$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa File: c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa (raw, json) Hash identifier: wOfXOaYF4ZNsML3ra6kPs/23E/IIJ1Rssbx4pnjhCNg= Subject key identifier: 63:01:89:93:3B:82:FC:1A:6D:F2:C3:56:88:F4:E3:9D:77:B5:F3:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912627E61E98C0DEBF56FA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397212 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:62:7e:61:e9:8c:0d:eb:f5:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=8b683a52-b318-4186-adc2-bdca28062d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:b5:ea:a2:f3:bc:d9:94:55:01:c9:dd:48: 04:d9:6f:1f:25:1c:28:de:95:fd:e0:b4:66:b4:23: b3:19:b7:91:f5:a4:42:5a:7f:ad:b6:da:3b:62:5c: a3:47:ca:cf:e7:b2:f9:29:2d:f1:da:93:47:b1:f8: 0e:72:73:de:c0:cb:00:6d:41:00:00:88:6c:ab:6d: a9:d4:ac:12:89:36:42:df:3f:be:17:07:7f:1a:f5: d6:bf:da:e2:5a:11:b7:bd:56:50:74:66:78:09:4d: b9:4b:d5:60:58:e3:05:e0:70:39:96:fc:1e:09:c1: 6a:21:5a:67:9b:d4:04:dd:d3:6e:1d:71:d8:15:c2: 28:48:ee:cd:ee:11:c0:61:fd:34:cc:6f:ec:d3:46: f5:9e:97:4c:ef:77:8d:8b:e3:6a:21:c0:ff:e4:4d: 3e:1a:38:06:67:dd:ae:2b:16:8a:a3:d5:ab:27:3d: 89:d0:f2:41:dd:cf:e6:35:16:01:ed:24:0b:12:c1: 7d:6d:19:32:a8:20:57:9a:0b:2c:82:0d:05:b1:17: 55:84:2e:3a:6c:23:02:8f:a6:cc:3a:3f:0f:9b:0c: a6:b9:ae:90:bb:41:42:93:af:2e:65:1d:e9:f4:8a: 6a:88:34:d5:12:18:79:e9:bd:d6:d8:28:88:11:d4: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:01:89:93:3B:82:FC:1A:6D:F2:C3:56:88:F4:E3:9D:77:B5:F3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c13a0817-11f7-3d3f-bdaa-1537d28085cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b5:a7:07:76:a9:f9:c3:75:3c:47:3c:0c:a5:6c:b2:bd:c5: bb:6f:83:b8:35:28:1a:49:8c:a9:ea:12:f2:81:6c:a5:57:42: 58:8f:c0:fb:a1:ee:a8:89:ab:53:17:26:6e:4e:c5:c0:f1:b1: 25:25:51:19:30:23:3c:53:c2:6e:b3:41:4e:e7:9f:15:6b:41: 2e:bc:a8:7a:db:99:6d:7f:12:0a:67:cc:ea:d1:e3:09:de:78: 50:fe:71:c0:70:47:64:75:72:d3:9c:74:d7:34:ff:36:35:12: 16:3e:44:e4:2e:b7:4c:2b:fa:f6:c1:51:b5:eb:6d:42:6d:56: 9c:e6:0b:11:c3:72:93:8c:73:67:0f:c8:35:cf:e7:1e:eb:b8: aa:3e:fd:1a:6a:2b:d4:40:f7:89:70:7e:e5:82:7c:00:b4:92: 72:6b:cf:09:53:76:a6:d0:ed:55:85:e0:4a:43:d4:68:28:0c: 38:22:d0:91:d8:38:d2:d6:0f:d6:aa:48:fc:35:1d:e6:ac:6b: 90:74:bd:00:f8:15:30:ac:de:65:9c:f8:31:b7:0f:9e:9c:4c: b1:5c:c6:07:6a:b2:b7:48:c7:b4:c5:29:b0:a2:a7:f1:f8:d4: 5b:fa:0b:5d:d7:6b:c7:22:e4:1c:6e:ac:d2:f5:ee:17:09:2e: b6:87:e4:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmJ+YemMDev1b6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OGI2ODNhNTItYjMxOC00MTg2LWFkYzItYmRjYTI4MDYyZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRm16qLzvNmUVQHJ3UgE2W8fJRwo3pX94LRm tCOzGbeR9aRCWn+ttto7YlyjR8rP57L5KS3x2pNHsfgOcnPewMsAbUEAAIhsq22p 1KwSiTZC3z++Fwd/GvXWv9riWhG3vVZQdGZ4CU25S9VgWOMF4HA5lvweCcFqIVpn m9QE3dNuHXHYFcIoSO7N7hHAYf00zG/s00b1npdM73eNi+NqIcD/5E0+GjgGZ92u KxaKo9WrJz2J0PJB3c/mNRYB7SQLEsF9bRkyqCBXmgssgg0FsRdVhC46bCMCj6bM Oj8Pmwymua6Qu0FCk68uZR3p9IpqiDTVEhh56b3W2CiIEdQZJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGMBiZM7gvwabfLDVoj04513tfPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzEzYTA4MTctMTFmNy0z ZDNmLWJkYWEtMTUzN2QyODA4NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACW1pwd2qfnDdTxHPAylbLK9xbtvg7g1KBpJjKnqEvKBbKVXQliP wPuh7qiJq1MXJm5OxcDxsSUlURkwIzxTwm6zQU7nnxVrQS68qHrbmW1/EgpnzOrR 4wneeFD+ccBwR2R1ctOcdNc0/zY1EhY+ROQut0wr+vbBUbXrbUJtVpzmCxHDcpOM c2cPyDXP5x7ruKo+/RpqK9RA94lwfuWCfAC0knJrzwlTdqbQ7VWF4EpD1GgoDDgi 0JHYONLWD9aqSPw1Heasa5B0vQD4FTCs3mWc+DG3D56cTLFcxgdqsrdIx7TFKbCi p/H41Fv6C13Xa8ci5BxurNL17hcJLraH5Cg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:52 2026 by rpki-client