$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa File: db4c71a8-97dc-378d-930c-482311834625.roa (raw, json) Hash identifier: h3zBdi28OyqU+8Zg6J4d5n72Nf4Tw3mLlO8TyBQlDXM= Subject key identifier: E5:87:08:5C:92:AB:DA:E4:22:E0:A6:48:63:55:EA:34:97:7D:90:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA57CCD5C348F2F9061500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396582 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:57:cc:d5:c3:48:f2:f9:06:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=fe38148c-127a-46a8-b76e-bc9ae930b946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:ef:62:3a:f8:59:3e:c7:9c:6b:1c:3d:75: 09:c6:eb:05:8e:95:28:41:2f:d4:26:a1:4a:77:cb: 02:ac:38:71:fa:e2:91:25:39:3e:2a:64:d5:b4:84: 34:f2:59:9b:9b:74:69:30:33:e0:78:0e:51:06:68: cf:cc:c0:a2:14:7f:66:b9:30:6a:48:54:9a:0a:e0: ed:28:9c:e9:3c:e0:a5:02:76:65:57:42:45:e2:e9: d9:2f:a8:a7:8b:e7:ec:8a:fc:11:f8:1d:5d:c9:87: b3:8f:66:28:fb:56:41:c3:7c:d4:31:f5:29:f3:05: 2f:bb:51:d8:56:8b:a7:d1:91:7d:d1:a2:6f:55:32: de:eb:e0:ee:06:82:d6:32:24:b5:e1:32:df:a4:a4: f0:0b:81:b8:02:2e:ab:ef:43:2c:af:74:f9:c8:da: 37:89:c8:27:c9:8e:67:44:d6:6a:bb:69:33:07:b0: 38:41:fa:59:6c:d7:c9:27:9d:46:d9:2d:30:eb:1d: f2:24:7d:24:dc:6f:62:87:5b:2b:2a:f4:af:87:42: e1:d4:bb:79:bc:3e:b6:ab:32:9d:8e:bd:03:93:fc: 11:1a:c3:35:19:81:5c:4e:68:7d:52:61:fc:ff:90: 70:33:fb:30:3e:af:98:04:4c:a8:c0:9d:ca:91:43: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:08:5C:92:AB:DA:E4:22:E0:A6:48:63:55:EA:34:97:7D:90:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4c71a8-97dc-378d-930c-482311834625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b2:94:49:16:48:77:2a:c6:79:3c:28:f1:3d:58:d0:9a:c5: 0a:20:84:4b:d3:e9:c1:b9:9c:c0:ef:dc:7e:90:76:41:ff:b6: fd:1b:68:49:7b:64:15:46:9d:c2:06:9b:cc:bd:82:43:78:a2: b2:34:14:a8:12:d5:76:31:81:a9:1d:6d:04:11:3d:69:98:d8: b2:79:3a:9d:57:e2:91:b2:26:1b:21:70:2d:57:37:aa:b6:8c: af:01:9d:04:dd:ab:e1:ab:8f:47:52:ef:27:ae:10:d6:07:47: 1d:21:3b:7e:00:b0:0f:45:6c:c5:7f:cc:68:18:7d:80:a3:93: 06:6f:81:8f:5f:73:af:be:30:e1:1a:a9:db:51:db:46:98:9a: c7:1e:14:c7:e5:3e:f6:9b:ab:8a:9d:c7:09:fd:f1:e7:bd:0d: 4b:55:df:1c:e4:f8:fb:35:84:ac:25:e0:2b:69:a3:d5:2b:d8: 15:65:42:2c:5e:fd:07:64:87:f0:2a:c5:17:a6:05:18:53:ee: c2:f0:17:e1:a2:dc:a0:ed:34:a5:d1:52:fa:e7:72:6b:a5:76: 34:51:13:e1:94:98:f5:8b:55:2b:b1:9c:3c:a4:1f:9e:9d:a4: 2a:e2:89:ab:a2:4a:d7:0e:49:d8:04:e0:e7:c2:2e:f3:48:f5: 6f:3c:9b:fb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lfM1cNI8vkGFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZmUzODE0OGMtMTI3YS00NmE4LWI3NmUtYmM5YWU5MzBiOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvvYjr4WT7HnGscPXUJxusFjpUoQS/UJqFK d8sCrDhx+uKRJTk+KmTVtIQ08lmbm3RpMDPgeA5RBmjPzMCiFH9muTBqSFSaCuDt KJzpPOClAnZlV0JF4unZL6ini+fsivwR+B1dyYezj2Yo+1ZBw3zUMfUp8wUvu1HY Voun0ZF90aJvVTLe6+DuBoLWMiS14TLfpKTwC4G4Ai6r70Msr3T5yNo3icgnyY5n RNZqu2kzB7A4QfpZbNfJJ51G2S0w6x3yJH0k3G9ih1srKvSvh0Lh1Lt5vD62qzKd jr0Dk/wRGsM1GYFcTmh9UmH8/5BwM/swPq+YBEyowJ3KkUM+vQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOWHCFySq9rkIuCmSGNV6jSXfZBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0YzcxYTgtOTdkYy0z NzhkLTkzMGMtNDgyMzExODM0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5spRJFkh3KsZ5PCjxPVjQmsUKIIRL0+nBuZzA 79x+kHZB/7b9G2hJe2QVRp3CBpvMvYJDeKKyNBSoEtV2MYGpHW0EET1pmNiyeTqd V+KRsiYbIXAtVzeqtoyvAZ0E3avhq49HUu8nrhDWB0cdITt+ALAPRWzFf8xoGH2A o5MGb4GPX3OvvjDhGqnbUdtGmJrHHhTH5T72m6uKnccJ/fHnvQ1LVd8c5Pj7NYSs JeAraaPVK9gVZUIsXv0HZIfwKsUXpgUYU+7C8Bfhotyg7TSl0VL653JrpXY0URPh lJj1i1UrsZw8pB+enaQq4omrokrXDknYBODnwi7zSPVvPJv7 -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:22 2026 by rpki-client