$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa File: caef42fa-ca7a-38bc-b3e8-2241b351f688.roa (raw, json) Hash identifier: K7kGXH5i0egsGoK0qv5pI7XJ2FN3iKtVAVrwtVVe7v4= Subject key identifier: 61:BD:90:17:81:BF:AB:A6:DB:BF:80:A8:5A:F8:FF:96:09:4C:1D:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A207AE28466E959C80800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397209 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:20:7a:e2:84:66:e9:59:c8:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d9b06c93-2c2f-4dbd-8a01-c5304a358029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:ec:c8:3a:06:66:da:06:6c:bb:89:1c:69: 81:1b:51:23:2e:4b:c8:3d:66:9a:c0:8c:1a:91:85: c3:6f:91:b0:53:80:28:87:97:d5:8c:0d:81:31:9a: 92:f7:aa:57:7d:69:56:ed:2f:db:67:9d:4d:e7:57: 2b:1a:81:89:fd:65:e6:e7:33:e8:cf:ea:cc:51:35: f9:8f:f2:40:54:56:ea:7e:c7:d7:69:00:dc:e9:e2: bf:32:08:56:c6:cc:0f:08:92:94:9d:65:07:83:9b: 91:20:be:10:79:00:2f:f2:67:c8:49:a3:1b:d0:47: 32:c2:85:c7:6b:bb:09:13:cb:1a:ac:13:bf:ba:d5: fd:42:74:04:1d:cb:57:f7:e6:b1:c0:af:61:f3:db: 39:2f:35:21:84:cd:cd:9d:50:a5:25:41:52:dd:51: ff:be:05:6f:98:37:d0:7a:93:1b:7b:65:41:e2:63: 39:de:4c:a9:bb:36:8f:4a:76:e3:5f:49:17:0c:7b: 77:69:9f:fc:ec:29:61:4f:b6:af:ac:41:33:e7:a5: 14:0b:2c:1a:2f:5a:5e:d8:fd:3c:cb:8b:30:81:e2: 93:27:86:28:ce:a6:5f:f9:8f:c7:e1:e8:77:5b:33: 05:8f:d6:6f:34:bf:e7:93:45:68:c1:57:be:c6:d0: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BD:90:17:81:BF:AB:A6:DB:BF:80:A8:5A:F8:FF:96:09:4C:1D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caef42fa-ca7a-38bc-b3e8-2241b351f688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:67:3a:db:63:51:3c:ba:ac:34:f4:1a:e7:e9:29:65:51:78: c4:05:bb:70:5d:91:27:58:68:ed:eb:02:ff:16:e1:4c:d5:e2: 4b:ec:1f:39:2e:11:fd:8c:78:d0:8a:15:04:67:02:69:32:1f: b1:94:f8:89:cb:62:06:c5:3e:ba:7f:27:73:14:0a:4c:35:9f: 62:40:cd:69:60:09:94:a3:7e:aa:f1:78:e3:0b:da:98:52:5b: c9:14:d5:a1:19:35:94:0c:82:d8:7e:84:7d:9e:dc:46:fa:1b: 72:08:6f:d9:1f:ac:b6:d5:b4:59:f4:00:50:9b:5d:69:5d:ff: 03:a8:09:3b:e7:75:4c:19:12:0b:e1:db:c3:ff:79:82:d5:ff: e7:3c:8c:e9:fd:8c:4b:c7:a0:92:38:9f:d2:f2:ea:d9:87:64: 5a:21:c9:d8:9b:65:0a:57:54:83:9d:4a:45:68:2d:38:0e:42: c1:03:ea:09:c8:d1:e0:0b:72:8d:84:28:0a:43:3f:58:9e:87: ff:a5:e4:4c:d2:87:c9:4a:59:b3:ef:18:00:58:55:73:01:a9: eb:85:8f:89:a7:1f:1b:cd:ad:bb:af:4c:b8:0e:49:4b:fb:27: a4:0e:e8:fd:9b:c1:f3:4f:26:0f:86:5b:90:2c:5b:18:97:80: 8e:2b:0e:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiB64oRm6VnICAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDliMDZjOTMtMmMyZi00ZGJkLThhMDEtYzUzMDRhMzU4MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdzsyDoGZtoGbLuJHGmBG1EjLkvIPWaawIwa kYXDb5GwU4Aoh5fVjA2BMZqS96pXfWlW7S/bZ51N51crGoGJ/WXm5zPoz+rMUTX5 j/JAVFbqfsfXaQDc6eK/MghWxswPCJKUnWUHg5uRIL4QeQAv8mfISaMb0EcywoXH a7sJE8sarBO/utX9QnQEHctX9+axwK9h89s5LzUhhM3NnVClJUFS3VH/vgVvmDfQ epMbe2VB4mM53kypuzaPSnbjX0kXDHt3aZ/87ClhT7avrEEz56UUCywaL1pe2P08 y4swgeKTJ4YozqZf+Y/H4eh3WzMFj9ZvNL/nk0VowVe+xtBbiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGG9kBeBv6um27+AqFr4/5YJTB2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FlZjQyZmEtY2E3YS0z OGJjLWIzZTgtMjI0MWIzNTFmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFnOttjUTy6rDT0GufpKWVReMQFu3BdkSdYaO3rAv8W4UzV4kvs HzkuEf2MeNCKFQRnAmkyH7GU+InLYgbFPrp/J3MUCkw1n2JAzWlgCZSjfqrxeOML 2phSW8kU1aEZNZQMgth+hH2e3Eb6G3IIb9kfrLbVtFn0AFCbXWld/wOoCTvndUwZ Egvh28P/eYLV/+c8jOn9jEvHoJI4n9Ly6tmHZFohydibZQpXVIOdSkVoLTgOQsED 6gnI0eALco2EKApDP1ieh/+l5EzSh8lKWbPvGABYVXMBqeuFj4mnHxvNrbuvTLgO SUv7J6QO6P2bwfNPJg+GW5AsWxiXgI4rDoM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:51 2026 by rpki-client