$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa File: be160f60-62b3-353b-9446-10fa36a4fac5.roa (raw, json) Hash identifier: SDVyIr5BHQicGTcjZLZsGv9VuWC2ZA+iZrzVw9MRZfA= Subject key identifier: 9C:3B:9A:D1:4E:05:EE:62:D6:24:FC:0A:90:29:A3:0B:99:AF:68:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A895540C9EA7D80B0B460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396581 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:89:55:40:c9:ea:7d:80:b0:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c5c86e5a-c33e-4ce8-bc87-44ef96dd6ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:68:87:af:9e:9b:22:8a:cb:9d:9e:e1:58: 9d:20:72:89:58:b9:78:de:a6:46:eb:f2:a2:0e:40: 55:34:cd:86:dc:b1:c7:bf:32:7a:d0:82:e1:b1:b6: b6:d6:e6:fd:78:69:27:c8:ac:7a:e8:b7:d4:6c:52: ee:9d:94:bb:eb:28:a5:d3:46:a7:58:35:f4:ef:21: 2b:71:36:9d:95:e9:54:74:6a:cf:71:9a:76:22:8a: 8a:06:55:bb:30:a5:6e:2f:53:c7:6d:03:bd:7e:e8: 4b:1a:f1:8a:f0:5c:c6:ad:a7:b9:2c:5b:f3:84:f1: 8a:82:04:cf:08:e2:16:4b:08:3d:0e:88:94:90:a3: 8f:47:3b:1c:f0:77:f3:33:37:13:0d:ab:c5:c8:c0: 18:f1:7e:45:10:a2:a8:74:a3:2c:5a:ab:dd:57:88: 03:1b:24:4a:e4:b4:e4:fc:3a:66:ae:f4:57:79:13: dc:e4:0b:fd:47:3d:91:42:53:0b:fa:70:a0:29:1d: cc:33:05:77:06:65:26:76:70:b5:03:37:39:77:1d: 39:05:e8:16:6b:34:b3:4b:7c:19:42:30:8d:4e:c7: ea:f8:36:4b:40:d0:9e:1d:19:e0:98:bb:39:39:a2: fe:1b:d9:ba:c4:a1:90:06:29:d6:cc:b9:47:29:77: 37:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:9A:D1:4E:05:EE:62:D6:24:FC:0A:90:29:A3:0B:99:AF:68:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be160f60-62b3-353b-9446-10fa36a4fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:72:f8:96:57:13:27:13:28:46:93:fa:4a:8c:37:0b:25:6d: d2:81:c5:f6:d5:ef:9b:5e:c6:45:54:d0:75:d7:ca:e1:27:a6: 33:f0:e6:5b:3d:df:57:5d:39:ec:c2:5e:f7:c5:e8:2a:29:0b: df:c4:0e:6c:a1:e2:b7:85:02:8f:f6:a1:bc:d7:ea:90:f6:57: 2a:ca:e5:5a:2f:99:87:ba:58:6d:f3:6a:24:3f:b0:7e:d1:e4: 47:55:c4:ce:c1:11:dd:94:2e:0c:c9:51:24:da:64:88:b2:bd: 93:f2:9f:44:d0:af:89:86:cf:ff:95:48:9d:50:40:25:e3:85: 44:8b:60:1e:24:55:df:2a:07:a5:a8:f3:14:05:90:d4:a1:3d: b4:25:51:3e:e7:22:30:18:8d:96:c9:f0:0c:a4:cf:22:c7:3c: bc:51:e6:0c:9b:02:3f:ea:9c:23:12:c1:cc:4a:31:e1:b2:9e: f8:31:bf:89:27:0f:a5:f7:c1:7e:db:86:6d:e4:a5:c6:a3:c8: cd:90:be:be:28:e1:43:7f:43:eb:ff:d9:c8:d4:98:3c:91:c3: 50:d5:fe:35:55:18:ff:9f:60:41:01:d0:2d:39:87:c5:74:03: dc:2b:66:cc:b2:1f:03:1d:a8:f2:d3:ac:43:5a:b4:0b:d5:31: fe:11:3c:6b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wColVQMnqfYCwtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzVjODZlNWEtYzMzZS00Y2U4LWJjODctNDRlZjk2ZGQ2ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9xoh6+emyKKy52e4VidIHKJWLl43qZG6/Ki DkBVNM2G3LHHvzJ60ILhsba21ub9eGknyKx66LfUbFLunZS76yil00anWDX07yEr cTadlelUdGrPcZp2IoqKBlW7MKVuL1PHbQO9fuhLGvGK8FzGrae5LFvzhPGKggTP COIWSwg9DoiUkKOPRzsc8HfzMzcTDavFyMAY8X5FEKKodKMsWqvdV4gDGyRK5LTk /DpmrvRXeRPc5Av9Rz2RQlML+nCgKR3MMwV3BmUmdnC1Azc5dx05BegWazSzS3wZ QjCNTsfq+DZLQNCeHRngmLs5OaL+G9m6xKGQBinWzLlHKXc3vwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJw7mtFOBe5i1iT8CpApowuZr2jbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmUxNjBmNjAtNjJiMy0z NTNiLTk0NDYtMTBmYTM2YTRmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAtcviWVxMnEyhGk/pKjDcLJW3SgcX21e+bXsZF VNB118rhJ6Yz8OZbPd9XXTnswl73xegqKQvfxA5soeK3hQKP9qG81+qQ9lcqyuVa L5mHulht82okP7B+0eRHVcTOwRHdlC4MyVEk2mSIsr2T8p9E0K+Jhs//lUidUEAl 44VEi2AeJFXfKgelqPMUBZDUoT20JVE+5yIwGI2WyfAMpM8ixzy8UeYMmwI/6pwj EsHMSjHhsp74Mb+JJw+l98F+24Zt5KXGo8jNkL6+KOFDf0Pr/9nI1Jg8kcNQ1f41 VRj/n2BBAdAtOYfFdAPcK2bMsh8DHajy06xDWrQL1TH+ETxr -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:19 2026 by rpki-client