$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa File: cac6065a-0aca-3b0e-913b-79eb92e707e9.roa (raw, json) Hash identifier: SAC+ZVjvT4nMBuVmL5Ikj1zUUxialc6AkapFx4+7L94= Subject key identifier: 66:D2:14:C3:EB:03:E6:C0:F6:42:8A:9B:9F:98:4A:03:93:DF:93:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5268A2C592075167CE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396560 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:52:68:a2:c5:92:07:51:67:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=428b7a40-2759-48ec-b659-111883089e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c3:67:f5:9f:55:18:b8:fb:19:37:b2:62:30: 8e:c9:f1:15:da:3e:db:44:2e:c3:3d:86:30:d7:9a: 4a:22:ac:17:78:6e:b6:cf:43:14:f5:46:5a:33:70: c6:6e:2f:56:47:ae:59:27:79:b1:9f:79:ff:3d:ec: 7c:23:55:30:09:0e:6c:ca:78:67:c5:60:15:a1:e4: 2a:8f:19:55:bc:8b:5d:9b:f6:65:df:46:97:44:4c: 22:58:89:8f:54:16:5e:a3:28:4e:17:d5:ba:2b:70: 02:37:79:dc:9f:6d:d1:09:5c:b1:a8:e3:2d:80:6e: 64:dd:7e:00:c6:df:fe:15:db:ad:f9:d4:9f:92:4b: 9c:61:c3:84:c6:fe:72:2c:8d:a0:8c:15:a1:d9:58: 65:ad:9a:e0:60:b6:0b:ae:3c:a2:a9:5a:96:e9:09: 83:f6:ce:c3:4a:16:01:43:a0:13:00:f4:e8:01:fb: 93:1e:11:f9:1f:55:40:46:67:27:05:5e:48:73:e9: af:2e:44:20:42:93:6c:28:07:6f:f9:d5:ce:83:03: 48:3a:be:43:35:f3:1e:1f:53:e5:c4:96:21:3d:2e: 81:0f:c7:19:28:b0:70:59:33:06:8d:54:77:b0:d0: 50:5c:6a:7c:e2:ea:f1:48:87:85:24:4f:a7:27:fa: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D2:14:C3:EB:03:E6:C0:F6:42:8A:9B:9F:98:4A:03:93:DF:93:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cac6065a-0aca-3b0e-913b-79eb92e707e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:96:d4:01:97:e4:a8:2f:bd:02:32:0e:4d:18:e1:a0:50:a6: 25:58:67:f5:e9:45:b9:04:85:00:b3:d7:ae:67:9e:19:c7:20: aa:0d:42:0e:2c:21:6a:82:a4:30:88:8c:43:40:49:8f:be:2c: 84:f6:75:f0:9a:07:46:9a:e9:7b:4d:58:1e:8f:17:70:7b:80: 16:ff:f7:5f:ac:14:9b:6a:94:1c:42:0c:61:bf:1b:07:f1:71: fe:6d:32:7c:66:4b:9d:de:d7:b9:b4:22:5e:07:d4:0a:d7:86: da:46:ba:8c:b4:70:39:c1:ab:f8:45:93:a7:ea:c9:68:68:04: aa:8c:fc:fd:a6:10:46:b6:e7:a8:4f:30:04:74:17:d8:62:5e: d4:33:64:88:c3:6d:d9:e8:ef:ca:08:2e:80:1b:23:db:2c:d2: fe:c2:25:70:2f:53:96:28:f9:fc:49:a0:ac:88:db:08:56:6b: b7:6e:13:f3:fc:d1:a5:00:8b:e1:81:96:13:46:86:79:d0:34: 18:fd:c0:00:ba:aa:d6:cd:78:a7:f7:a1:e8:9d:ef:6b:65:fa: b2:d1:c0:e2:23:98:49:81:33:77:57:eb:ec:dd:88:e0:12:81: d0:5d:73:81:57:af:62:58:f5:ee:c1:d0:72:6d:16:ac:bd:e2: 6f:bc:fc:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lJoosWSB1FnzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDI4YjdhNDAtMjc1OS00OGVjLWI2NTktMTExODgzMDg5ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsNn9Z9VGLj7GTeyYjCOyfEV2j7bRC7DPYYw 15pKIqwXeG62z0MU9UZaM3DGbi9WR65ZJ3mxn3n/Pex8I1UwCQ5synhnxWAVoeQq jxlVvItdm/Zl30aXREwiWImPVBZeoyhOF9W6K3ACN3ncn23RCVyxqOMtgG5k3X4A xt/+Fdut+dSfkkucYcOExv5yLI2gjBWh2VhlrZrgYLYLrjyiqVqW6QmD9s7DShYB Q6ATAPToAfuTHhH5H1VARmcnBV5Ic+mvLkQgQpNsKAdv+dXOgwNIOr5DNfMeH1Pl xJYhPS6BD8cZKLBwWTMGjVR3sNBQXGp84urxSIeFJE+nJ/q8cwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGbSFMPrA+bA9kKKm5+YSgOT35MZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FjNjA2NWEtMGFjYS0z YjBlLTkxM2ItNzllYjkyZTcwN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrltQBl+SoL70CMg5NGOGgUKYlWGf16UW5BIUA s9euZ54ZxyCqDUIOLCFqgqQwiIxDQEmPviyE9nXwmgdGmul7TVgejxdwe4AW//df rBSbapQcQgxhvxsH8XH+bTJ8Zkud3te5tCJeB9QK14baRrqMtHA5wav4RZOn6slo aASqjPz9phBGtueoTzAEdBfYYl7UM2SIw23Z6O/KCC6AGyPbLNL+wiVwL1OWKPn8 SaCsiNsIVmu3bhPz/NGlAIvhgZYTRoZ50DQY/cAAuqrWzXin96Hone9rZfqy0cDi I5hJgTN3V+vs3YjgEoHQXXOBV69iWPXuwdBybRasveJvvPzd -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:20 2026 by rpki-client