$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa File: d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa (raw, json) Hash identifier: 3QvrZ5UicZheT2ymd2XNdIoDKgihjMyIt0c9ECSXBLE= Subject key identifier: 2D:51:70:D6:B1:EB:34:E7:A4:4C:06:0A:7F:1A:CE:33:6B:2C:89:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A5BCF84F785A307264D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396571 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5b:cf:84:f7:85:a3:07:26:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=25af4ce5-c5dd-4170-85b2-f6c70484c2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:78:ca:75:7b:67:06:2a:5d:5e:74:25:87: 31:07:16:1c:bc:6a:8c:27:89:2c:c6:db:23:94:eb: 73:7f:3b:2f:36:b3:80:27:5a:e5:65:02:0a:a0:49: 4d:a3:24:04:cc:2c:43:ca:d3:37:c0:94:69:3f:f8: 62:78:43:9d:b8:4f:7c:12:ae:c5:d1:c4:b5:e5:7c: 6e:1b:79:3e:c4:4a:24:0a:be:b0:4c:32:9c:ed:ec: e2:74:2a:6f:97:d9:bd:58:4e:ee:2a:0f:df:d4:cb: b7:02:de:86:cb:ae:93:0b:c6:e0:46:19:39:94:79: 17:be:10:98:d6:12:42:a6:e2:9e:32:bd:c4:2a:63: b0:ea:89:a7:48:fe:52:a2:e9:0d:48:47:43:20:a2: 3f:30:3c:38:56:b5:20:66:12:38:e6:31:da:62:41: e4:2b:d2:83:15:42:4b:bc:12:25:6d:b3:a5:16:14: 6c:a6:9f:29:e8:0f:17:3a:5c:52:0b:41:ff:6d:c3: 8c:84:a1:64:41:da:24:6d:2c:79:96:a3:a1:fb:23: b1:90:7c:1c:c5:77:4d:76:6d:28:14:8a:a7:e7:75: b1:1f:fc:d6:84:9f:20:7e:b4:b9:9c:6e:9b:12:61: 4b:08:95:d3:23:6c:90:52:d5:a1:cd:8d:d3:5d:1b: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:51:70:D6:B1:EB:34:E7:A4:4C:06:0A:7F:1A:CE:33:6B:2C:89:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:22:44:e9:17:1d:3b:07:60:d2:d6:ef:1e:fc:a2:f5:dc:b2: 8c:01:f0:47:c6:ce:e3:c4:88:59:42:04:b5:34:cd:c8:f1:7b: 26:64:4a:fb:02:c5:ad:13:4c:84:60:80:b4:4e:8e:8b:8b:96: 17:c0:e3:a6:95:80:bf:cd:03:35:98:bc:b8:b6:14:82:29:79: e0:4c:2c:8c:76:4a:0f:67:1a:1f:0b:dc:1a:6b:27:29:ea:ee: a2:9c:39:66:95:55:47:23:c5:26:65:7f:65:8b:58:8e:e0:8d: 9a:22:c9:fa:89:3c:25:22:65:00:91:35:49:2a:cb:c0:45:cf: e3:5c:98:f6:e0:dc:c8:9e:1a:41:70:4e:3c:68:18:a5:1b:44: 5d:6a:38:97:e2:45:ef:d7:bf:04:72:35:c2:c4:be:9e:d4:db: c2:f3:49:6d:24:24:19:c0:4e:9e:6b:c3:ac:3a:e0:86:81:6a: dd:4c:68:16:7b:f7:14:fb:7f:96:cb:dd:3b:41:bb:bd:af:30: 17:5a:da:04:64:3f:1e:d6:de:00:a9:b1:ea:bf:c6:d5:12:75: 99:7b:80:55:31:cf:18:c8:97:f3:35:2c:43:6a:5d:79:45:18: b4:68:6b:21:01:f7:15:ce:f7:5b:87:73:9b:34:85:31:c5:1d: 42:d5:f1:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jelvPhPeFowcmTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjVhZjRjZTUtYzVkZC00MTcwLTg1YjItZjZjNzA0ODRjMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGl4ynV7ZwYqXV50JYcxBxYcvGqMJ4ksxtsj lOtzfzsvNrOAJ1rlZQIKoElNoyQEzCxDytM3wJRpP/hieEOduE98Eq7F0cS15Xxu G3k+xEokCr6wTDKc7ezidCpvl9m9WE7uKg/f1Mu3At6Gy66TC8bgRhk5lHkXvhCY 1hJCpuKeMr3EKmOw6omnSP5SoukNSEdDIKI/MDw4VrUgZhI45jHaYkHkK9KDFUJL vBIlbbOlFhRspp8p6A8XOlxSC0H/bcOMhKFkQdokbSx5lqOh+yOxkHwcxXdNdm0o FIqn53WxH/zWhJ8gfrS5nG6bEmFLCJXTI2yQUtWhzY3TXRv4ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1RcNax6zTnpEwGCn8azjNrLIkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdlYjUyZjQtN2Q3Mi0z Y2U1LTk0MWQtMDViNjY5NjY3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGAiROkXHTsHYNLW7x78ovXcsowB8EfGzuPEiFlCBLU0zcjxeyZk SvsCxa0TTIRggLROjouLlhfA46aVgL/NAzWYvLi2FIIpeeBMLIx2Sg9nGh8L3Bpr Jynq7qKcOWaVVUcjxSZlf2WLWI7gjZoiyfqJPCUiZQCRNUkqy8BFz+NcmPbg3Mie GkFwTjxoGKUbRF1qOJfiRe/XvwRyNcLEvp7U28LzSW0kJBnATp5rw6w64IaBat1M aBZ79xT7f5bL3TtBu72vMBda2gRkPx7W3gCpseq/xtUSdZl7gFUxzxjIl/M1LENq XXlFGLRoayEB9xXO91uHc5s0hTHFHULV8YQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:15 2026 by rpki-client