$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89a0db4-5f9d-37a7-93f5-6b093c45ddf8.roa File: b89a0db4-5f9d-37a7-93f5-6b093c45ddf8.roa (raw, json) Hash identifier: 6GQKCc1oTg9sU+opJo5Vui2JJHDre+tI/TsJ2YQL2IA= Subject key identifier: 94:ED:06:0A:FF:75:B0:10:BE:09:17:75:CB:30:C8:E8:C9:F4:B3:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5595386718BFA7862800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89a0db4-5f9d-37a7-93f5-6b093c45ddf8.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397208 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:55:95:38:67:18:bf:a7:86:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=143ba86a-66e7-4177-a582-4e8782db5be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:dd:2d:ed:e8:1f:a1:8b:6d:1e:2a:01:10: 29:1b:4a:3d:13:f4:3d:bd:a0:d9:7a:d0:19:eb:3a: 91:b5:4a:ba:89:80:50:4b:8f:bb:47:ba:a7:75:29: 05:8c:a9:73:62:42:30:7b:d3:17:19:ba:26:76:4a: 8c:9f:fa:7c:17:ee:d6:62:5c:74:64:ef:01:60:b5: 6f:59:79:dd:2d:e8:59:d4:5f:fe:02:1f:3f:9e:ed: 70:09:bf:b7:68:4e:e3:f7:60:5c:1b:9a:08:d5:0d: 67:47:52:0c:57:f5:f1:f6:fa:07:e3:b9:c9:ea:1e: 46:1c:e8:dc:5a:21:51:21:9a:17:47:ea:29:d6:e1: cd:ee:5a:79:3f:a3:6a:54:bc:e4:6b:64:c7:b3:1b: 75:91:1b:22:b3:51:86:5f:ad:24:67:0e:3a:d1:19: 15:34:4e:6d:96:64:4d:3e:dd:c1:f7:6a:51:f8:6f: 8a:21:cb:17:7c:53:a1:68:f9:03:f5:e7:7a:d3:eb: f2:12:76:57:93:da:e8:98:be:74:03:d6:b9:e6:5a: 15:eb:9c:68:79:ff:82:6c:09:75:3a:bd:9e:42:96: 68:38:9c:d9:b8:48:db:bb:8f:13:e7:87:e0:4f:e7: 5b:18:ba:79:da:6b:f4:20:4a:e7:f4:0c:7b:27:2f: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:06:0A:FF:75:B0:10:BE:09:17:75:CB:30:C8:E8:C9:F4:B3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b89a0db4-5f9d-37a7-93f5-6b093c45ddf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d0:d1:e6:ff:0e:6d:74:13:05:b9:f6:ee:45:95:e5:8d:cf: 51:bc:76:61:2f:b5:51:24:65:9c:46:0f:57:5a:e7:c1:f3:0d: b2:de:c9:c4:32:30:3b:19:24:90:41:e3:0e:fd:36:49:5e:a2: 3a:7e:b2:45:fc:9e:b1:63:2b:d6:a6:65:e4:cf:e3:ea:ab:42: ab:e2:0f:b8:9b:9e:f1:6f:1d:fc:0d:3c:7d:9f:5d:8a:8e:d8: 1e:58:24:95:9e:83:57:40:8f:4a:e1:70:ea:d2:47:64:f0:60: a3:c9:68:6e:4a:d6:ea:af:2f:6e:4f:62:98:37:b2:d0:c8:bc: 63:42:d7:cd:8f:8a:ef:f4:0b:b6:49:db:d9:c4:dc:f2:22:94: d8:77:62:00:4b:07:f8:6d:fa:92:f9:23:3d:59:0a:07:e7:0c: 0e:8c:f5:16:7b:c2:7d:0f:2c:e1:95:be:4f:20:f9:96:4e:0f: 11:6c:1f:0b:82:2c:60:de:7d:48:f4:0f:31:ac:e2:3d:6e:a6: 45:f8:0e:20:a6:37:30:4c:c1:1e:a6:99:a9:73:8c:fc:b7:65: 46:8f:06:96:29:d4:3b:a1:0a:e4:2a:ce:60:78:b2:b6:05:63: de:4d:a7:52:ab:71:40:04:6e:c5:c8:c6:31:72:16:c9:e8:93: aa:6e:7b:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lWVOGcYv6eGKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTQzYmE4NmEtNjZlNy00MTc3LWE1ODItNGU4NzgyZGI1YmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJrdLe3oH6GLbR4qARApG0o9E/Q9vaDZetAZ 6zqRtUq6iYBQS4+7R7qndSkFjKlzYkIwe9MXGbomdkqMn/p8F+7WYlx0ZO8BYLVv WXndLehZ1F/+Ah8/nu1wCb+3aE7j92BcG5oI1Q1nR1IMV/Xx9voH47nJ6h5GHOjc WiFRIZoXR+op1uHN7lp5P6NqVLzka2THsxt1kRsis1GGX60kZw460RkVNE5tlmRN Pt3B92pR+G+KIcsXfFOhaPkD9ed60+vyEnZXk9romL50A9a55loV65xoef+CbAl1 Or2eQpZoOJzZuEjbu48T54fgT+dbGLp52mv0IErn9Ax7Jy/7XQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJTtBgr/dbAQvgkXdcswyOjJ9LNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjg5YTBkYjQtNWY5ZC0z N2E3LTkzZjUtNmIwOTNjNDVkZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBV0NHm/w5tdBMFufbuRZXljc9RvHZhL7VRJGWc Rg9XWufB8w2y3snEMjA7GSSQQeMO/TZJXqI6frJF/J6xYyvWpmXkz+Pqq0Kr4g+4 m57xbx38DTx9n12KjtgeWCSVnoNXQI9K4XDq0kdk8GCjyWhuStbqry9uT2KYN7LQ yLxjQtfNj4rv9Au2SdvZxNzyIpTYd2IASwf4bfqS+SM9WQoH5wwOjPUWe8J9Dyzh lb5PIPmWTg8RbB8Lgixg3n1I9A8xrOI9bqZF+A4gpjcwTMEeppmpc4z8t2VGjwaW KdQ7oQrkKs5geLK2BWPeTadSq3FABG7FyMYxchbJ6JOqbnvz -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:06 2026 by rpki-client