$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa File: d1339690-fae2-352a-817d-0b7324d5b594.roa (raw, json) Hash identifier: ln0apx60n7gf/xG2KRZXmE+ZK79pPeGC4eYmW+AwNM8= Subject key identifier: 75:99:60:71:75:F1:EC:E9:B2:9A:06:73:F9:48:AB:44:71:7A:5A:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A1FA8973313ECB2E23F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 32651 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1f:a8:97:33:13:ec:b2:e2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=3acd7aba-f565-4842-bc51-a0aaa7dbc090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:c1:68:02:13:c9:d6:3f:6e:93:1a:b0:e6: c9:69:47:f8:18:e5:21:88:a9:db:ca:09:65:26:d8: 0b:40:71:60:dd:14:d8:9c:5d:56:c9:f8:14:4b:5c: d4:6b:a5:66:3b:8a:b6:39:91:06:7c:6a:c5:c4:9b: e9:de:35:b8:20:bd:db:55:ca:cb:3e:09:a4:97:ec: 85:18:86:32:4d:fb:38:dd:02:33:b8:e8:c9:8b:20: 7d:05:36:47:dc:07:63:dc:8f:be:50:c8:65:19:04: 1b:52:1e:b5:90:7f:5d:6d:51:78:21:fc:e2:b7:30: eb:7f:89:c8:1c:9d:c7:b9:87:17:71:80:61:97:01: 61:ca:5b:75:dc:48:b2:0d:95:a3:72:c3:4d:c5:d7: 7d:e6:b8:7a:46:09:84:37:cb:7d:0c:90:b6:03:1a: e1:3c:ad:5f:e0:c6:ac:47:fb:64:f9:a9:e1:b1:ad: c3:6e:46:d3:d6:44:f9:0d:ed:b6:6d:67:21:e7:42: e3:0e:27:d4:5b:fb:c5:3a:ad:d3:1a:85:bc:f7:f7: 9d:db:55:d9:49:b4:a1:53:96:25:fd:57:4d:f3:11: 84:e5:ae:85:d5:f0:41:2f:e1:42:5f:00:b4:9d:25: b4:12:bc:34:85:03:a0:b8:86:d5:1b:8c:d7:4d:f8: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:99:60:71:75:F1:EC:E9:B2:9A:06:73:F9:48:AB:44:71:7A:5A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:06:4f:5b:4f:54:f1:d4:9c:49:f2:8c:44:44:71:ae:4b:2e: 2f:12:af:4b:d3:b0:f8:96:fa:16:27:bb:0d:98:58:e1:e5:68: 7b:4d:0b:77:92:ab:3a:13:1d:eb:f4:c9:e6:00:08:e8:80:cd: 03:32:d1:a5:8e:9a:2c:3c:f7:d6:e1:fb:a4:a3:6c:de:25:62: d6:2e:8f:5f:34:7d:9e:6d:3c:0c:83:61:54:fd:00:0f:83:25: 2a:72:15:86:37:1a:e5:db:5f:cb:32:43:11:54:bf:cf:ab:1b: 26:9a:08:16:ab:27:f6:39:7c:2e:1b:4e:6c:88:36:94:d5:a6: 31:fa:f5:ca:8b:18:f6:d6:b4:5d:2b:65:08:40:f2:bd:7c:4d: 98:ea:da:b8:f2:f4:c8:c4:64:36:78:ad:03:7c:a8:cb:1f:9d: 60:ed:4b:0a:6d:60:6c:6b:b4:db:95:ea:4c:11:24:3f:2f:4e: 13:f7:57:f1:a1:37:97:df:d0:ac:95:53:eb:37:eb:a1:a7:16: 48:55:b7:69:bc:95:7b:eb:ee:57:e5:b0:83:63:ce:f1:70:5a: 72:13:66:04:ab:58:36:37:16:2e:f5:22:43:0b:e7:8b:1c:b8: f3:b4:ff:c5:c4:7b:ea:fb:e0:da:bf:e5:a8:f1:41:ff:f5:72: c7:a0:90:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeh+olzMT7LLiPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk M2FjZDdhYmEtZjU2NS00ODQyLWJjNTEtYTBhYWE3ZGJjMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48fBaAITydY/bpMasObJaUf4GOUhiKnbygll JtgLQHFg3RTYnF1WyfgUS1zUa6VmO4q2OZEGfGrFxJvp3jW4IL3bVcrLPgmkl+yF GIYyTfs43QIzuOjJiyB9BTZH3Adj3I++UMhlGQQbUh61kH9dbVF4IfzitzDrf4nI HJ3HuYcXcYBhlwFhylt13EiyDZWjcsNNxdd95rh6RgmEN8t9DJC2AxrhPK1f4Mas R/tk+anhsa3DbkbT1kT5De22bWch50LjDifUW/vFOq3TGoW89/ed21XZSbShU5Yl /VdN8xGE5a6F1fBBL+FCXwC0nSW0Erw0hQOguIbVG4zXTfiGxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHWZYHF18ezpspoGc/lIq0RxelrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDEzMzk2OTAtZmFlMi0z NTJhLTgxN2QtMGI3MzI0ZDViNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI8GT1tPVPHUnEnyjEREca5LLi8Sr0vTsPiW+hYnuw2YWOHlaHtN C3eSqzoTHev0yeYACOiAzQMy0aWOmiw899bh+6SjbN4lYtYuj180fZ5tPAyDYVT9 AA+DJSpyFYY3GuXbX8syQxFUv8+rGyaaCBarJ/Y5fC4bTmyINpTVpjH69cqLGPbW tF0rZQhA8r18TZjq2rjy9MjEZDZ4rQN8qMsfnWDtSwptYGxrtNuV6kwRJD8vThP3 V/GhN5ff0KyVU+s366GnFkhVt2m8lXvr7lflsINjzvFwWnITZgSrWDY3Fi71IkML 54scuPO0/8XEe+r74Nq/5ajxQf/1csegkMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:09 2026 by rpki-client