a:d3:5a:c0:e6:82: 7d:b8:f1:65:7c:19:85:0e:a9:ba:f0:f5:59:41:57:2f:97:8b: 0d:17:79:b4:40:7e:02:ae:3a:4b:13:6f:67:29:7e:01:dd:85: 8d:bb:c5:8c:9f:4a:9b:b3:65:05:2f:2a:6a:c7:4b:61:94:b5: 3e:8e:d6:98:9d:54:50:5f:f1:7b:00:f4:02:69:fa:c6:37:79: 46:a5:c4:c0:42:d0:2a:76:04:ff:2b:50:35:c1:f5:80:8d:ed: 59:11:43:1a:ee:70:e2:c6:f8:8b:4d:be:b6:8f:b5:b6:ea:f3: 68:a3:b9:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bDhtISHLiVgsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk YWU0NzQxNmMtMzRlNy00NWU1LWJhZDAtZWI4M2M5NzFjYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGtSPPfWd00zaMvmm8Z9kS6Yt3p8E97ivTj/ fXuPlTRhlRt6SqO18j00+16uaxGOAObqjixn3vK8q75KWaBnN3+AU7vzfHOz2+qh d41Zfi9sNzV/Hma5a9Vi0TmGXod6eHpjeerc2OGYbcifVHIG1NnbyCYxi9rI4su5 cFjtUJ6j27un20LlO0osSEI6MVPYxyuZUPXoVJYk7kceiUYKrPwXZZr6FjpRFUl+ zTrYTfsf0PiNqoMXtu6uKYn4dMW6d6biK1lbQYPYKGCHzHa56x9TwxJZ5IVt1QHR nxAEMDnxcM2S2EJWzLAV31PwwmhMzVz0dbcus0aGLcLlTXNeQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJkRsJhwMKZM9rN5Uxvuq+xTDpPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg1NDFjYzQtMGZmMi0z YTA4LWJiMjAtN2M5OTY2YzRjODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxUpQ8KVr4ZuEEK5FEVrAJzRxjT+Q7g3b9ncvV5+KcxBf+36uGZ Ymix9yEPgNKZ4sMpLa5A86h2v3qXVnLSeJljat0r7hGVwVxo/3Jlr/bJqwt1b1J6 rqFE+1nNKqiWeXNKvmSm+rGfu0SIWksz/s1MFIxqYBZ3bQ0G/HxLvsg+KsGWC0cJ jENZqQrTWsDmgn248WV8GYUOqbrw9VlBVy+Xiw0XebRAfgKuOksTb2cpfgHdhY27 xYyfSpuzZQUvKmrHS2GUtT6O1pidVFBf8XsA9AJp+sY3eUalxMBC0Cp2BP8rUDXB 9YCN7VkRQxrucOLG+ItNvraPtbbq82ijuZI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:52:57 2026 by rpki-client