$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa File: c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa (raw, json) Hash identifier: mufo/Yh4nzH+Gg4qtbVsbeVb/5W66kyzOcGfr1Bh+DU= Subject key identifier: F0:6A:76:6D:99:98:EB:2A:7A:5A:A1:E8:78:09:AF:C9:7D:C0:35:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A20C0DBAB713D4859F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 40717 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:20:c0:db:ab:71:3d:48:59:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6f8566ba-8a32-42dd-b1b9-81d0103f5f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:df:9b:04:e3:55:24:f7:6c:09:4a:24:37: 6b:5e:ee:6f:ca:89:c2:1f:cd:bc:83:9c:56:d4:82: 86:ba:4c:c6:80:93:e4:34:ca:6b:97:fe:54:52:87: 20:59:9c:55:30:68:4d:2f:90:28:e1:4f:ad:b4:43: 31:45:f2:03:f4:85:c4:2d:fb:b5:d7:84:55:8f:a6: ea:b1:85:d2:9e:88:4c:ef:04:cc:f3:21:f6:15:90: 8c:d9:9c:20:c7:6f:09:16:b1:5e:56:02:9c:c7:ec: 26:28:0e:f2:3b:8f:19:57:bf:df:f6:9c:3d:f0:63: a2:60:a2:19:b5:d8:78:2c:4a:b1:88:9a:19:9c:29: 9e:f3:30:9b:a5:c3:6b:22:76:bb:86:09:28:ac:38: c1:13:f5:a2:09:f1:42:bb:5c:82:ae:d2:ba:59:ee: d6:1b:80:5c:8f:26:44:c5:1f:f1:aa:46:29:c9:cc: 14:8f:d9:10:7d:27:72:c1:e6:a8:e8:1e:6a:79:3f: 06:2f:7f:d5:3c:b4:8a:bb:1f:4d:da:4b:10:1a:58: 31:cb:af:ef:aa:a1:56:0c:4c:b6:01:c8:cc:20:8d: 94:de:e0:ca:48:5e:c3:13:ec:24:17:2d:5e:db:61: d6:b6:37:72:dd:0f:20:d5:6d:1e:13:38:ed:96:2d: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6A:76:6D:99:98:EB:2A:7A:5A:A1:E8:78:09:AF:C9:7D:C0:35:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2b:df:61:34:ae:e7:5e:ff:7a:9c:26:98:58:7b:15:e6:30: 1a:7c:2b:90:08:1b:85:ba:3f:e5:94:fe:a4:0a:5a:51:5c:e7: 5a:e6:a6:bd:13:f6:67:78:a8:72:a8:0d:90:9f:07:5e:f2:1f: 7d:3c:7b:be:95:67:b8:bc:c4:1d:69:7f:69:89:ba:2e:74:87: e9:1f:f0:84:ab:d6:f6:ea:d9:ce:52:f0:94:03:4f:cc:92:75: 7b:e2:4e:f8:fb:31:8b:17:e5:81:e7:e0:a4:18:45:33:3d:98: 38:67:d9:c5:d6:c8:7c:c0:1a:ea:c5:6f:ce:b4:ef:82:90:cd: 16:18:a7:93:68:53:0f:11:32:9e:f7:6e:a7:e0:ad:66:75:28: c0:64:86:73:32:84:f2:bf:4d:1a:77:09:13:76:fd:96:68:18: 8d:d3:70:8d:e1:cd:f8:1d:3f:59:3c:da:c4:a4:e4:49:d5:25: 5d:36:3c:71:e2:cf:86:9b:e3:61:4f:22:d8:6d:91:9d:93:18: 3a:b8:ee:81:da:cc:ab:ca:67:f2:56:18:a7:8c:04:11:71:cb: f3:d2:d7:b7:89:fa:d7:db:7a:42:eb:bf:56:81:a7:3c:c2:25: e7:aa:cc:8a:e8:a1:12:61:b4:d6:61:8a:18:f1:a9:a1:f3:2f: 59:98:ff:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiDA26txPUhZ9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmY4NTY2YmEtOGEzMi00MmRkLWIxYjktODFkMDEwM2Y1ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ffmwTjVST3bAlKJDdrXu5vyonCH828g5xW 1IKGukzGgJPkNMprl/5UUocgWZxVMGhNL5Ao4U+ttEMxRfID9IXELfu114RVj6bq sYXSnohM7wTM8yH2FZCM2Zwgx28JFrFeVgKcx+wmKA7yO48ZV7/f9pw98GOiYKIZ tdh4LEqxiJoZnCme8zCbpcNrIna7hgkorDjBE/WiCfFCu1yCrtK6We7WG4BcjyZE xR/xqkYpycwUj9kQfSdyweao6B5qeT8GL3/VPLSKux9N2ksQGlgxy6/vqqFWDEy2 AcjMII2U3uDKSF7DE+wkFy1e22HWtjdy3Q8g1W0eEzjtli0T7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBqdm2ZmOsqelqh6HgJr8l9wDWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdjOTViY2QtOTc5YS0z YzA5LWIxNmUtNjFjNGY5MWE0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQr32E0rude/3qcJphYexXmMBp8K5AIG4W6P+WU/qQKWlFc51rm pr0T9md4qHKoDZCfB17yH308e76VZ7i8xB1pf2mJui50h+kf8ISr1vbq2c5S8JQD T8ySdXviTvj7MYsX5YHn4KQYRTM9mDhn2cXWyHzAGurFb86074KQzRYYp5NoUw8R Mp73bqfgrWZ1KMBkhnMyhPK/TRp3CRN2/ZZoGI3TcI3hzfgdP1k82sSk5EnVJV02 PHHiz4ab42FPIthtkZ2TGDq47oHazKvKZ/JWGKeMBBFxy/PS17eJ+tfbekLrv1aB pzzCJeeqzIrooRJhtNZhihjxqaHzL1mY/7w= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:00 2026 by rpki-client