$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa File: cea259b2-44a0-3914-b4f2-67745aa1ec38.roa (raw, json) Hash identifier: qAW2fnbIE4JQnQ9hHn/hM206DoC4Ks/wibiAg4Ts3k4= Subject key identifier: 7A:88:90:12:83:3A:51:4A:B8:72:9F:13:B8:81:01:DE:D0:78:86:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912629DDC5AADDFAABA0E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396540 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:62:9d:dc:5a:ad:df:aa:ba:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=123957c8-809b-4dd3-89c2-95bb98f2d09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:da:91:52:88:e5:0d:aa:b6:f3:53:2e:49: f6:d1:1b:17:da:0f:3e:71:7d:40:33:2c:5c:9a:82: 21:b1:41:cc:58:79:f1:26:fb:ad:f9:1d:1b:49:9d: 43:39:f9:f0:a8:76:02:89:2d:67:bf:c3:5e:df:c6: 2b:72:78:4f:be:86:e7:a4:4d:e5:e8:eb:c3:3f:51: 94:b9:69:63:65:27:6d:17:32:8a:cc:3f:1b:85:df: 93:37:1c:95:ba:61:9f:24:b5:dd:9e:09:25:e4:54: 58:05:b3:49:8c:8d:1f:61:75:33:dd:c2:97:a5:d5: 97:00:6c:c4:1f:0b:8a:6e:b4:d9:45:01:25:97:36: c9:46:44:cb:76:bb:ed:ea:b8:c1:70:d3:88:48:67: 64:ca:7c:6a:27:e7:a1:f2:8a:bb:40:60:b9:54:88: a9:9c:8b:8e:69:1e:52:29:39:7c:ed:ef:11:6f:a6: c2:14:6b:68:c7:3d:c9:25:25:bb:8e:74:1e:2f:3c: 06:f7:85:7a:07:25:fe:0c:6e:45:50:e8:6c:a4:47: 6b:cc:76:21:45:e7:78:eb:0a:0c:e3:97:f4:de:68: f7:59:d7:1a:4c:5e:7e:7a:2c:88:79:13:2b:86:d5: c3:e6:2b:67:cf:75:2e:fe:24:92:98:c5:49:d5:09: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:90:12:83:3A:51:4A:B8:72:9F:13:B8:81:01:DE:D0:78:86:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:46:cb:4c:21:99:a9:f5:89:f8:be:17:44:e4:d8:41:7e:d9: fc:76:14:50:83:a5:05:c2:44:cc:8c:f2:c6:27:48:a8:68:0b: 3d:00:7e:6f:95:2b:55:2d:aa:9a:65:8f:8f:34:c7:a7:59:9c: 3b:50:0d:49:07:5c:d8:05:5b:a8:db:0b:46:87:a3:37:f4:cb: d6:10:32:a7:72:b9:f0:2b:02:a2:4b:a0:36:96:80:7e:9c:d2: fb:cb:a0:5a:56:4f:23:2f:69:33:a4:ef:bb:5b:55:4d:1d:d4: 21:7c:9a:ff:05:1f:a3:49:6e:c1:ab:f8:df:39:57:58:97:05: d6:8c:63:42:28:88:7e:75:f2:32:d1:13:ac:72:01:18:ab:db: 10:ac:88:b7:61:8c:f7:9e:31:20:80:ea:3a:d1:13:0d:69:87: 98:42:d9:31:51:df:c9:91:3f:df:a4:ef:de:94:08:a5:67:e6: 6b:6e:8e:bd:af:92:de:58:f2:2e:23:38:12:4f:56:32:38:a7: ce:1d:c5:af:0b:8b:0e:45:22:4b:87:d8:e6:15:e4:80:94:12: b7:ab:7f:f6:1c:9b:57:4e:4a:6b:f2:39:3b:7d:f6:1d:84:27: 1e:ad:32:5f:fd:6d:14:70:e6:67:4e:a6:61:5d:98:db:2e:5f: 8b:93:2f:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmKd3Fqt36q6DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTIzOTU3YzgtODA5Yi00ZGQzLTg5YzItOTViYjk4ZjJkMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+7akVKI5Q2qtvNTLkn20RsX2g8+cX1AMyxc moIhsUHMWHnxJvut+R0bSZ1DOfnwqHYCiS1nv8Ne38YrcnhPvobnpE3l6OvDP1GU uWljZSdtFzKKzD8bhd+TNxyVumGfJLXdngkl5FRYBbNJjI0fYXUz3cKXpdWXAGzE HwuKbrTZRQEllzbJRkTLdrvt6rjBcNOISGdkynxqJ+eh8oq7QGC5VIipnIuOaR5S KTl87e8Rb6bCFGtoxz3JJSW7jnQeLzwG94V6ByX+DG5FUOhspEdrzHYhRed46woM 45f03mj3WdcaTF5+eiyIeRMrhtXD5itnz3Uu/iSSmMVJ1QlSVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHqIkBKDOlFKuHKfE7iBAd7QeIY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhMjU5YjItNDRhMC0z OTE0LWI0ZjItNjc3NDVhYTFlYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5Gy0whman1ifi+F0Tk2EF+2fx2FFCDpQXCRMyM8sYnSKhoCz0A fm+VK1Utqpplj480x6dZnDtQDUkHXNgFW6jbC0aHozf0y9YQMqdyufArAqJLoDaW gH6c0vvLoFpWTyMvaTOk77tbVU0d1CF8mv8FH6NJbsGr+N85V1iXBdaMY0IoiH51 8jLRE6xyARir2xCsiLdhjPeeMSCA6jrREw1ph5hC2TFR38mRP9+k796UCKVn5mtu jr2vkt5Y8i4jOBJPVjI4p84dxa8Liw5FIkuH2OYV5ICUErerf/Ycm1dOSmvyOTt9 9h2EJx6tMl/9bRRw5mdOpmFdmNsuX4uTL04= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:46 2026 by rpki-client