$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa File: b0c80747-6ca4-38c8-bdba-492465c92714.roa (raw, json) Hash identifier: /R0u6NndAaXrKPWguJIH2IwOtOtD+TOIije40+KdZ3c= Subject key identifier: FF:BD:05:3B:22:58:B1:C1:6E:3D:07:1C:51:99:87:65:A3:2B:80:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379F302E4C533B673B6F220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397198 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f3:02:e4:c5:33:b6:73:b6:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=eac6b7ad-7c0f-439a-98a8-5fb8402e9749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:a7:60:be:a4:39:19:5f:58:f0:77:c5:37: 70:65:2d:55:60:d8:6b:92:27:57:e1:e1:d4:5f:d9: 0b:2a:5d:fb:28:fd:1d:cd:57:8c:7c:2e:ef:93:ad: 95:82:4a:84:15:14:f6:fa:d5:4a:c2:48:55:8f:98: f0:ce:b3:2d:d8:54:0d:e0:15:48:cc:d1:61:ea:ba: 4d:46:77:55:0d:6b:83:ae:b9:19:f9:00:ce:89:88: 69:29:48:38:96:b7:11:a5:b9:26:bd:fd:46:5a:27: cc:30:7f:9f:ce:e2:e0:75:27:23:ea:8a:62:ec:5f: 1d:a1:46:b5:3a:fb:f9:a4:b0:47:2b:d3:ca:c7:59: a3:bb:e0:eb:9e:f3:db:3d:3d:0e:ab:17:41:f4:24: b6:ac:6c:3a:08:62:f2:7d:90:ab:b7:93:dc:f0:58: 51:8b:00:36:fb:0a:61:d0:ce:88:0a:36:db:ed:6b: b4:87:32:a9:48:95:f1:df:f7:c9:7f:a9:74:24:bb: 6c:d1:f7:b7:93:ee:62:f0:94:54:bc:1a:63:4f:71: 0d:ae:87:b2:28:a7:c2:c8:1a:44:01:9b:db:0d:28: 7c:12:7b:1e:02:97:b4:54:26:db:6d:c0:51:dc:ec: e1:44:3a:35:27:65:04:d8:ed:c5:ba:49:5a:ac:6b: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:05:3B:22:58:B1:C1:6E:3D:07:1C:51:99:87:65:A3:2B:80:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0c80747-6ca4-38c8-bdba-492465c92714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b4:f4:57:41:5d:89:70:99:33:02:f7:aa:65:06:1d:23:ce: ea:28:28:d4:f5:a6:85:88:46:ee:82:86:e0:64:0b:65:26:5d: ff:52:4f:10:84:c7:01:f6:da:55:74:88:09:29:bd:e9:52:e6: 5d:73:85:59:21:83:d4:18:2b:48:54:0c:8c:31:ad:9d:af:f5: f0:cf:cd:e2:15:0d:87:7c:a1:42:5c:15:6c:47:41:38:7d:74: ba:fb:f9:8a:0f:86:c6:62:41:e3:9f:c0:ea:f1:3b:55:d1:4b: ec:4c:52:9d:a9:e2:97:b9:36:ee:5d:2c:d0:bb:35:41:7c:c8: b9:91:0c:91:9f:e5:64:fb:18:e1:1f:f0:50:7f:3e:ee:e1:87: f2:7f:f2:e3:f5:78:e2:84:42:6f:8b:37:9c:7f:19:b6:f4:66: 8a:52:a1:ff:44:9b:82:e1:04:26:57:72:2a:7f:6f:a7:0e:fe: 14:5b:93:d4:58:dc:a6:e6:4a:62:86:0b:d6:82:9c:c1:0b:59: e3:c6:7a:84:9d:8e:8c:1d:82:1b:6f:84:3b:52:f0:b3:2b:82: a0:23:1d:6a:20:25:41:d3:9d:38:b0:55:60:51:c8:cd:f2:42: aa:36:00:8f:0b:3c:3f:5f:c9:6f:05:e5:06:49:80:38:48:74: a3:ae:86:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jefMC5MUztnO28iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWFjNmI3YWQtN2MwZi00MzlhLTk4YTgtNWZiODQwMmU5NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMinYL6kORlfWPB3xTdwZS1VYNhrkidX4eHU X9kLKl37KP0dzVeMfC7vk62VgkqEFRT2+tVKwkhVj5jwzrMt2FQN4BVIzNFh6rpN RndVDWuDrrkZ+QDOiYhpKUg4lrcRpbkmvf1GWifMMH+fzuLgdScj6opi7F8doUa1 Ovv5pLBHK9PKx1mju+DrnvPbPT0OqxdB9CS2rGw6CGLyfZCrt5Pc8FhRiwA2+wph 0M6ICjbb7Wu0hzKpSJXx3/fJf6l0JLts0fe3k+5i8JRUvBpjT3ENroeyKKfCyBpE AZvbDSh8EnseApe0VCbbbcBR3OzhRDo1J2UE2O3FuklarGuQvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+9BTsiWLHBbj0HHFGZh2WjK4DqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBjODA3NDctNmNhNC0z OGM4LWJkYmEtNDkyNDY1YzkyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGa09FdBXYlwmTMC96plBh0jzuooKNT1poWIRu6ChuBkC2UmXf9S TxCExwH22lV0iAkpvelS5l1zhVkhg9QYK0hUDIwxrZ2v9fDPzeIVDYd8oUJcFWxH QTh9dLr7+YoPhsZiQeOfwOrxO1XRS+xMUp2p4pe5Nu5dLNC7NUF8yLmRDJGf5WT7 GOEf8FB/Pu7hh/J/8uP1eOKEQm+LN5x/Gbb0ZopSof9Em4LhBCZXcip/b6cO/hRb k9RY3KbmSmKGC9aCnMELWePGeoSdjowdghtvhDtS8LMrgqAjHWogJUHTnTiwVWBR yM3yQqo2AI8LPD9fyW8F5QZJgDhIdKOuhnE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:15 2026 by rpki-client