$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa File: e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa (raw, json) Hash identifier: ZhR80BcCEkMzf0rx2PbywFGWgcoV8XlyTKkR+ca7Gqk= Subject key identifier: 20:6E:3D:DE:E9:22:0D:EB:0B:85:B4:FF:91:F6:40:F4:5E:FF:B4:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091263EF0969E38F2F78F900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396562 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:63:ef:09:69:e3:8f:2f:78:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a15ee696-8720-4b22-b2a6-84e7d389d588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:e6:51:68:7d:bf:8a:9f:54:76:0d:41:1f: 6c:7a:8b:e0:cc:03:bb:69:c6:14:0a:d2:4b:e0:33: 6f:b9:b5:d1:8f:00:a4:ea:44:4b:1a:31:ac:bc:ab: 8c:b5:db:b2:1c:05:e5:87:cd:fa:e0:74:fe:19:42: cc:be:71:7f:ff:e8:0a:a1:2c:06:4a:d7:89:fa:ba: ed:cb:40:02:09:78:7e:0b:c6:39:32:42:5a:bd:bf: b2:06:ea:46:38:9c:fa:a4:91:40:30:ca:67:58:5b: f6:76:c2:8b:76:8a:59:bd:06:7d:01:1c:2a:a8:1e: 37:8d:6d:70:26:03:66:9d:39:32:b6:5d:85:5a:e8: d8:c1:73:60:97:f3:29:a3:07:46:24:59:e2:d7:f6: da:a8:0a:48:29:bc:1b:89:18:03:c8:fc:73:31:84: 58:8b:7b:ab:1c:b6:6c:56:d8:d5:f5:22:e6:bc:f4: 62:e9:52:5b:bf:3a:1a:51:be:96:66:f5:1e:a3:13: 6b:26:00:0a:a5:e5:91:f3:a3:21:b9:c2:10:c1:84: cf:4a:c8:28:fa:b8:54:55:95:fb:df:82:90:ff:03: 75:58:32:51:4b:4c:4e:b6:96:2d:da:8e:cc:4f:b9: d2:f7:36:8b:ea:e0:64:50:16:cf:1b:81:bd:db:b1: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:3D:DE:E9:22:0D:EB:0B:85:B4:FF:91:F6:40:F4:5E:FF:B4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e15bd0bf-90e1-3071-aaee-69f10b20ec0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f3:98:2a:1d:ce:bb:d7:33:65:06:2e:d5:5b:40:82:0f:b1: 45:92:2b:70:18:6b:70:ae:5e:e7:62:03:52:0d:6f:5a:35:c2: da:eb:ab:1f:0d:ee:2b:c7:32:c1:33:9c:be:20:b5:82:2a:6d: 05:e6:6b:2b:97:61:85:11:6b:e0:d1:31:ee:f8:57:f4:a1:43: ef:34:d7:02:ca:a8:61:3c:1f:c9:3c:7c:be:09:8c:5e:a5:bf: 6d:35:42:58:7f:e1:bd:52:6a:c1:56:c3:37:1e:b6:2e:22:1c: de:54:37:ec:7d:b8:4c:0b:7e:3d:0f:70:06:88:b8:b7:09:ad: 29:c2:9f:e0:83:84:bf:f2:4a:ab:0e:cd:88:a9:54:94:4e:de: 42:9d:70:93:ed:65:f9:2a:44:9c:2c:fc:28:21:d8:80:84:90: 1a:20:96:bb:ef:89:fd:60:db:66:db:7e:ce:24:c0:8a:d4:9b: 83:2c:60:56:7f:a8:a5:96:0f:40:36:db:2b:5f:4b:c7:e9:94: c4:78:0b:eb:6f:52:62:48:bf:8b:b6:41:c9:92:4b:d4:bf:4a: ee:3b:ae:97:e0:51:72:b5:5c:6a:86:68:52:9f:84:84:13:54: c3:08:d1:4b:b5:7a:dc:ca:1a:62:2f:d7:8a:3f:27:52:4e:01: ce:2c:02:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmPvCWnjjy94+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTE1ZWU2OTYtODcyMC00YjIyLWIyYTYtODRlN2QzODlkNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt3mUWh9v4qfVHYNQR9seovgzAO7acYUCtJL 4DNvubXRjwCk6kRLGjGsvKuMtduyHAXlh8364HT+GULMvnF//+gKoSwGSteJ+rrt y0ACCXh+C8Y5MkJavb+yBupGOJz6pJFAMMpnWFv2dsKLdopZvQZ9ARwqqB43jW1w JgNmnTkytl2FWujYwXNgl/MpowdGJFni1/baqApIKbwbiRgDyPxzMYRYi3urHLZs VtjV9SLmvPRi6VJbvzoaUb6WZvUeoxNrJgAKpeWR86MhucIQwYTPSsgo+rhUVZX7 34KQ/wN1WDJRS0xOtpYt2o7MT7nS9zaL6uBkUBbPG4G927GBJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBuPd7pIg3rC4W0/5H2QPRe/7SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTE1YmQwYmYtOTBlMS0z MDcxLWFhZWUtNjlmMTBiMjBlYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHzmCodzrvXM2UGLtVbQIIPsUWSK3AYa3CuXudiA1INb1o1wtrr qx8N7ivHMsEznL4gtYIqbQXmayuXYYURa+DRMe74V/ShQ+801wLKqGE8H8k8fL4J jF6lv201Qlh/4b1SasFWwzceti4iHN5UN+x9uEwLfj0PcAaIuLcJrSnCn+CDhL/y SqsOzYipVJRO3kKdcJPtZfkqRJws/Cgh2ICEkBoglrvvif1g22bbfs4kwIrUm4Ms YFZ/qKWWD0A22ytfS8fplMR4C+tvUmJIv4u2QcmSS9S/Su47rpfgUXK1XGqGaFKf hIQTVMMI0Uu1etzKGmIv14o/J1JOAc4sAgA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:46 2026 by rpki-client