$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b052eb07-7a35-35b1-8bc9-aea1730b4f80.roa File: b052eb07-7a35-35b1-8bc9-aea1730b4f80.roa (raw, json) Hash identifier: 4YnK8Nmda6GyvWWzF9HmWzZLVKc32M0NkaW+iYslgcQ= Subject key identifier: B4:8A:D1:20:17:0B:56:96:F1:6D:B9:52:06:13:DA:80:B3:49:BA:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8E4941615694D574E480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b052eb07-7a35-35b1-8bc9-aea1730b4f80.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397210 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8e:49:41:61:56:94:d5:74:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0a307325-4f8c-449c-9c97-a8e31677c289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:17:7f:71:7d:86:25:1a:47:e7:c8:e3:e5: 72:2f:56:c3:b9:85:63:52:3e:5c:24:36:a0:27:0c: a2:da:98:56:4c:fd:2b:08:c3:62:7d:32:94:51:43: 3d:b2:48:c9:8d:b8:e7:7a:86:d2:43:43:94:79:92: ca:e2:bd:84:20:bf:b9:7b:4b:f1:64:b7:38:dc:37: c4:6e:56:28:62:37:49:3e:44:68:18:81:3b:76:f4: cf:bd:a5:2d:67:60:19:fb:fa:04:6c:b3:ff:41:66: 6d:70:14:ba:84:7a:ab:cc:dd:a2:ca:1f:3b:89:62: 95:af:49:29:d0:90:c1:3c:50:ed:1a:88:94:79:77: a9:4d:97:6c:ff:79:ae:43:c7:6b:79:7d:9e:5d:dc: 4c:d7:5b:aa:a4:f1:73:5e:19:87:57:ce:52:49:b7: eb:bc:dc:fa:2f:f1:fe:e4:63:3d:b8:04:d6:d7:8d: 23:70:eb:3f:17:6d:45:6d:38:81:5f:e3:66:96:9f: 0f:48:d0:af:23:fc:0c:77:ef:9c:c7:c4:ef:9f:5d: d7:91:3b:91:7c:c8:02:95:d5:c4:f0:42:42:d7:08: e1:4c:5a:bd:a9:80:3d:2e:ef:8d:ce:55:77:c3:87: af:06:ac:7a:0a:13:d2:ab:b1:92:44:25:d6:80:0d: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:D1:20:17:0B:56:96:F1:6D:B9:52:06:13:DA:80:B3:49:BA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b052eb07-7a35-35b1-8bc9-aea1730b4f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7d:af:b9:05:21:3a:97:c2:40:ba:dd:72:5b:1c:a2:63:98: 9f:d0:9d:79:9e:23:1e:cc:1e:86:88:f1:b6:d8:68:61:5c:d7: e5:9d:a9:21:15:06:51:61:f9:3c:8d:76:a2:be:6b:89:ee:47: 9d:d0:64:4a:50:f1:56:60:64:c3:28:d6:0a:51:3d:fa:a2:ae: 22:cb:6e:fe:d1:47:31:b3:5f:f3:0f:03:05:75:e2:36:2f:a8: 06:2e:f9:f2:cd:02:00:79:77:c1:8d:ff:1e:86:8b:d2:28:40: f1:ae:ed:f0:e8:b4:08:aa:61:dc:d8:8c:a8:61:48:30:50:bb: 78:69:1c:59:ee:41:f6:e7:42:b5:c7:f2:4f:86:9d:57:4a:45: 3c:02:8d:1f:50:d9:54:a8:c0:70:7d:3e:a4:69:ac:78:ea:54: 65:32:a0:93:f1:47:4b:e4:5f:9d:d2:b4:f2:87:58:d1:a6:2c: cb:3e:a1:51:cf:f1:c1:07:05:56:03:1d:77:9f:a6:d8:4d:fc: da:65:86:14:17:70:5a:c8:fe:15:ce:7b:4d:92:c8:d4:19:aa: a3:e3:56:fd:2b:43:9e:90:3e:e9:41:ba:a6:6a:a4:ba:d8:f5: 30:19:99:9c:16:2f:21:95:29:e8:7e:85:7f:32:27:53:b2:dd: da:f0:9d:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo5JQWFWlNV05IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGEzMDczMjUtNGY4Yy00NDljLTljOTctYThlMzE2NzdjMjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6UXf3F9hiUaR+fI4+VyL1bDuYVjUj5cJDag Jwyi2phWTP0rCMNifTKUUUM9skjJjbjneobSQ0OUeZLK4r2EIL+5e0vxZLc43DfE blYoYjdJPkRoGIE7dvTPvaUtZ2AZ+/oEbLP/QWZtcBS6hHqrzN2iyh87iWKVr0kp 0JDBPFDtGoiUeXepTZds/3muQ8dreX2eXdxM11uqpPFzXhmHV85SSbfrvNz6L/H+ 5GM9uATW140jcOs/F21FbTiBX+Nmlp8PSNCvI/wMd++cx8Tvn13XkTuRfMgCldXE 8EJC1wjhTFq9qYA9Lu+NzlV3w4evBqx6ChPSq7GSRCXWgA3e7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLSK0SAXC1aW8W25UgYT2oCzSbqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjA1MmViMDctN2EzNS0z NWIxLThiYzktYWVhMTczMGI0ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtfa+5BSE6l8JAut1yWxyiY5if0J15niMezB6G iPG22GhhXNflnakhFQZRYfk8jXaivmuJ7ked0GRKUPFWYGTDKNYKUT36oq4iy27+ 0Ucxs1/zDwMFdeI2L6gGLvnyzQIAeXfBjf8ehovSKEDxru3w6LQIqmHc2IyoYUgw ULt4aRxZ7kH250K1x/JPhp1XSkU8Ao0fUNlUqMBwfT6kaax46lRlMqCT8UdL5F+d 0rTyh1jRpizLPqFRz/HBBwVWAx13n6bYTfzaZYYUF3BayP4VzntNksjUGaqj41b9 K0OekD7pQbqmaqS62PUwGZmcFi8hlSnofoV/MidTst3a8J1m -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:23 2026 by rpki-client