$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b18519-de12-3714-9b8e-e5f5c2cafa50.roa File: a9b18519-de12-3714-9b8e-e5f5c2cafa50.roa (raw, json) Hash identifier: vPus9/azpr3hkeGcNgn8RpBXVcftqvKj3tPbXJ6C/6Y= Subject key identifier: E5:0B:6F:83:51:F9:F3:07:E7:50:EC:6E:44:DA:EF:B8:92:F6:A3:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A89376DE752DA19306CD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b18519-de12-3714-9b8e-e5f5c2cafa50.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396586 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:89:37:6d:e7:52:da:19:30:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f7bf12cb-cd54-4dbf-9a04-e5efc72ca79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:27:82:56:23:7b:18:ad:82:da:12:30:48: 84:66:05:40:f2:76:0c:c2:a4:5c:af:b2:03:68:88: 88:55:aa:61:6e:25:df:93:4e:7f:ca:50:33:ea:8d: e7:53:2e:07:2f:0b:3c:44:58:52:47:ce:84:9f:7f: 88:d7:4b:52:ed:d4:3e:d0:06:d2:e2:9b:27:28:a5: b0:bd:b4:45:ee:9f:6a:b8:69:cb:b3:96:ce:b7:ab: e0:0a:8f:39:22:9d:18:b5:6f:33:cb:7d:ab:50:c9: c2:40:8b:7d:26:19:d5:8e:3f:2f:27:5e:ac:2f:d9: e6:24:a6:9b:12:75:0f:84:70:46:80:03:a5:ea:93: 57:86:e0:90:80:94:ef:e1:e2:ca:47:cb:05:c6:c9: 9b:83:de:5e:6e:d0:53:53:eb:b7:d1:33:01:cd:28: 43:68:f6:b7:8e:a6:8a:e6:e6:4c:d1:3e:df:68:4a: 19:10:8f:ca:92:05:be:28:bb:d3:4d:0c:85:43:69: 3b:29:2c:4a:fd:54:97:c9:66:35:e6:03:e9:3b:8f: 2d:93:e3:04:b5:62:41:f1:be:12:03:56:5a:ca:e2: ee:aa:ec:76:be:d6:cd:0e:86:88:09:2b:c7:da:e2: cf:21:bc:75:30:0a:13:9c:20:45:8f:46:56:54:45: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:6F:83:51:F9:F3:07:E7:50:EC:6E:44:DA:EF:B8:92:F6:A3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b18519-de12-3714-9b8e-e5f5c2cafa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:48:a9:f6:4d:9c:72:83:a7:c9:07:c0:b6:ad:40:18:33:ef: 31:85:6e:bd:dd:f6:39:17:56:e9:08:34:76:e7:fc:4e:39:42: 8e:ed:1e:d4:37:75:09:56:17:f9:2b:a3:7a:d9:52:fb:00:d2: db:7e:eb:c5:4c:97:60:8b:3b:ce:6f:be:17:2a:36:66:9a:4c: 8f:de:63:b8:ab:4c:66:49:94:18:83:78:12:dc:14:0a:f1:df: 98:cd:df:cd:3b:42:e4:7f:e0:2e:65:f3:b9:b6:99:3a:94:ba: 95:ca:94:3d:00:0f:09:b4:74:aa:ff:f7:7e:6d:a8:e7:01:ff: 75:86:e0:ad:38:8b:68:3a:74:78:9d:2a:47:5f:9f:89:a2:52: bb:3c:97:07:20:e4:50:a0:5b:d0:8e:76:4f:71:89:c8:b3:aa: b5:aa:99:90:28:05:6f:0d:56:24:15:bc:a9:e1:2b:32:9e:4d: 7d:52:61:ac:f6:39:50:b6:78:83:fa:15:d5:07:32:e7:9d:f5: 3d:0f:df:2f:43:b2:7d:46:48:2c:95:ba:af:e9:ed:75:d2:b0: 5e:93:1b:4e:15:f5:c5:0e:bd:52:ed:7a:e7:cb:77:ad:9f:d7: c4:56:92:02:b7:1e:19:0f:62:e8:85:21:6d:7f:bc:b4:da:0a: 3c:09:2b:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCok3bedS2hkwbNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjdiZjEyY2ItY2Q1NC00ZGJmLTlhMDQtZTVlZmM3MmNhNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOYnglYjexitgtoSMEiEZgVA8nYMwqRcr7ID aIiIVaphbiXfk05/ylAz6o3nUy4HLws8RFhSR86En3+I10tS7dQ+0AbS4psnKKWw vbRF7p9quGnLs5bOt6vgCo85Ip0YtW8zy32rUMnCQIt9JhnVjj8vJ16sL9nmJKab EnUPhHBGgAOl6pNXhuCQgJTv4eLKR8sFxsmbg95ebtBTU+u30TMBzShDaPa3jqaK 5uZM0T7faEoZEI/KkgW+KLvTTQyFQ2k7KSxK/VSXyWY15gPpO48tk+MEtWJB8b4S A1ZayuLuqux2vtbNDoaICSvH2uLPIbx1MAoTnCBFj0ZWVEWMlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOULb4NR+fMH51DsbkTa77iS9qMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTliMTg1MTktZGUxMi0z NzE0LTliOGUtZTVmNWMyY2FmYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzSKn2TZxyg6fJB8C2rUAYM+8xhW693fY5F1bp CDR25/xOOUKO7R7UN3UJVhf5K6N62VL7ANLbfuvFTJdgizvOb74XKjZmmkyP3mO4 q0xmSZQYg3gS3BQK8d+Yzd/NO0Lkf+AuZfO5tpk6lLqVypQ9AA8JtHSq//d+bajn Af91huCtOItoOnR4nSpHX5+JolK7PJcHIORQoFvQjnZPcYnIs6q1qpmQKAVvDVYk Fbyp4Ssynk19UmGs9jlQtniD+hXVBzLnnfU9D98vQ7J9Rkgslbqv6e110rBekxtO FfXFDr1S7Xrny3etn9fEVpICtx4ZD2LohSFtf7y02go8CSt0 -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:47 2026 by rpki-client