$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa File: bd31894b-808a-354e-8124-627c7862dd63.roa (raw, json) Hash identifier: K9FrtiXPshg337N1zdle6voKhNn+8yAxxgR4HOdkP34= Subject key identifier: 7A:14:30:22:C7:ED:88:CD:9D:52:8B:F2:32:3B:67:0B:20:FC:22:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B6A23E01F65EA8619A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397202 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b6:a2:3e:01:f6:5e:a8:61:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=30037cae-f7f5-4a8a-a511-cce63c84385f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:c8:f4:ad:27:ad:7d:1c:ad:91:f3:87:99: ad:6c:3b:46:2a:68:fe:ab:b4:a2:40:30:0a:e0:ce: d5:a6:a5:5e:94:13:6c:9c:8a:4a:de:23:1d:05:ad: f9:cf:dd:d5:bf:10:4d:14:e8:00:28:ee:cb:bb:bc: 8b:4b:22:af:62:55:f0:19:5a:36:4e:30:8c:9a:24: a2:a1:da:50:0a:58:f0:d8:68:e5:6b:8f:a9:b1:d9: ee:b3:39:e8:bc:32:09:b9:84:be:f3:42:f6:e9:7c: 2f:40:69:15:29:e2:ee:1f:d5:50:9f:60:3c:7b:ba: 19:86:ba:64:fd:8a:cb:58:07:a8:8a:6e:bf:9b:bd: 62:21:6b:74:c8:a1:f2:92:43:69:6f:9c:ba:41:2d: 05:e4:82:95:50:c6:0f:d8:cd:6f:1a:f3:da:83:6f: 9c:9f:39:65:1e:16:02:f1:80:06:c2:5a:11:fc:14: 9a:83:c5:2f:61:02:fb:57:1f:0a:2c:55:ed:19:d8: 03:44:fd:10:e8:75:ad:de:a2:be:8d:19:9f:5d:7a: 52:36:b8:b4:3b:7c:16:d2:cb:e9:44:85:32:56:b3: 14:46:7e:ce:ac:d0:d5:6d:71:3a:0b:62:76:22:d8: 34:58:22:a4:e0:9f:bf:e7:32:ae:c3:11:ce:59:26: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:30:22:C7:ED:88:CD:9D:52:8B:F2:32:3B:67:0B:20:FC:22:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd31894b-808a-354e-8124-627c7862dd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ca:62:8b:2d:6e:d5:7f:d2:17:cc:50:32:63:88:4f:78:d3: 17:7b:59:54:9a:dc:97:e5:26:79:36:79:4e:5c:5b:85:d3:0c: 9d:8b:2f:2e:27:e5:cf:86:17:10:7c:ec:75:33:2f:1e:91:e8: 4c:24:1b:62:28:34:0b:6b:de:20:7e:fb:fc:21:00:1d:c2:70: 6a:56:ea:98:65:6c:7f:5e:e6:fb:82:07:ba:f9:7e:3e:17:d9: 39:27:88:c2:93:42:25:81:5d:45:1d:d3:92:45:27:e1:9c:7d: 5d:f9:88:f6:d1:c9:85:7e:96:f9:4c:d8:0c:a2:4e:7d:ef:10: 9e:3e:d6:f2:7d:9d:43:5b:c8:1e:43:8b:61:fb:66:c1:27:bf: 9f:d6:1e:36:9d:e5:af:3a:28:af:5f:ea:22:92:da:60:df:a8: 3d:a2:70:c9:1e:9c:23:e9:80:4d:5d:b3:ad:45:cf:56:6b:82: f2:84:32:12:61:7c:19:65:af:4b:42:bb:52:f7:78:de:94:51: 12:74:e8:9e:43:ca:3e:14:69:5d:06:a6:65:c9:a8:0f:b4:83: 5f:9a:7b:c4:5e:82:03:f8:7b:04:18:37:7c:11:67:2d:e4:b2: a3:04:d5:93:49:ff:b9:d0:dc:50:ea:5e:73:03:c4:e2:d1:cf: a5:c0:bd:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEraiPgH2XqhhmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzAwMzdjYWUtZjdmNS00YThhLWE1MTEtY2NlNjNjODQzODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoprI9K0nrX0crZHzh5mtbDtGKmj+q7SiQDAK 4M7VpqVelBNsnIpK3iMdBa35z93VvxBNFOgAKO7Lu7yLSyKvYlXwGVo2TjCMmiSi odpQCljw2Gjla4+psdnusznovDIJuYS+80L26XwvQGkVKeLuH9VQn2A8e7oZhrpk /YrLWAeoim6/m71iIWt0yKHykkNpb5y6QS0F5IKVUMYP2M1vGvPag2+cnzllHhYC 8YAGwloR/BSag8UvYQL7Vx8KLFXtGdgDRP0Q6HWt3qK+jRmfXXpSNri0O3wW0svp RIUyVrMURn7OrNDVbXE6C2J2Itg0WCKk4J+/5zKuwxHOWSYFuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHoUMCLH7YjNnVKL8jI7Zwsg/CK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQzMTg5NGItODA4YS0z NTRlLTgxMjQtNjI3Yzc4NjJkZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjKYostbtV/0hfMUDJjiE940xd7WVSa3JflJnk2eU5cW4XTDJ2L Ly4n5c+GFxB87HUzLx6R6EwkG2IoNAtr3iB++/whAB3CcGpW6phlbH9e5vuCB7r5 fj4X2TkniMKTQiWBXUUd05JFJ+GcfV35iPbRyYV+lvlM2AyiTn3vEJ4+1vJ9nUNb yB5Di2H7ZsEnv5/WHjad5a86KK9f6iKS2mDfqD2icMkenCPpgE1ds61Fz1ZrgvKE MhJhfBllr0tCu1L3eN6UURJ06J5Dyj4UaV0GpmXJqA+0g1+ae8ReggP4ewQYN3wR Zy3ksqME1ZNJ/7nQ3FDqXnMDxOLRz6XAvWA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:17 2026 by rpki-client