$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa File: b2cb79f3-dd70-301a-a43d-455d391751c2.roa (raw, json) Hash identifier: 1SXkFAjaQLwfcR9ABjPb+7ddUSGuRajdBGVoMAR7w6M= Subject key identifier: 2B:12:C7:8B:0E:78:DE:8E:8D:62:56:F2:0C:D7:6B:60:57:D8:6D:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379F7037AFE7D80D3C596C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396561 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f7:03:7a:fe:7d:80:d3:c5:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=2c1b4586-f523-40ce-bf43-2a3c96421e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:a6:eb:ab:0f:56:71:d6:63:41:94:82:a1: 53:bc:13:bb:85:3b:4d:b4:41:a8:9f:f8:a1:35:e1: fd:86:bd:78:b5:f2:a9:74:5a:0d:8c:cf:a0:92:9e: 13:a4:1e:d8:ea:d7:f5:c0:b3:f9:09:c4:40:fb:b4: 1c:b3:84:69:2c:b2:c7:b1:f1:5b:86:bd:e8:9d:33: d2:f3:3c:04:90:8a:d6:bd:04:5d:a4:8e:d3:13:a3: d0:78:e5:e7:8f:54:13:fd:aa:cf:d2:c1:d4:85:6a: 1f:48:da:ce:71:4a:58:fc:ae:f7:10:1b:de:ae:0c: 77:e6:69:50:66:e3:e2:17:c1:83:88:ea:a6:fd:f0: 4c:4d:61:2e:64:78:60:08:ee:47:2e:b7:76:7b:51: 96:99:db:2e:73:03:49:7f:67:fd:e2:c0:86:37:c7: 67:72:c8:87:d8:b6:a3:5d:33:2f:5d:11:6f:98:7b: 24:a6:19:da:5b:5a:79:f7:85:d6:c1:8d:83:7b:b8: 6e:f6:ac:4e:a7:de:63:51:51:ec:82:64:dc:2d:ce: 3f:46:e6:79:2f:59:f4:13:4c:ba:64:9b:88:2e:3f: ef:9c:1e:ae:6f:ec:80:2d:5a:9a:92:1e:04:77:32: 4d:3a:bb:c8:5e:ca:14:6e:df:56:db:4c:4d:38:3a: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:C7:8B:0E:78:DE:8E:8D:62:56:F2:0C:D7:6B:60:57:D8:6D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:45:b0:73:20:3a:9e:d9:b4:18:eb:4a:14:83:d8:fb:05:32: 5f:50:e4:48:75:ef:2e:b0:ed:8e:fc:c4:77:26:7f:cd:50:03: 86:8e:8a:d8:d6:3e:a0:b9:51:a5:1d:ff:7e:f6:4d:40:20:1c: b9:47:68:11:20:78:1d:98:f3:a6:b4:d1:95:5f:fd:b4:33:e8: 47:0c:6a:32:8a:a0:f6:3f:06:7f:b2:f3:5f:23:26:75:7c:d4: 0e:fa:0f:a7:bc:c7:7a:75:02:1d:37:64:59:07:b1:8e:9b:61: ee:f7:6b:b1:7b:c0:07:ef:af:70:7a:0d:ec:71:3c:fa:7c:5b: 5d:d7:0b:fa:a6:3d:b2:ad:8c:7e:d3:b6:67:02:c9:2a:bd:c8: 30:29:12:32:81:33:86:d3:ae:de:c4:45:62:eb:8f:6f:48:2d: 01:f9:8a:6b:25:db:4e:bb:7f:5d:de:2d:00:44:e7:0d:d0:e8: a5:87:06:23:b0:75:2e:b7:72:87:86:54:ef:32:cc:e3:27:2c: 83:21:42:ca:b1:d2:f3:12:2e:38:d1:2a:68:ca:90:83:77:0a: 5c:eb:d1:e0:57:24:61:5e:25:40:66:1b:e6:e8:bf:ad:e5:58: 65:da:a2:4b:2d:34:9c:d4:11:26:59:32:84:e4:fd:08:85:43: 52:33:cf:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jefcDev59gNPFlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MmMxYjQ1ODYtZjUyMy00MGNlLWJmNDMtMmEzYzk2NDIxZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWim66sPVnHWY0GUgqFTvBO7hTtNtEGon/ih NeH9hr14tfKpdFoNjM+gkp4TpB7Y6tf1wLP5CcRA+7Qcs4RpLLLHsfFbhr3onTPS 8zwEkIrWvQRdpI7TE6PQeOXnj1QT/arP0sHUhWofSNrOcUpY/K73EBvergx35mlQ ZuPiF8GDiOqm/fBMTWEuZHhgCO5HLrd2e1GWmdsucwNJf2f94sCGN8dncsiH2Laj XTMvXRFvmHskphnaW1p594XWwY2De7hu9qxOp95jUVHsgmTcLc4/RuZ5L1n0E0y6 ZJuILj/vnB6ub+yALVqakh4EdzJNOrvIXsoUbt9W20xNODrsEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsSx4sOeN6OjWJW8gzXa2BX2G3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjJjYjc5ZjMtZGQ3MC0z MDFhLWE0M2QtNDU1ZDM5MTc1MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRFsHMgOp7ZtBjrShSD2PsFMl9Q5Eh17y6w7Y78xHcmf81QA4aO itjWPqC5UaUd/372TUAgHLlHaBEgeB2Y86a00ZVf/bQz6EcMajKKoPY/Bn+y818j JnV81A76D6e8x3p1Ah03ZFkHsY6bYe73a7F7wAfvr3B6DexxPPp8W13XC/qmPbKt jH7TtmcCySq9yDApEjKBM4bTrt7ERWLrj29ILQH5imsl2067f13eLQBE5w3Q6KWH BiOwdS63coeGVO8yzOMnLIMhQsqx0vMSLjjRKmjKkIN3Clzr0eBXJGFeJUBmG+bo v63lWGXaokstNJzUESZZMoTk/QiFQ1Izz2A= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:35 2026 by rpki-client