$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa File: d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa (raw, json) Hash identifier: ih44HQQ36ks/e219oavFGaVtq7yFP9rRD6eo4uBgTl4= Subject key identifier: 23:61:89:CA:C0:0D:55:58:C0:05:EE:DF:55:48:15:09:61:83:20:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A80A84B0A622E59C66880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397212 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:80:a8:4b:0a:62:2e:59:c6:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=fab3d187-6afa-4538-9452-5c2b26f2fe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:c8:a3:05:a2:d6:99:8b:27:d2:92:41:dd: 72:ee:72:73:f5:92:86:47:ad:12:fa:09:12:3f:7b: e8:58:77:c9:70:f1:6c:97:30:fa:4d:f1:2b:c1:66: a5:8f:32:70:7c:83:8e:74:36:0f:05:15:51:6a:10: c9:6f:60:96:8c:d3:b0:b6:71:c1:b5:cd:48:5f:56: 77:73:9c:5c:88:9f:74:e4:ba:2c:bf:45:eb:c6:0f: 18:21:91:58:86:a8:13:85:ce:3a:b9:39:ec:e5:61: 12:5b:48:8c:02:f7:7a:d5:6e:31:89:e4:af:36:af: 15:9a:c4:a5:00:2f:da:45:38:c6:ee:80:78:be:81: 56:4d:5f:d1:1a:7d:32:bb:de:9b:10:45:72:b7:4a: ac:09:8f:f7:b2:dc:06:1a:be:04:5c:3f:75:e1:a2: 1d:fb:32:c4:d3:bb:09:49:11:5e:13:5d:d0:47:dd: a9:f8:22:dc:d6:67:79:80:a6:98:e0:6a:63:89:ab: 8c:0c:3f:46:57:d3:4e:21:69:b4:5d:31:e6:cc:80: 71:27:be:59:78:18:5f:06:05:d1:eb:da:1c:5b:63: 02:5c:57:89:d8:57:df:a1:af:3a:8d:d3:53:ea:83: 7a:98:ae:83:9a:f9:8f:5a:e6:ca:49:46:4d:42:26: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:61:89:CA:C0:0D:55:58:C0:05:EE:DF:55:48:15:09:61:83:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:38:37:29:57:2e:81:3f:74:47:16:94:09:16:9b:12:be:42: da:e6:99:27:e7:97:10:8f:ad:53:32:d3:df:4f:ab:80:b9:29: 45:3c:fd:ea:33:34:be:d7:31:1b:36:43:ba:6e:13:ed:62:08: c5:9d:26:ff:b5:7f:b9:c7:52:22:81:4e:05:7d:97:a8:c3:49: 67:06:90:2b:b4:d6:fe:02:a3:79:80:81:1c:cb:76:d3:46:a2: 85:10:13:60:04:27:3b:b4:38:93:01:88:d3:5f:bc:85:1c:43: 65:ed:e6:fd:7b:37:ce:a6:f1:86:a3:00:97:9e:19:61:c0:bd: 53:08:07:d6:1c:a1:2a:36:65:a8:0b:44:4e:a1:fc:97:62:33: 8d:55:82:81:14:40:7b:8e:33:a5:f0:bf:bd:20:69:44:4c:a1: 92:cf:b9:a1:e5:88:1e:ef:f9:62:87:d4:ef:bc:cd:6f:c8:a1: 23:a0:7b:06:c3:5e:1a:72:1b:b7:c5:ce:ee:86:c1:e0:87:7e: e5:ae:9f:e6:2c:f0:8b:12:49:e4:88:ec:0b:b3:59:12:dd:83: ef:9e:f7:25:7b:37:29:06:cc:72:c7:c7:3f:e0:e3:3f:fb:97: 13:51:3e:6e:df:c4:5a:42:33:6e:17:e4:e4:d4:bd:02:e8:37: ee:e9:a4:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoCoSwpiLlnGaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmFiM2QxODctNmFmYS00NTM4LTk0NTItNWMyYjI2ZjJmZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhbIowWi1pmLJ9KSQd1y7nJz9ZKGR60S+gkS P3voWHfJcPFslzD6TfErwWaljzJwfIOOdDYPBRVRahDJb2CWjNOwtnHBtc1IX1Z3 c5xciJ905Losv0Xrxg8YIZFYhqgThc46uTns5WESW0iMAvd61W4xieSvNq8VmsSl AC/aRTjG7oB4voFWTV/RGn0yu96bEEVyt0qsCY/3stwGGr4EXD914aId+zLE07sJ SRFeE13QR92p+CLc1md5gKaY4GpjiauMDD9GV9NOIWm0XTHmzIBxJ75ZeBhfBgXR 69ocW2MCXFeJ2Fffoa86jdNT6oN6mK6DmvmPWubKSUZNQiaEzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCNhicrADVVYwAXu31VIFQlhgyBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDc5NGI4NWYtZGZkMy0z MmM5LTg0ZTMtMDdiNWRmYzhmYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtODcpVy6BP3RHFpQJFpsSvkLa5pkn55cQj61T MtPfT6uAuSlFPP3qMzS+1zEbNkO6bhPtYgjFnSb/tX+5x1IigU4FfZeow0lnBpAr tNb+AqN5gIEcy3bTRqKFEBNgBCc7tDiTAYjTX7yFHENl7eb9ezfOpvGGowCXnhlh wL1TCAfWHKEqNmWoC0ROofyXYjONVYKBFEB7jjOl8L+9IGlETKGSz7mh5Yge7/li h9TvvM1vyKEjoHsGw14achu3xc7uhsHgh37lrp/mLPCLEknkiOwLs1kS3YPvnvcl ezcpBsxyx8c/4OM/+5cTUT5u38RaQjNuF+Tk1L0C6Dfu6aQT -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:49 2026 by rpki-client