$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa File: b834c769-9987-31e0-ab0e-3b22c60cce31.roa (raw, json) Hash identifier: vUh91SC6jlfSnJQzfWoR8+oPtjjtajB2JkS83HSB70M= Subject key identifier: 67:DD:30:65:24:87:FD:E6:9F:3B:91:2E:D4:FE:22:5D:02:E7:45:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B6B308E9F6B19CD10F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396591 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b6:b3:08:e9:f6:b1:9c:d1:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=80b72cd3-d193-4b67-b064-bf2df4aa2749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:96:b4:c4:98:9c:69:6e:4d:39:16:86:f5: a6:44:db:28:e8:e5:37:31:51:b0:76:6e:90:81:43: ac:5c:80:f3:01:16:68:9d:35:cd:35:2a:94:22:5b: c9:98:6c:62:a4:1c:da:05:8b:86:14:f5:57:b4:9a: a4:d5:58:62:4f:89:d9:52:b1:68:99:4f:d7:ba:82: 1e:1f:54:19:24:40:ab:6f:b5:2c:9e:e2:1e:bf:1a: fe:fe:5d:61:c6:b0:32:e8:32:e0:19:06:4f:9a:22: b6:56:62:0c:a9:e8:ce:3d:5a:8b:11:26:26:26:d7: 32:a8:2d:5a:49:4f:8d:59:23:55:85:b5:5e:07:94: 97:7b:dc:4e:be:89:7c:78:bc:23:db:14:94:a3:bb: ab:5b:86:5e:b0:c6:98:7e:af:c9:e5:ed:96:67:8d: 56:47:6c:0f:70:b9:e9:96:ce:1f:81:59:b4:9c:26: c5:ad:cf:71:ac:57:2f:c5:70:df:84:01:76:cd:fd: 83:30:8e:4e:1a:6a:0a:aa:97:e8:54:62:12:77:91: ee:bd:e8:d9:91:27:f6:f0:d3:1b:3e:a2:19:d0:06: cf:30:7a:9a:4a:6d:1e:58:9d:6d:4c:03:85:45:69: 5b:49:3d:39:a0:74:11:d3:1a:1d:af:fc:77:2b:a3: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DD:30:65:24:87:FD:E6:9F:3B:91:2E:D4:FE:22:5D:02:E7:45:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b834c769-9987-31e0-ab0e-3b22c60cce31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:30:43:4b:28:d3:48:51:11:10:2a:1e:44:0f:72:0b:b5:c2: 72:7a:3e:34:12:ce:c9:70:50:0b:90:87:5b:3f:95:f4:7b:d7: 94:22:96:1a:91:17:fe:c4:11:4e:3f:94:38:6a:7b:c4:ef:ea: b7:a3:0d:d6:1b:53:fa:51:de:fa:32:ed:ea:b0:29:50:3c:30: b2:38:d2:15:85:2c:80:5d:8b:4e:e9:45:a8:a0:db:40:bb:b2: e5:5f:25:cb:56:64:a6:3f:4d:ba:a5:41:04:ee:59:be:73:67: 89:60:c4:25:9e:84:bd:a1:88:fd:ca:84:39:94:e8:17:78:03: c8:c7:b5:84:4a:ab:e7:97:14:5a:b2:0c:a0:a9:6a:c7:b1:d9: 04:4b:b8:3d:de:c9:16:ef:76:28:dd:56:e9:02:2c:0f:be:fc: 11:d9:76:6d:a8:78:12:1f:4a:f4:4a:73:30:30:05:c0:cc:1a: a5:4a:2a:f4:17:ef:56:6d:f9:c1:87:c5:ab:41:07:4b:ff:f8: 05:b3:99:81:6f:eb:b0:9d:9f:fe:34:99:fb:99:61:4d:94:74: 3d:b1:2d:65:2f:d5:c3:23:c8:ce:1e:55:be:be:db:a9:31:b9: b7:0c:86:bd:27:23:01:21:eb:45:a6:25:10:bf:22:71:a8:4b: b9:f1:58:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErazCOn2sZzRDyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODBiNzJjZDMtZDE5My00YjY3LWIwNjQtYmYyZGY0YWEyNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDOWtMSYnGluTTkWhvWmRNso6OU3MVGwdm6Q gUOsXIDzARZonTXNNSqUIlvJmGxipBzaBYuGFPVXtJqk1VhiT4nZUrFomU/XuoIe H1QZJECrb7UsnuIevxr+/l1hxrAy6DLgGQZPmiK2VmIMqejOPVqLESYmJtcyqC1a SU+NWSNVhbVeB5SXe9xOvol8eLwj2xSUo7urW4ZesMaYfq/J5e2WZ41WR2wPcLnp ls4fgVm0nCbFrc9xrFcvxXDfhAF2zf2DMI5OGmoKqpfoVGISd5HuvejZkSf28NMb PqIZ0AbPMHqaSm0eWJ1tTAOFRWlbST05oHQR0xodr/x3K6PYBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGfdMGUkh/3mnzuRLtT+Il0C50XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjgzNGM3NjktOTk4Ny0z MWUwLWFiMGUtM2IyMmM2MGNjZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEwQ0so00hRERAqHkQPcgu1wnJ6PjQSzslwUAuQh1s/lfR715Qi lhqRF/7EEU4/lDhqe8Tv6rejDdYbU/pR3voy7eqwKVA8MLI40hWFLIBdi07pRaig 20C7suVfJctWZKY/TbqlQQTuWb5zZ4lgxCWehL2hiP3KhDmU6Bd4A8jHtYRKq+eX FFqyDKCpasex2QRLuD3eyRbvdijdVukCLA++/BHZdm2oeBIfSvRKczAwBcDMGqVK KvQX71Zt+cGHxatBB0v/+AWzmYFv67Cdn/40mfuZYU2UdD2xLWUv1cMjyM4eVb6+ 26kxubcMhr0nIwEh60WmJRC/InGoS7nxWB8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:10 2026 by rpki-client