$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa File: c64404b8-c682-3274-8b46-28094b19f77f.roa (raw, json) Hash identifier: XjfteDSXDFuksJrVVdre1kD3BhIP7bQaYm3fhMJl0p0= Subject key identifier: DE:F7:6F:3A:41:32:32:F1:9D:B8:DD:29:FD:04:7E:C9:46:6F:AF:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D386A3FBD3B553E568F4FCAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 0 IP address blocks: 2620:74:c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3f:bd:3b:55:3e:56:8f:4f:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=c9d3f7b3-2523-4027-8ad0-dfa21e13de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:16:42:d8:3d:4e:6a:ee:42:34:91:1b:8a: 6f:c9:5d:d7:dc:b0:90:2a:e1:5c:bc:bf:b8:5f:b1: 36:ac:0e:7a:e9:f7:39:9a:20:1f:03:3b:8b:4c:14: 68:f1:43:1d:d3:95:1b:fd:87:a5:63:df:68:18:f2: 3d:dd:9c:60:44:78:e3:69:69:b2:dc:1e:92:33:11: 0e:32:34:e5:f7:27:d4:25:23:1a:fc:89:b1:10:36: dc:76:16:49:99:27:6b:77:c3:ec:da:25:f7:4d:51: bf:e7:79:e9:42:6b:c6:4d:c5:e1:cd:7e:2b:4f:18: c0:d4:ee:ab:7a:1d:52:0b:25:d7:56:41:38:55:de: c2:e3:20:6a:d0:71:87:e8:18:eb:1d:19:f6:5c:6a: d5:3d:63:2a:b2:9b:60:87:77:48:a8:6b:89:c0:74: bd:56:53:7f:66:da:98:eb:bf:fe:e5:ba:7e:0a:4a: ab:80:85:a4:59:16:a3:99:a1:8f:b8:87:b5:e1:3a: a9:2a:44:b5:c9:dc:4c:74:5b:74:a6:cb:f4:6a:4d: c0:3f:e9:5a:bc:12:92:b1:83:2a:21:57:ec:86:28: 01:7d:61:41:38:3e:cb:ca:16:40:db:5f:b7:8c:f2: 72:84:89:9a:a2:42:e6:13:da:3d:34:cd:6f:26:33: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F7:6F:3A:41:32:32:F1:9D:B8:DD:29:FD:04:7E:C9:46:6F:AF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c64404b8-c682-3274-8b46-28094b19f77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ce:93:a6:0a:19:e6:f2:2c:01:b7:b8:66:e4:b2:94:6b:52: 06:50:bf:c9:34:02:c7:da:be:0e:a7:30:c4:0d:80:a1:11:94: b7:96:8c:cb:8b:a6:db:35:65:ec:2f:6d:bb:a4:89:fd:f9:c3: 71:65:79:7a:3b:4d:2f:b2:f3:0a:2d:ad:ea:5e:31:03:a1:c8: 37:2a:58:4e:09:ce:c6:77:75:7e:67:66:1b:a5:9b:f3:04:b8: f4:11:c1:f8:25:96:13:69:f4:40:98:c4:28:a6:07:5c:72:7a: 71:76:cd:95:59:01:87:30:58:de:06:5c:24:40:37:5f:21:d7: 74:6b:03:a1:75:a4:f9:b1:cd:a5:78:26:c0:fb:d9:f7:0d:ea: 7f:4c:06:90:40:90:50:2c:29:9d:43:a9:04:20:7b:f4:84:5e: 20:40:14:cb:a3:62:11:c4:37:8c:62:5b:55:2f:9c:2d:14:e8: 18:3e:7b:12:f6:04:08:8c:ae:12:18:8a:93:9c:c1:28:f6:89: 59:b8:82:84:10:e5:b8:56:2c:79:43:c7:5a:bc:61:04:5f:36: 40:1d:15:c9:97:15:c2:43:de:d0:5a:25:1c:99:1e:ca:78:74: 07:33:f7:8f:e8:17:2b:c6:11:f9:cc:16:16:bc:e3:31:82:90: 04:fd:4b:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04aj+9O1U+Vo9PysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YzlkM2Y3YjMtMjUyMy00MDI3LThhZDAtZGZhMjFlMTNkZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMcWQtg9TmruQjSRG4pvyV3X3LCQKuFcvL+4 X7E2rA566fc5miAfAzuLTBRo8UMd05Ub/YelY99oGPI93ZxgRHjjaWmy3B6SMxEO MjTl9yfUJSMa/ImxEDbcdhZJmSdrd8Ps2iX3TVG/53npQmvGTcXhzX4rTxjA1O6r eh1SCyXXVkE4Vd7C4yBq0HGH6BjrHRn2XGrVPWMqsptgh3dIqGuJwHS9VlN/ZtqY 67/+5bp+CkqrgIWkWRajmaGPuIe14TqpKkS1ydxMdFt0psv0ak3AP+lavBKSsYMq IVfshigBfWFBOD7LyhZA21+3jPJyhImaokLmE9o9NM1vJjMxWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN73bzpBMjLxnbjdKf0EfslGb69CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY0NDA0YjgtYzY4Mi0z Mjc0LThiNDYtMjgwOTRiMTlmNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHOk6YKGebyLAG3uGbkspRrUgZQv8k0Asfavg6nMMQNgKERlLeW jMuLpts1Zewvbbukif35w3FleXo7TS+y8wotrepeMQOhyDcqWE4JzsZ3dX5nZhul m/MEuPQRwfgllhNp9ECYxCimB1xyenF2zZVZAYcwWN4GXCRAN18h13RrA6F1pPmx zaV4JsD72fcN6n9MBpBAkFAsKZ1DqQQge/SEXiBAFMujYhHEN4xiW1UvnC0U6Bg+ exL2BAiMrhIYipOcwSj2iVm4goQQ5bhWLHlDx1q8YQRfNkAdFcmXFcJD3tBaJRyZ Hsp4dAcz94/oFyvGEfnMFha84zGCkAT9S1Q= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:53 2026 by rpki-client