$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa File: aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json) Hash identifier: mzbWHNC3dETcUdhr0WJTd66cFo4/SrCdKmVYK+L5Zn4= Subject key identifier: BB:E1:05:34:AF:8F:98:98:BA:27:67:82:A1:CC:21:5C:16:E8:8E:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8E07186DAC4D348F81C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396572 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8e:07:18:6d:ac:4d:34:8f:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9fd55c5f-9ffe-44f9-95b6-fa5ed4210f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:3c:c7:f4:55:c2:23:88:bb:b3:a1:fc:1d: 8e:d0:95:ba:b3:85:1f:e2:66:c0:66:1c:fd:e2:63: 14:da:dd:68:d3:06:dc:f8:b4:c5:27:f4:d8:5f:a4: 34:6f:31:ee:e8:04:23:e4:28:b3:eb:41:29:d2:4d: 30:4d:02:ca:10:fa:e5:62:5e:98:09:7b:99:11:0e: 2c:dc:fa:ba:c7:1b:26:ec:8e:d0:c4:f2:fd:ef:c0: 28:d1:f2:97:91:a6:23:8a:b8:ae:53:61:85:4e:aa: 17:84:2c:cd:1c:6b:24:0c:94:c0:76:ac:f4:cd:40: 85:ff:e8:12:70:1a:33:21:6c:8a:fa:1a:39:b1:65: 90:14:46:64:5b:53:6f:03:4f:6f:8b:c4:19:52:7f: 81:f0:7e:8d:0c:95:c1:16:db:52:d7:c8:fb:fc:ec: 5b:fc:1a:34:68:27:f0:96:03:97:b1:3b:ed:96:bc: d8:49:72:cf:0a:fc:17:59:e9:3c:34:bf:69:56:c8: 70:f5:0b:0f:8c:d8:ae:33:5f:73:2f:c0:32:7f:51: 44:13:43:e9:3f:6b:c8:fe:e0:f4:75:fd:80:09:b0: 87:cb:42:a4:d8:f6:85:34:0f:e0:1a:0f:f0:6e:47: 93:c4:52:52:71:6d:3d:18:9c:eb:50:51:9a:36:dc: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:05:34:AF:8F:98:98:BA:27:67:82:A1:CC:21:5C:16:E8:8E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:21:17:e4:da:fb:20:93:26:18:49:0b:43:d1:11:d5:22:ce: 54:e1:a7:25:40:4f:46:05:ca:20:0a:66:6c:61:6b:75:71:27: e5:cf:68:ca:6a:7f:40:af:ff:a9:89:c6:3e:b0:9c:8f:cd:7d: 9a:84:07:18:37:91:88:19:5b:22:ee:29:28:cd:d8:a0:aa:11: f9:ec:d9:60:d8:31:4d:12:71:09:e0:61:41:90:26:52:69:04: 00:8d:e8:b1:4b:60:ce:b1:0f:5b:cf:35:f7:ae:8f:17:b6:2b: 80:1c:4d:13:f0:14:ba:27:81:2a:fd:45:a7:67:03:09:23:cf: 6f:0a:58:1e:fe:65:6f:d7:5d:45:aa:fa:e5:d6:da:0f:74:95: 39:72:c6:de:7e:9f:1e:a7:d2:42:88:dd:34:7c:19:da:4f:2c: 24:4f:f1:23:18:6d:9d:14:41:3b:d7:46:8f:2a:b2:f0:0f:0c: 19:50:de:1a:07:b5:ed:79:53:9c:f2:14:5d:f7:7d:c4:fb:92: fd:76:f2:69:43:e2:1f:7f:05:12:1f:6b:1d:4c:96:41:90:cb: 15:2a:78:0b:d1:ba:ba:05:b3:cf:fc:89:68:a3:7f:7d:89:13: 91:30:5f:61:df:bc:5b:b3:c5:4e:40:c0:92:b0:9f:0c:41:7f: a9:b9:8e:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo4HGG2sTTSPgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OWZkNTVjNWYtOWZmZS00NGY5LTk1YjYtZmE1ZWQ0MjEwZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYE8x/RVwiOIu7Oh/B2O0JW6s4Uf4mbAZhz9 4mMU2t1o0wbc+LTFJ/TYX6Q0bzHu6AQj5Ciz60Ep0k0wTQLKEPrlYl6YCXuZEQ4s 3Pq6xxsm7I7QxPL978Ao0fKXkaYjiriuU2GFTqoXhCzNHGskDJTAdqz0zUCF/+gS cBozIWyK+ho5sWWQFEZkW1NvA09vi8QZUn+B8H6NDJXBFttS18j7/Oxb/Bo0aCfw lgOXsTvtlrzYSXLPCvwXWek8NL9pVshw9QsPjNiuM19zL8Ayf1FEE0PpP2vI/uD0 df2ACbCHy0Kk2PaFNA/gGg/wbkeTxFJScW09GJzrUFGaNtw4gwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLvhBTSvj5iYuidngqHMIVwW6I4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNjIzYWEtODVkMi0z YWMzLWEyYjctZDE1YmRkZjllOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqIRfk2vsgkyYYSQtD0RHVIs5U4aclQE9GBcog CmZsYWt1cSflz2jKan9Ar/+picY+sJyPzX2ahAcYN5GIGVsi7ikozdigqhH57Nlg 2DFNEnEJ4GFBkCZSaQQAjeixS2DOsQ9bzzX3ro8XtiuAHE0T8BS6J4Eq/UWnZwMJ I89vClge/mVv111Fqvrl1toPdJU5csbefp8ep9JCiN00fBnaTywkT/EjGG2dFEE7 10aPKrLwDwwZUN4aB7XteVOc8hRd933E+5L9dvJpQ+IffwUSH2sdTJZBkMsVKngL 0bq6BbPP/Iloo399iRORMF9h37xbs8VOQMCSsJ8MQX+puY4F -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:04 2026 by rpki-client