$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa File: de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa (raw, json) Hash identifier: p4ilVa18JUVEdpsgw5j42zANPLVo9nV9YpGgLQLPDHc= Subject key identifier: 0A:F3:EF:7B:D6:7E:E8:F6:2B:B7:57:1A:4E:C7:CC:FA:C1:29:A8:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA51A8B3DC7BD5818FCEE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396573 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:51:a8:b3:dc:7b:d5:81:8f:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=adfb675c-b7ec-4fd2-8df2-143fdd2c877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:a5:68:0a:3c:65:17:e0:b3:9d:33:c3:8c: 16:7e:70:1b:69:87:ae:54:ec:bd:e1:7f:07:ee:90: 0b:56:07:89:e4:4d:bb:d4:ba:b8:ef:2e:68:28:8f: 31:f3:2e:9c:5f:e5:fe:75:0b:bc:a3:be:a9:1f:72: ae:a0:3c:fa:33:0e:f4:b3:88:b8:11:d4:28:93:58: 0d:53:5a:f9:c3:50:58:68:73:08:ea:19:fa:b0:fd: 09:e9:8f:89:b3:af:7d:c7:1c:aa:97:69:26:27:0f: fd:93:f7:c8:1d:70:14:6e:76:f1:37:54:8e:44:03: c8:33:86:80:41:09:76:be:e1:4f:0f:61:ae:74:3c: 99:42:24:d5:10:16:3e:b2:d7:ce:ff:80:4b:0e:81: 5e:6b:e9:5b:8c:84:80:3f:37:35:4d:6c:f6:49:0c: 01:2f:87:f2:f0:52:5d:7b:7f:62:01:66:5f:1e:14: d2:8d:81:0a:43:dc:30:ad:9e:70:cd:10:19:19:4f: 40:eb:f1:a2:a6:e9:c6:c5:19:a0:7d:33:b3:ca:8f: b4:bd:78:a3:78:55:24:f2:5b:8e:db:52:f0:83:1a: 69:73:18:51:43:81:70:69:31:ba:1f:a9:38:aa:bd: bb:2a:3f:b7:55:d8:5a:47:91:eb:06:c7:d0:de:5b: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:EF:7B:D6:7E:E8:F6:2B:B7:57:1A:4E:C7:CC:FA:C1:29:A8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:df:cc:f2:5b:f9:eb:09:1a:f0:0d:79:ea:33:f2:67:35:3e: 65:43:35:0e:8d:e1:8f:cf:1e:22:03:1b:e4:27:c4:f6:94:a6: a3:9f:7b:6b:7e:b9:ae:6a:89:d3:9f:c5:55:2f:b2:c3:c2:be: 6f:c8:b1:d3:77:d1:7b:f1:0a:3a:bf:52:9c:ea:f3:e4:98:9a: 85:3f:8b:9e:c0:41:85:91:97:c5:c4:5a:7e:5d:8a:f2:0a:e6: 4a:43:8e:81:4f:59:b8:4b:ee:cc:f3:da:a9:b4:99:cd:9e:41: f9:a7:55:d4:08:e2:13:4e:52:50:3e:46:ee:db:95:1c:06:37: 60:3f:fd:73:7b:54:26:89:f0:3a:28:06:12:dd:1d:4c:9d:eb: f0:50:cb:ef:a4:e3:c9:5b:a6:b8:b6:d7:bd:98:dc:5c:61:29: c9:fc:d4:85:b8:06:70:39:3a:2d:ff:b3:62:ea:f2:3a:1a:93: 84:0b:21:03:13:c6:2d:30:a2:0e:6f:70:cc:25:47:1b:d2:7c: 50:21:33:93:1c:85:bd:9b:bd:ae:93:f8:03:6c:9b:d6:5d:13: f5:ea:02:8a:fa:ca:65:b3:43:67:2f:71:d6:94:63:1b:a6:40: 55:b1:38:30:b8:86:c2:c8:7c:88:3e:8d:34:ae:1c:42:a2:9e: 24:0d:8d:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lGos9x71YGPzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YWRmYjY3NWMtYjdlYy00ZmQyLThkZjItMTQzZmRkMmM4NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RClaAo8ZRfgs50zw4wWfnAbaYeuVOy94X8H 7pALVgeJ5E271Lq47y5oKI8x8y6cX+X+dQu8o76pH3KuoDz6Mw70s4i4EdQok1gN U1r5w1BYaHMI6hn6sP0J6Y+Js699xxyql2kmJw/9k/fIHXAUbnbxN1SORAPIM4aA QQl2vuFPD2GudDyZQiTVEBY+stfO/4BLDoFea+lbjISAPzc1TWz2SQwBL4fy8FJd e39iAWZfHhTSjYEKQ9wwrZ5wzRAZGU9A6/GipunGxRmgfTOzyo+0vXijeFUk8luO 21LwgxppcxhRQ4FwaTG6H6k4qr27Kj+3VdhaR5HrBsfQ3luNswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFArz73vWfuj2K7dXGk7HzPrBKaiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU1MmI3YTQtMTlhZC0z Y2VlLTk0ZGEtYWRlMzQ1OWE0ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB538zyW/nrCRrwDXnqM/JnNT5lQzUOjeGPzx4i AxvkJ8T2lKajn3trfrmuaonTn8VVL7LDwr5vyLHTd9F78Qo6v1Kc6vPkmJqFP4ue wEGFkZfFxFp+XYryCuZKQ46BT1m4S+7M89qptJnNnkH5p1XUCOITTlJQPkbu25Uc BjdgP/1ze1QmifA6KAYS3R1MnevwUMvvpOPJW6a4tte9mNxcYSnJ/NSFuAZwOTot /7Ni6vI6GpOECyEDE8YtMKIOb3DMJUcb0nxQITOTHIW9m72uk/gDbJvWXRP16gKK +spls0NnL3HWlGMbpkBVsTgwuIbCyHyIPo00rhxCop4kDY2H -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:08 2026 by rpki-client