$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa File: bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa (raw, json) Hash identifier: /GmiDM4nx900+JtgxxbOxwRZunD4Ypv2afzCRlEarAQ= Subject key identifier: 93:5E:74:31:3C:53:7E:10:43:C3:2F:D2:6D:6A:35:96:20:9B:2C:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091262C08A8FC6D994BC8C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396580 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:62:c0:8a:8f:c6:d9:94:bc:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=dd32c5a9-6307-424a-b2fd-ce74c4c57e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:73:d2:99:4c:92:5e:58:e2:7f:d5:20:83: 54:45:07:45:b5:25:3b:98:1d:2d:c4:e8:ba:a5:bb: 48:bd:37:dd:2f:f8:5c:36:2b:f2:53:f8:70:75:72: 9f:b0:69:2c:39:3a:41:7a:c9:0e:b2:0f:0d:f5:a2: 5c:9b:9a:c0:97:38:5e:40:d7:a0:99:85:e3:2e:94: 26:77:e0:f9:40:f5:38:44:47:64:06:ed:cc:ed:d5: ff:8c:fe:46:29:2c:0f:9e:63:6c:fc:c8:09:6a:dc: b2:d1:2a:78:89:b6:8e:02:d2:55:b9:14:18:00:b0: 77:73:6a:e7:23:22:d5:8c:00:8c:8d:43:42:06:da: 70:1d:fc:fa:6a:d6:36:3e:c7:2a:17:a0:84:16:42: 5e:7d:05:c7:39:9a:cd:4e:91:a8:d3:cb:af:85:07: 1c:11:17:5f:1a:c2:a7:8b:95:6a:e2:dd:2f:8c:33: f6:dc:db:ce:be:d5:62:ac:45:75:b1:49:2d:55:dc: 64:6e:15:c2:74:c7:8b:b4:c9:c9:0d:5d:65:a9:d6: 9b:c2:6b:35:47:1a:80:56:f6:94:8a:ec:23:5c:6e: 8e:4b:1c:d7:e1:49:78:0d:78:a1:14:cb:28:be:1b: d3:a9:dd:e9:1f:d8:53:28:c5:8f:59:22:2a:80:6c: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5E:74:31:3C:53:7E:10:43:C3:2F:D2:6D:6A:35:96:20:9B:2C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8f:0e:ca:6f:95:3c:5b:d3:27:a2:60:e2:9d:95:a0:63:2c: 53:a1:26:e0:a9:b6:03:7a:49:e3:0a:2a:19:68:79:33:6e:ea: 96:35:a8:7d:08:8a:e5:8c:6c:e8:be:97:2e:da:dd:f9:d1:23: 57:c1:d6:c0:4e:dc:84:38:1f:d9:ad:35:9d:b5:06:19:bb:f9: f3:fc:17:a9:19:69:eb:d8:0c:e0:f7:3d:0c:d4:5a:39:23:dd: ef:ca:5b:d0:b0:38:f2:03:84:28:2e:d8:20:04:eb:ad:82:fd: 54:85:81:ed:60:02:65:37:57:0c:2b:34:7c:a1:29:8e:de:6e: bb:74:45:59:41:53:f6:bf:8d:4a:6f:1e:20:d6:7a:12:38:54: 17:1c:16:be:89:e9:37:88:13:f3:ea:b0:fd:49:d5:18:35:25: a1:de:e4:bd:67:f1:1f:97:a0:aa:e0:f9:bf:96:c8:8f:97:99: f0:3a:32:72:16:ea:e2:31:9f:fe:21:1e:34:dc:92:8d:93:09: 8d:99:87:1e:e7:19:90:5a:94:80:cb:77:6c:79:1a:45:db:51: 53:93:72:22:72:51:b2:8b:ed:9c:71:ea:4c:36:c9:5b:6f:a0: 67:de:d5:d0:41:30:ad:11:2d:16:32:d8:ac:96:6a:2e:c8:3b: 74:0a:cf:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmLAio/G2ZS8jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGQzMmM1YTktNjMwNy00MjRhLWIyZmQtY2U3NGM0YzU3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSdz0plMkl5Y4n/VIINURQdFtSU7mB0txOi6 pbtIvTfdL/hcNivyU/hwdXKfsGksOTpBeskOsg8N9aJcm5rAlzheQNegmYXjLpQm d+D5QPU4REdkBu3M7dX/jP5GKSwPnmNs/MgJatyy0Sp4ibaOAtJVuRQYALB3c2rn IyLVjACMjUNCBtpwHfz6atY2PscqF6CEFkJefQXHOZrNTpGo08uvhQccERdfGsKn i5Vq4t0vjDP23NvOvtVirEV1sUktVdxkbhXCdMeLtMnJDV1lqdabwms1RxqAVvaU iuwjXG6OSxzX4Ul4DXihFMsovhvTqd3pH9hTKMWPWSIqgGzn0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNedDE8U34QQ8Mv0m1qNZYgmywlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0YTI0N2YtYjMwYS0z YWE5LWI0MTEtNGU0NWIwYjI5NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuPDspvlTxb0yeiYOKdlaBjLFOhJuCptgN6SeMKKhloeTNu6pY1 qH0IiuWMbOi+ly7a3fnRI1fB1sBO3IQ4H9mtNZ21Bhm7+fP8F6kZaevYDOD3PQzU Wjkj3e/KW9CwOPIDhCgu2CAE662C/VSFge1gAmU3VwwrNHyhKY7ebrt0RVlBU/a/ jUpvHiDWehI4VBccFr6J6TeIE/PqsP1J1Rg1JaHe5L1n8R+XoKrg+b+WyI+XmfA6 MnIW6uIxn/4hHjTcko2TCY2Zhx7nGZBalIDLd2x5GkXbUVOTciJyUbKL7Zxx6kw2 yVtvoGfe1dBBMK0RLRYy2KyWai7IO3QKz1U= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:01 2026 by rpki-client