$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa File: d3f2f053-4b54-3958-a759-499713d84940.roa (raw, json) Hash identifier: LFcDNk3YwDZ53D2DO+QjdcDtjQmDZXxZmFO/RWL160g= Subject key identifier: 5E:F9:B5:0D:6E:06:C6:41:08:69:03:B3:E8:C0:DE:A5:E5:5A:57:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B43C07238DF08609AC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396593 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b4:3c:07:23:8d:f0:86:09:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=7fbbea4c-0980-4716-a03e-478990dccc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:3e:9d:c8:bf:db:08:a3:17:21:18:32:c5: f5:89:69:71:90:fe:c4:ca:47:a9:65:ec:6e:f1:e5: 65:50:fe:fb:3f:e2:9f:ed:5c:91:9c:62:dc:9b:8c: 47:9d:6a:5a:0c:da:60:d0:04:7e:be:e8:d2:c5:a8: 3f:bb:05:3f:51:1f:dd:22:f7:d3:b3:6d:e2:42:27: bd:d5:22:cf:4a:31:79:e5:ad:9e:bd:24:92:5e:87: f7:1f:28:6b:43:a9:9f:18:e7:fb:f8:76:1c:08:c0: 8e:41:1d:a4:00:74:34:30:63:3d:79:8b:2b:b7:16: 8d:13:48:4d:29:53:d7:fa:94:bb:5a:5b:32:5d:3f: 5a:8b:dd:4f:6e:dd:24:80:42:4e:10:14:b5:9c:21: 88:24:be:11:95:ae:e4:02:33:33:0b:79:c1:7e:01: d0:01:0b:d6:c6:3b:bb:86:49:f5:60:29:72:33:a8: 76:3f:5b:06:ff:d9:b8:43:a0:40:d2:18:33:85:a9: 95:13:d0:ea:4c:ba:44:7f:35:cb:d5:a2:50:5e:71: f2:56:c4:e3:6a:09:7a:23:01:c1:5c:98:e9:b8:c8: 2c:51:ab:09:89:a0:78:92:51:d2:ad:0b:da:7f:2c: df:08:f3:92:79:20:06:2a:87:d5:9e:cc:a0:5e:70: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F9:B5:0D:6E:06:C6:41:08:69:03:B3:E8:C0:DE:A5:E5:5A:57:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:be:82:ca:c1:d7:11:0e:1d:c2:d3:60:30:73:37:40:83:96: de:9e:90:e6:6e:e4:6f:02:8a:70:fe:7d:8d:bd:75:73:f2:f3: 54:2c:6f:d7:f8:a4:b3:cc:33:9a:7b:dd:0f:0e:ba:ce:f6:c2: be:83:54:ae:06:31:46:51:f4:26:c7:9c:8f:c5:75:61:33:f8: 6c:06:29:fd:47:74:d8:e6:f3:cd:8b:de:34:a9:27:53:59:59: a5:37:31:87:0e:4e:9d:60:b2:ff:88:99:15:de:fd:92:f5:4c: d6:20:7f:4d:1b:5d:a7:9a:b6:42:2a:7a:34:c3:ca:25:eb:fb: 78:7b:f4:04:89:c4:eb:80:0b:71:e2:ac:4f:7e:cb:a0:bc:0f: 48:e5:cd:85:e3:db:e8:bd:04:3b:10:b7:c9:1c:10:96:6e:76: b8:3f:4a:7b:02:59:67:a3:40:e1:43:45:dc:23:9e:82:26:68: 3e:f1:8c:58:14:0f:ff:ed:c0:61:77:02:0a:52:af:3d:d5:89: 32:bd:f5:bc:52:d2:14:db:3e:64:d7:8e:9c:b0:35:68:96:87: 2e:7b:b8:a9:97:e2:db:cc:96:ce:e5:b9:44:f3:a0:56:61:ee: 84:a6:c1:83:51:8e:3a:cc:83:f0:71:2b:8b:1c:12:1e:e3:ae: 73:95:ef:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErQ8ByON8IYJrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2ZiYmVhNGMtMDk4MC00NzE2LWEwM2UtNDc4OTkwZGNjYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/k+nci/2wijFyEYMsX1iWlxkP7EykepZexu 8eVlUP77P+Kf7VyRnGLcm4xHnWpaDNpg0AR+vujSxag/uwU/UR/dIvfTs23iQie9 1SLPSjF55a2evSSSXof3HyhrQ6mfGOf7+HYcCMCOQR2kAHQ0MGM9eYsrtxaNE0hN KVPX+pS7WlsyXT9ai91Pbt0kgEJOEBS1nCGIJL4Rla7kAjMzC3nBfgHQAQvWxju7 hkn1YClyM6h2P1sG/9m4Q6BA0hgzhamVE9DqTLpEfzXL1aJQXnHyVsTjagl6IwHB XJjpuMgsUasJiaB4klHSrQvafyzfCPOSeSAGKofVnsygXnBhjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF75tQ1uBsZBCGkDs+jA3qXlWlfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNmMmYwNTMtNGI1NC0z OTU4LWE3NTktNDk5NzEzZDg0OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADm+gsrB1xEOHcLTYDBzN0CDlt6ekOZu5G8CinD+fY29dXPy81Qs b9f4pLPMM5p73Q8Ous72wr6DVK4GMUZR9CbHnI/FdWEz+GwGKf1HdNjm882L3jSp J1NZWaU3MYcOTp1gsv+ImRXe/ZL1TNYgf00bXaeatkIqejTDyiXr+3h79ASJxOuA C3HirE9+y6C8D0jlzYXj2+i9BDsQt8kcEJZudrg/SnsCWWejQOFDRdwjnoImaD7x jFgUD//twGF3AgpSrz3ViTK99bxS0hTbPmTXjpywNWiWhy57uKmX4tvMls7luUTz oFZh7oSmwYNRjjrMg/BxK4scEh7jrnOV73Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:34 2026 by rpki-client