$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa File: df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa (raw, json) Hash identifier: wBhIrxqgr94L+yvpj7Z3p74cyyin3NTgr2aEE1Yqq78= Subject key identifier: FE:26:B2:D8:1B:54:86:C6:B3:0D:36:D6:83:BD:F1:E5:6C:DF:6A:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5E70DE1B361B8E82D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396606 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5e:70:de:1b:36:1b:8e:82:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=30b82458-0bb8-4761-8bf2-c6d02c211af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:9d:a6:b5:1d:78:bb:36:67:6e:04:4d:9f: 91:cb:ae:f2:b6:07:da:b3:04:95:d0:bb:ab:60:0c: 90:7d:62:9e:0e:e9:9c:09:14:90:9c:e2:8c:29:2a: 71:eb:34:00:6e:ae:d7:52:95:81:09:0a:b2:88:2b: cf:94:c7:8e:2d:0f:80:8f:1d:41:dd:08:39:a9:e7: 2c:16:81:89:2d:b7:8b:01:26:3e:3a:57:52:96:16: cb:28:9c:0a:65:fd:62:48:31:7a:d9:71:0c:a6:5e: 68:94:97:a1:27:46:ed:af:2e:0d:4d:62:df:95:2b: fa:8a:b2:cc:94:87:ba:0c:7b:8c:b7:ba:0e:64:11: 66:b4:b9:49:70:89:8f:44:aa:9b:56:f0:44:8e:47: d7:39:6a:c8:c6:b5:ca:0d:8f:f1:8e:49:c7:2b:86: 76:dc:17:b3:a8:7a:2c:77:30:ca:c0:2e:c0:a1:ca: de:a8:e1:f1:e3:5f:23:f7:e9:23:3a:40:79:43:62: ec:f3:23:55:f4:0a:cb:77:5a:af:69:24:2d:27:f0: d2:db:0a:70:93:01:3f:c8:52:6d:7e:2c:b0:3f:31: 8b:1d:9d:08:6e:16:e1:e8:bd:ad:7d:15:27:a4:06: 97:c3:20:e0:63:60:0d:e4:4e:be:2b:d7:a9:90:a3: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:B2:D8:1B:54:86:C6:B3:0D:36:D6:83:BD:F1:E5:6C:DF:6A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df7526a4-3c8c-3671-b6dd-1b93702a5c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f1:0c:6b:e3:1a:ad:c3:b0:f7:82:6f:b6:ad:b8:e7:05:80: 77:2e:de:c4:6b:8e:71:60:5e:8a:ed:6d:5f:03:c7:12:11:f8: ee:77:a6:c9:7e:44:b7:43:47:c8:a1:1f:94:d4:f9:88:66:ce: 64:6a:92:60:7e:85:af:90:b8:56:5b:35:83:c8:cf:b9:5d:26: cb:3a:37:9b:3b:69:6f:d3:84:12:da:ec:d3:24:8a:e8:77:a6: 20:49:bf:d0:55:53:c5:d5:4f:8f:00:2f:6d:7c:b0:02:35:78: a6:c5:c3:c7:ee:3d:ba:e0:4b:7c:1f:d3:5c:2a:19:fd:6f:8e: 11:9f:e4:46:90:9d:3c:f6:a2:86:d0:aa:f9:25:f3:97:2c:b8: 64:95:69:70:84:87:76:aa:18:31:b4:7e:63:38:ae:ea:8b:f4: b3:51:51:78:c0:a3:69:35:98:be:f2:a8:71:34:72:34:ae:29: 24:1c:1d:0f:70:95:da:ea:b2:7e:22:b9:21:33:0a:44:50:ec: 06:85:fe:4e:f7:96:1f:d4:81:0d:e3:e0:4a:3a:0a:c8:77:a9: c5:12:4d:25:5c:2b:59:e5:1f:a6:5b:d7:56:64:09:e2:62:77: 66:c4:e2:07:ac:ca:41:5f:f3:d8:90:61:8f:89:e0:b2:19:bb: 9a:23:d5:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l5w3hs2G46C1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzBiODI0NTgtMGJiOC00NzYxLThiZjItYzZkMDJjMjExYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG6dprUdeLs2Z24ETZ+Ry67ytgfaswSV0Lur YAyQfWKeDumcCRSQnOKMKSpx6zQAbq7XUpWBCQqyiCvPlMeOLQ+Ajx1B3Qg5qecs FoGJLbeLASY+OldSlhbLKJwKZf1iSDF62XEMpl5olJehJ0btry4NTWLflSv6irLM lIe6DHuMt7oOZBFmtLlJcImPRKqbVvBEjkfXOWrIxrXKDY/xjknHK4Z23BezqHos dzDKwC7AocreqOHx418j9+kjOkB5Q2Ls8yNV9ArLd1qvaSQtJ/DS2wpwkwE/yFJt fiywPzGLHZ0Ibhbh6L2tfRUnpAaXwyDgY2AN5E6+K9epkKOzkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP4mstgbVIbGsw021oO98eVs32pvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY3NTI2YTQtM2M4Yy0z NjcxLWI2ZGQtMWI5MzcwMmE1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA58Qxr4xqtw7D3gm+2rbjnBYB3Lt7Ea45xYF6K 7W1fA8cSEfjud6bJfkS3Q0fIoR+U1PmIZs5kapJgfoWvkLhWWzWDyM+5XSbLOjeb O2lv04QS2uzTJIrod6YgSb/QVVPF1U+PAC9tfLACNXimxcPH7j264Et8H9NcKhn9 b44Rn+RGkJ089qKG0Kr5JfOXLLhklWlwhId2qhgxtH5jOK7qi/SzUVF4wKNpNZi+ 8qhxNHI0rikkHB0PcJXa6rJ+IrkhMwpEUOwGhf5O95Yf1IEN4+BKOgrId6nFEk0l XCtZ5R+mW9dWZAniYndmxOIHrMpBX/PYkGGPieCyGbuaI9VQ -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:40 2026 by rpki-client