$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa File: aa71b912-ec1b-36e2-9852-18906b9fa27f.roa (raw, json) Hash identifier: btm84Guq360OeTKOx3PvoQujAxnvV2jwBpNB1KQBNds= Subject key identifier: 09:4A:C0:2F:15:4D:58:FE:D4:45:32:69:FE:B7:28:32:06:83:0F:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5BB839D97544A8ABEEE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396597 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5b:b8:39:d9:75:44:a8:ab:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=188cc4d2-e8cc-42bf-8e57-e9b3c054bfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:7f:3d:85:55:d0:cd:db:99:47:01:7b:9d: 46:cc:a1:5b:15:50:7b:75:b7:e7:21:90:f8:31:5d: af:b2:cd:ed:4c:79:4a:fc:47:f8:16:e8:23:11:61: e1:ae:c3:17:53:3c:8c:02:f1:75:06:ed:c0:0a:07: be:b7:ec:f3:a8:c0:cb:b8:64:12:f1:32:15:aa:f7: 2a:2f:f1:4f:2d:d8:90:e3:ad:18:c4:42:db:99:34: 59:39:a2:3b:16:fb:d7:8e:b2:b5:81:88:46:e6:eb: b2:1a:23:94:67:65:47:71:41:1d:c5:1a:a6:df:4c: c7:28:df:45:17:7a:07:eb:e7:57:d3:d8:84:28:f5: 95:ff:6a:3a:27:9f:be:37:64:b9:9c:4e:02:f8:74: 13:42:70:9c:9d:7c:3a:d8:2e:b3:1c:a0:64:20:c4: d6:0c:6b:31:7b:e3:2b:ba:07:70:6d:eb:75:98:d2: b4:c8:6c:b5:53:39:19:26:c3:2b:f1:e9:b1:96:67: 25:a2:ff:79:8a:fb:f4:c3:ba:5d:f9:06:b1:63:21: 01:d4:94:ef:31:a9:ff:15:0d:8d:d8:d3:07:59:41: 65:f9:8a:a3:19:9a:54:0c:9c:b7:86:be:ac:cd:1c: 70:ef:41:c7:b3:8f:f0:60:8a:e0:51:7a:f2:03:26: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4A:C0:2F:15:4D:58:FE:D4:45:32:69:FE:B7:28:32:06:83:0F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:02:11:ed:83:3f:5b:c5:5c:e9:98:01:b0:47:7b:ca:11:bd: ef:af:a2:60:db:2b:27:99:73:15:f0:1e:3e:93:be:ba:cd:67: 40:07:34:48:b1:ff:5c:90:cd:91:a8:ab:6f:ee:61:ef:35:e0: 9c:ba:e5:ee:8f:a0:2f:7e:3b:06:e2:c3:d9:4e:53:c0:b9:71: 2a:6a:54:87:22:f9:8e:b6:4e:2c:83:30:ae:13:c8:66:92:b4: 4b:ed:9e:25:6a:4d:1d:0a:54:11:af:86:36:28:d1:74:ab:7e: b1:10:dd:fe:b0:10:c1:3f:fb:06:8f:00:3d:ec:dd:3d:4e:c3: 46:65:e3:1e:d6:00:2f:7d:f9:3b:fe:50:a4:bf:d0:96:a5:6d: c3:1c:34:58:c0:c7:c9:97:72:38:25:7f:e5:7d:a0:5b:e7:15: 3d:3f:fa:d8:37:d1:5b:ae:41:d7:80:d6:9d:2a:05:11:61:21: ba:ea:84:41:78:df:1c:69:77:d7:34:77:35:c8:84:23:ce:d6: c5:8a:f7:08:2a:75:ec:22:82:8d:dc:9b:73:c1:ad:85:5c:10: 6f:4f:b3:41:aa:dc:c5:67:95:3b:94:97:91:9f:f2:5d:ab:6e: 51:5b:4f:10:dc:63:b8:59:f6:8d:69:e3:17:52:99:50:03:0a: d2:63:ca:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lu4Odl1RKir7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTg4Y2M0ZDItZThjYy00MmJmLThlNTctZTliM2MwNTRiZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcx/PYVV0M3bmUcBe51GzKFbFVB7dbfnIZD4 MV2vss3tTHlK/Ef4FugjEWHhrsMXUzyMAvF1Bu3ACge+t+zzqMDLuGQS8TIVqvcq L/FPLdiQ460YxELbmTRZOaI7FvvXjrK1gYhG5uuyGiOUZ2VHcUEdxRqm30zHKN9F F3oH6+dX09iEKPWV/2o6J5++N2S5nE4C+HQTQnCcnXw62C6zHKBkIMTWDGsxe+Mr ugdwbet1mNK0yGy1UzkZJsMr8emxlmclov95ivv0w7pd+QaxYyEB1JTvMan/FQ2N 2NMHWUFl+YqjGZpUDJy3hr6szRxw70HHs4/wYIrgUXryAyahAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAlKwC8VTVj+1EUyaf63KDIGgw8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3MWI5MTItZWMxYi0z NmUyLTk4NTItMTg5MDZiOWZhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnAhHtgz9bxVzpmAGwR3vKEb3vr6Jg2ysnmXMV 8B4+k766zWdABzRIsf9ckM2RqKtv7mHvNeCcuuXuj6AvfjsG4sPZTlPAuXEqalSH IvmOtk4sgzCuE8hmkrRL7Z4lak0dClQRr4Y2KNF0q36xEN3+sBDBP/sGjwA97N09 TsNGZeMe1gAvffk7/lCkv9CWpW3DHDRYwMfJl3I4JX/lfaBb5xU9P/rYN9FbrkHX gNadKgURYSG66oRBeN8caXfXNHc1yIQjztbFivcIKnXsIoKN3Jtzwa2FXBBvT7NB qtzFZ5U7lJeRn/Jdq25RW08Q3GO4WfaNaeMXUplQAwrSY8pB -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:35 2026 by rpki-client