$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa File: ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa (raw, json) Hash identifier: kmx/Hi7AcNVICSlv8n8m8jdyyxId03pYzYRR1E3G1y0= Subject key identifier: 44:E3:4C:92:46:BF:2F:AE:96:DF:2B:28:A4:F9:F3:6B:F9:56:B5:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A062A38B829BBA1A9AB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397193 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:06:2a:38:b8:29:bb:a1:a9:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ba82bca3-74ac-457b-a521-4a3d41e5eb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:68:b2:a7:7f:51:36:87:2b:19:e5:18:01: 57:a3:1c:e1:97:a7:11:10:c8:fc:e2:27:7d:b3:97: 3c:7f:3a:9d:b6:22:fe:6d:c8:5b:81:85:e6:bf:c1: 55:12:46:84:74:5a:8a:80:b8:a6:61:8c:5a:b5:2f: d3:4e:b6:3d:7c:63:6d:fa:f6:b7:f6:96:6d:72:04: f1:25:89:2d:2a:bb:36:54:f6:62:8a:6b:80:9f:e2: 1d:d5:28:a2:c9:79:15:ae:ce:ee:3d:60:af:ea:71: 80:cf:b4:a0:15:3a:d0:23:2b:7c:ae:87:93:79:28: b5:28:fc:ab:ba:41:5e:bb:af:19:5d:57:5a:2a:a8: 12:48:11:41:61:b8:80:85:74:61:5e:94:69:5e:13: b5:bc:c8:2a:3a:fb:08:72:35:b8:59:01:06:c5:b3: 60:32:2b:55:5d:1e:0c:a1:93:50:40:b7:88:8a:6b: 19:25:98:18:88:18:3f:eb:12:59:9e:0d:27:43:d2: be:bd:dd:9e:2e:90:de:f6:62:e1:8d:6a:11:8c:e3: 3e:0d:fd:57:7f:32:3e:28:13:ca:45:b0:dd:c3:a7: db:bc:0b:93:51:79:b4:71:02:ef:92:01:95:47:45: 0f:ff:a1:b5:78:53:5d:62:be:e7:15:85:c1:bd:a1: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:4C:92:46:BF:2F:AE:96:DF:2B:28:A4:F9:F3:6B:F9:56:B5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50b464-e6de-3e44-bbbe-7b5cbce0574e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:df:09:9e:4e:a0:b4:5b:23:53:c0:04:b0:f8:a6:06:09:7e: e0:3c:0d:72:1a:7e:3f:aa:21:46:ef:78:c9:28:4e:d3:50:d8: 06:01:ad:1c:57:d4:2d:65:00:0c:55:7c:d0:ca:13:e5:20:4f: 14:3c:ce:ba:9a:68:0d:02:6b:5e:4a:f8:64:a6:2a:ac:b0:84: e5:28:b2:ca:e9:ad:ca:82:f2:ab:8c:da:20:de:56:6d:9a:b3: a8:2c:81:a5:12:ac:69:a7:ec:e5:ff:04:32:e9:9a:e0:67:89: 73:0b:c8:7a:b8:15:f9:7e:34:88:b0:6b:f8:4b:38:ae:4b:69: 38:4e:95:9c:db:68:8b:81:96:98:81:ed:7e:c1:b0:19:11:be: eb:83:c0:ae:89:f1:2a:e1:cc:6b:db:84:29:cd:d3:bd:64:07: f6:0a:80:de:60:1f:e8:a3:fa:6d:f6:e0:6a:10:a3:c9:fb:fd: 5d:38:8f:70:fc:4a:9d:76:82:68:8f:2d:be:ef:69:92:db:e4: 61:49:3f:2a:ac:73:1c:b7:0d:c0:da:09:64:54:5e:c2:3e:ee: e3:46:34:57:84:2b:c8:74:e4:5d:7d:ef:29:5d:d8:c2:88:06: 0d:86:fe:25:d2:33:62:f6:4f:92:dc:47:aa:cc:84:19:66:89: 25:24:e3:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jegYqOLgpu6Gpq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmE4MmJjYTMtNzRhYy00NTdiLWE1MjEtNGEzZDQxZTVlYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh5osqd/UTaHKxnlGAFXoxzhl6cREMj84id9 s5c8fzqdtiL+bchbgYXmv8FVEkaEdFqKgLimYYxatS/TTrY9fGNt+va39pZtcgTx JYktKrs2VPZiimuAn+Id1SiiyXkVrs7uPWCv6nGAz7SgFTrQIyt8roeTeSi1KPyr ukFeu68ZXVdaKqgSSBFBYbiAhXRhXpRpXhO1vMgqOvsIcjW4WQEGxbNgMitVXR4M oZNQQLeIimsZJZgYiBg/6xJZng0nQ9K+vd2eLpDe9mLhjWoRjOM+Df1XfzI+KBPK RbDdw6fbvAuTUXm0cQLvkgGVR0UP/6G1eFNdYr7nFYXBvaHHRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFETjTJJGvy+ult8rKKT582v5VrXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM1MGI0NjQtZTZkZS0z ZTQ0LWJiYmUtN2I1Y2JjZTA1NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjfCZ5OoLRbI1PABLD4pgYJfuA8DXIafj+qIUbveMkoTtNQ2AYB rRxX1C1lAAxVfNDKE+UgTxQ8zrqaaA0Ca15K+GSmKqywhOUossrprcqC8quM2iDe Vm2as6gsgaUSrGmn7OX/BDLpmuBniXMLyHq4Ffl+NIiwa/hLOK5LaThOlZzbaIuB lpiB7X7BsBkRvuuDwK6J8SrhzGvbhCnN071kB/YKgN5gH+ij+m324GoQo8n7/V04 j3D8Sp12gmiPLb7vaZLb5GFJPyqscxy3DcDaCWRUXsI+7uNGNFeEK8h05F197yld 2MKIBg2G/iXSM2L2T5LcR6rMhBlmiSUk49E= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:59 2026 by rpki-client