$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa File: c18df09f-db93-3dac-865e-7280d1e2718e.roa (raw, json) Hash identifier: c9UrN87aArQFT9b/V+DbMky768nIfXpEwWMpRTcJzFA= Subject key identifier: D4:3E:0E:1C:5D:A6:95:5A:F3:4F:B2:F2:09:47:AF:57:B8:D1:10:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5F59610C03616B184908 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396563 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5f:59:61:0c:03:61:6b:18:49:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a5a03cc7-480f-4758-892e-c5e7414ef2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:57:10:12:1c:2e:4d:aa:d4:cf:1b:50:4b: 4d:8e:47:be:1e:54:6f:51:92:94:b6:ba:c6:6d:35: 9e:8c:ff:cf:47:54:a1:e5:14:27:98:5f:08:3a:8a: d5:9a:36:d6:93:71:21:5e:75:0b:4b:4b:2d:25:6f: 71:0d:8c:45:4c:85:c5:b8:d5:e6:8c:14:ef:0c:38: d0:ca:9d:46:46:60:20:1c:a7:60:ae:33:9d:5d:ec: 7f:e2:76:07:51:29:6f:8f:56:25:05:53:64:f7:a2: 81:73:eb:ed:f7:28:20:f7:46:ea:f9:f9:e9:af:bf: 2c:76:c1:ed:77:4b:11:f7:1d:c1:0c:77:8d:1e:54: de:75:07:bc:81:a7:b6:5a:62:b6:9e:b3:eb:15:14: d0:66:3c:d7:f0:48:e7:c2:64:fa:48:49:56:38:87: 8e:80:fa:e0:88:34:32:da:23:f4:30:df:18:5b:ec: 49:3d:96:fc:b2:c2:3b:fd:10:1b:50:d2:0a:a9:7b: b3:df:9a:3c:ac:e6:ea:0e:e2:af:36:74:5e:f9:ae: f6:7f:d2:28:0a:12:b8:78:cd:ce:05:7c:2b:dc:96: 3b:63:4c:5d:6f:f0:a9:de:66:00:50:8d:ba:3e:31: 55:0d:eb:83:5c:36:99:8c:fc:83:14:35:47:54:87: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3E:0E:1C:5D:A6:95:5A:F3:4F:B2:F2:09:47:AF:57:B8:D1:10:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c18df09f-db93-3dac-865e-7280d1e2718e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d4:f9:bd:c4:26:66:bb:8f:1c:fa:78:f0:97:34:43:10:52: f2:a1:2a:36:ad:6f:c4:d7:53:27:e8:8b:0d:61:c9:11:3e:8f: 1b:41:f2:eb:7c:5a:5b:04:d2:fd:b5:30:3e:46:d6:15:0d:b3: 79:b0:d8:f0:95:67:53:18:45:bb:8e:ab:6c:5a:0e:bc:c9:73: d0:a1:a6:5e:fe:eb:3d:08:0c:e1:8e:9e:76:cc:22:34:1c:06: 9c:24:75:60:4b:40:d2:e8:38:27:bc:d3:e4:bb:ce:5e:a5:27: 95:1e:f7:6f:62:f3:5b:2b:f2:ca:6f:f2:c5:de:42:91:cc:69: af:62:34:4d:6d:8d:69:07:3b:20:92:76:40:89:06:cb:ad:b9: be:4e:b7:e7:98:56:78:6a:7a:0c:7b:c7:1c:39:5c:0b:a1:47: 10:90:34:07:7d:9c:a0:33:ec:2c:2f:ca:45:17:91:1b:02:93: 72:25:2c:69:68:74:38:44:c0:18:20:52:6a:d7:97:e7:8f:af: 5d:e7:8b:6b:4f:a6:26:c7:fc:14:a1:5f:12:a1:8b:dc:80:6f: 1b:4b:96:de:78:76:df:a9:81:4e:22:09:53:c5:9e:6c:09:57: 2b:e3:66:b4:4a:72:01:b7:1a:c8:d7:02:e7:90:9d:59:02:92: a1:1a:c5:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l9ZYQwDYWsYSQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTVhMDNjYzctNDgwZi00NzU4LTg5MmUtYzVlNzQxNGVmMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTJXEBIcLk2q1M8bUEtNjke+HlRvUZKUtrrG bTWejP/PR1Sh5RQnmF8IOorVmjbWk3EhXnULS0stJW9xDYxFTIXFuNXmjBTvDDjQ yp1GRmAgHKdgrjOdXex/4nYHUSlvj1YlBVNk96KBc+vt9ygg90bq+fnpr78sdsHt d0sR9x3BDHeNHlTedQe8gae2WmK2nrPrFRTQZjzX8EjnwmT6SElWOIeOgPrgiDQy 2iP0MN8YW+xJPZb8ssI7/RAbUNIKqXuz35o8rObqDuKvNnRe+a72f9IoChK4eM3O BXwr3JY7Y0xdb/Cp3mYAUI26PjFVDeuDXDaZjPyDFDVHVIf3vQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNQ+DhxdppVa80+y8glHr1e40RB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzE4ZGYwOWYtZGI5My0z ZGFjLTg2NWUtNzI4MGQxZTI3MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBk1Pm9xCZmu48c+njwlzRDEFLyoSo2rW/E11Mn 6IsNYckRPo8bQfLrfFpbBNL9tTA+RtYVDbN5sNjwlWdTGEW7jqtsWg68yXPQoaZe /us9CAzhjp52zCI0HAacJHVgS0DS6DgnvNPku85epSeVHvdvYvNbK/LKb/LF3kKR zGmvYjRNbY1pBzsgknZAiQbLrbm+TrfnmFZ4anoMe8ccOVwLoUcQkDQHfZygM+ws L8pFF5EbApNyJSxpaHQ4RMAYIFJq15fnj69d54trT6Ymx/wUoV8SoYvcgG8bS5be eHbfqYFOIglTxZ5sCVcr42a0SnIBtxrI1wLnkJ1ZApKhGsWO -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:26 2026 by rpki-client