$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa File: be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa (raw, json) Hash identifier: /NVcFk4ogFu4f/tOya2vt38BKRvSotT021vhYgDOTUE= Subject key identifier: 4B:E1:13:6B:9B:56:01:6C:A4:D7:32:0D:1D:D6:5D:71:76:31:67:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A825404413689B80E1080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 20172 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:82:54:04:41:36:89:b8:0e:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7b8b76ac-5bc9-415a-bd23-d023b491498a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:6c:b5:ac:45:08:27:87:06:be:6c:79:a3: 82:7a:de:8a:95:da:a7:6e:68:97:94:80:21:f7:8d: d6:19:d6:38:60:de:19:95:f6:6a:f5:34:b7:fb:8c: a3:c4:d7:78:d5:89:4c:da:d8:0a:c8:be:e0:c7:c5: b2:51:79:91:f1:85:dd:e1:46:bd:85:32:9d:91:85: 49:f5:bb:4c:12:90:61:53:bb:0c:89:ce:02:8c:91: 16:20:07:49:65:4f:33:e4:0c:0f:bf:e6:22:47:39: 9f:e4:a5:61:cd:32:09:d4:53:40:05:77:4a:be:9e: d4:11:13:1d:42:5d:06:ba:46:93:2b:5e:32:7f:81: dc:5a:2a:25:e8:e3:7b:74:5c:92:a4:b9:67:be:6f: a6:57:c2:ea:bb:95:87:28:c0:f8:12:e3:45:10:0f: 54:9e:2a:8d:9a:9f:24:1c:5d:d4:83:36:c4:d8:96: 94:ed:be:7e:bc:6c:ed:9a:4d:92:02:49:93:bb:33: 9b:19:ad:a8:3a:d1:96:af:f1:38:2b:4d:33:58:71: d0:c6:18:66:62:c8:32:26:6e:e5:c3:24:98:b9:00: 39:e4:cd:38:d5:67:97:09:d9:91:c8:1e:ba:05:95: 62:15:cd:51:82:e3:3e:9a:1b:98:b8:4f:b4:d1:e4: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:13:6B:9B:56:01:6C:A4:D7:32:0D:1D:D6:5D:71:76:31:67:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d0:ba:7b:e8:a6:c3:51:5b:18:f8:6a:21:c4:00:ef:17:c4: 20:1e:51:a4:ec:c2:e7:25:4f:5a:91:6a:0c:5b:9b:a6:c6:47: 3d:e9:88:3d:70:3e:f3:67:1b:29:6e:bf:52:5b:09:08:b9:38: 33:ca:cc:8b:67:d6:00:df:f7:54:b9:c3:e9:49:fe:b1:db:4d: e0:b8:aa:23:38:9c:0b:8a:fd:41:c7:da:ac:b5:95:4c:49:46: f4:0c:6c:04:3b:ea:c6:b5:e9:58:3d:cb:a0:40:45:c8:e1:be: a0:af:ca:79:4f:27:2c:07:cf:81:64:57:97:7e:ef:44:69:1a: 37:9c:68:7c:d5:a0:35:ba:b0:f4:df:fe:aa:95:be:0f:56:55: d9:f0:51:a0:96:3a:d2:99:53:24:a4:e7:d5:dc:1b:33:a5:48: 84:48:b1:f8:55:f9:53:42:fb:e2:e2:98:c8:2d:5f:39:2e:8d: ad:2f:ea:77:c2:83:85:f4:68:11:80:a9:a8:dd:63:5a:97:84: e5:21:04:8f:2b:12:db:94:02:f7:92:c9:e3:b3:31:86:80:0c: b6:9a:3c:d1:57:6d:94:21:70:c1:85:d5:ad:fb:80:83:ae:3a: 1c:14:0c:e6:ac:bd:0d:80:31:c6:f1:15:84:35:37:de:d8:df: 2f:97:86:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoJUBEE2ibgOEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2I4Yjc2YWMtNWJjOS00MTVhLWJkMjMtZDAyM2I0OTE0OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvhstaxFCCeHBr5seaOCet6KldqnbmiXlIAh 943WGdY4YN4ZlfZq9TS3+4yjxNd41YlM2tgKyL7gx8WyUXmR8YXd4Ua9hTKdkYVJ 9btMEpBhU7sMic4CjJEWIAdJZU8z5AwPv+YiRzmf5KVhzTIJ1FNABXdKvp7UERMd Ql0GukaTK14yf4HcWiol6ON7dFySpLlnvm+mV8Lqu5WHKMD4EuNFEA9UniqNmp8k HF3UgzbE2JaU7b5+vGztmk2SAkmTuzObGa2oOtGWr/E4K00zWHHQxhhmYsgyJm7l wySYuQA55M041WeXCdmRyB66BZViFc1RguM+mhuYuE+00eT+cQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEvhE2ubVgFspNcyDR3WXXF2MWcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmUxOThjN2YtNmQ3MS0z YjY2LTk2YzgtMWEzZTYxM2ZjN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCA0Lp76KbDUVsY+GohxADvF8QgHlGk7MLnJU9a kWoMW5umxkc96Yg9cD7zZxspbr9SWwkIuTgzysyLZ9YA3/dUucPpSf6x203guKoj OJwLiv1Bx9qstZVMSUb0DGwEO+rGtelYPcugQEXI4b6gr8p5TycsB8+BZFeXfu9E aRo3nGh81aA1urD03/6qlb4PVlXZ8FGgljrSmVMkpOfV3BszpUiESLH4VflTQvvi 4pjILV85Lo2tL+p3woOF9GgRgKmo3WNal4TlIQSPKxLblAL3ksnjszGGgAy2mjzR V22UIXDBhdWt+4CDrjocFAzmrL0NgDHG8RWENTfe2N8vl4ZU -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:41 2026 by rpki-client