$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d466f5e8-a434-37ac-a590-88ec33595078.roa File: d466f5e8-a434-37ac-a590-88ec33595078.roa (raw, json) Hash identifier: FTv15jOSwhM59V3dzFw/uU5NrHlTgsm/nST8zrXtsfw= Subject key identifier: 58:DB:0E:FC:4C:4C:E5:84:C9:25:72:AD:4D:4E:54:9D:55:F7:22:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AFFFA3435E324951FEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d466f5e8-a434-37ac-a590-88ec33595078.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 40647 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:af:ff:a3:43:5e:32:49:51:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=ac99e016-714b-46e6-a6eb-d2de9494a911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:cb:bf:e2:33:43:55:b7:c0:ca:31:59:3e: c0:ba:52:ba:a1:d9:36:1a:ff:1d:08:1d:97:d4:61: 64:21:d2:a1:17:16:d5:93:52:06:69:25:8e:91:03: fd:c3:e1:ea:dc:f8:84:db:2a:71:83:3b:8c:43:89: 5b:13:2e:de:9c:19:22:04:6e:d5:e1:e8:ef:af:cc: 06:55:e0:81:bf:8b:f8:f2:fc:ae:9b:16:9c:dc:10: 1b:d2:96:ea:23:d0:37:24:16:61:f7:93:9c:8d:5a: 4e:7e:28:55:16:73:82:af:20:34:4a:f1:20:77:a4: 10:ad:13:a1:71:25:60:12:fd:a6:23:30:91:c0:8d: 4e:d6:2a:32:98:ff:64:17:e6:e1:02:d3:ef:36:56: 1c:06:cf:90:c8:9d:0d:28:bb:48:4f:a3:75:37:49: ed:ba:e1:cb:6a:f7:98:c2:3a:4e:e4:97:bc:91:30: 6c:28:f7:34:34:eb:82:cb:4d:a4:c6:28:c0:86:bf: 39:6b:d9:68:7a:91:cf:88:17:ae:a4:96:a6:0c:a7: 8a:d8:d5:27:fd:57:d0:8e:59:db:6b:73:dd:4c:2a: 2c:20:0d:56:f7:61:4b:12:33:f3:16:1b:e8:5c:ab: 30:f1:3d:76:70:ab:db:e8:45:80:70:f3:93:d0:dd: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:0E:FC:4C:4C:E5:84:C9:25:72:AD:4D:4E:54:9D:55:F7:22:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d466f5e8-a434-37ac-a590-88ec33595078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a3:7c:a2:05:36:db:8b:13:e1:8e:d3:5e:a0:43:a6:6e:3f: 06:00:f8:75:47:e0:a9:de:d7:03:e5:36:b0:76:4b:02:c6:56: f6:b8:62:fd:5a:a6:05:f7:74:b0:ef:21:de:f1:d3:26:8a:1e: c8:ae:2d:62:84:fe:c7:63:d5:da:bf:a3:2b:7f:be:47:26:92: 66:bd:8f:07:de:9a:fe:23:b1:e0:d8:4e:bf:71:ed:dd:a3:b0: d6:2e:f4:01:29:11:56:93:0a:a6:e3:e4:4c:69:4c:86:0b:33: 22:a8:db:e2:9b:e6:6d:d7:43:3f:85:ab:94:53:b1:3f:e6:de: 92:e0:84:23:59:40:20:8b:8f:be:19:93:ee:bd:aa:cf:67:f4: 42:a6:e1:d6:c2:bb:dd:b6:4c:a3:75:0f:ba:8c:03:b8:ef:ca: 22:23:78:a7:0b:65:f5:3d:5e:44:9a:76:fb:c0:19:f0:17:95: a3:1d:bd:d9:3b:f3:f0:e5:cb:10:29:26:df:1f:5e:d4:95:df: 0a:a8:52:0d:72:b1:7c:ac:f9:71:36:58:e7:0a:5e:85:5b:e9: e7:a4:f5:d4:da:2e:14:67:6a:c9:3b:ac:36:33:3d:88:40:97: 2b:51:a7:5a:cc:48:0e:28:7c:e8:82:bd:42:3f:e4:8e:fa:de: e1:de:07:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a//o0NeMklR/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk YWM5OWUwMTYtNzE0Yi00NmU2LWE2ZWItZDJkZTk0OTRhOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDLLv+IzQ1W3wMoxWT7AulK6odk2Gv8dCB2X 1GFkIdKhFxbVk1IGaSWOkQP9w+Hq3PiE2ypxgzuMQ4lbEy7enBkiBG7V4ejvr8wG VeCBv4v48vyumxac3BAb0pbqI9A3JBZh95OcjVpOfihVFnOCryA0SvEgd6QQrROh cSVgEv2mIzCRwI1O1ioymP9kF+bhAtPvNlYcBs+QyJ0NKLtIT6N1N0ntuuHLaveY wjpO5Je8kTBsKPc0NOuCy02kxijAhr85a9loepHPiBeupJamDKeK2NUn/VfQjlnb a3PdTCosIA1W92FLEjPzFhvoXKsw8T12cKvb6EWAcPOT0N3N4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFjbDvxMTOWEySVyrU1OVJ1V9yLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDQ2NmY1ZTgtYTQzNC0z N2FjLWE1OTAtODhlYzMzNTk1MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6jfKIFNtuLE+GO016gQ6ZuPwYA+HVH4Kne1wPlNrB2SwLGVva4 Yv1apgX3dLDvId7x0yaKHsiuLWKE/sdj1dq/oyt/vkcmkma9jwfemv4jseDYTr9x 7d2jsNYu9AEpEVaTCqbj5ExpTIYLMyKo2+Kb5m3XQz+Fq5RTsT/m3pLghCNZQCCL j74Zk+69qs9n9EKm4dbCu922TKN1D7qMA7jvyiIjeKcLZfU9XkSadvvAGfAXlaMd vdk78/DlyxApJt8fXtSV3wqoUg1ysXys+XE2WOcKXoVb6eek9dTaLhRnask7rDYz PYhAlytRp1rMSA4ofOiCvUI/5I763uHeB8M= -----END CERTIFICATE-----Generated at Thu Mar 26 15:33:41 2026 by rpki-client