$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa File: e4adbb52-01fa-37af-995e-37fae4eb1245.roa (raw, json) Hash identifier: obLntVyy/9KthAatVa7c7RQgoKLSq9AO8Ao5pT5e6Iw= Subject key identifier: A2:C0:9E:47:EA:D8:06:BE:6E:E4:A7:AD:6D:78:0C:49:AB:93:64:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5892A70944320362B5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397200 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:92:a7:09:44:32:03:62:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f4580e04-ac37-45b2-a787-ab50e0d4a065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:fc:c2:3b:41:ac:be:ce:a3:a6:43:b5:22: 37:6e:a9:4d:8b:30:02:43:c1:fd:de:ce:55:83:89: d7:c5:62:67:12:3b:8b:61:9a:ef:63:e7:67:db:d8: 36:e2:f7:8b:4c:ab:eb:5d:ed:d1:9e:2e:21:31:1c: a4:eb:bb:50:3f:88:c4:2b:a1:4e:84:02:c8:75:b7: ca:83:3a:4d:8e:b0:96:4d:8b:a4:d4:23:43:37:28: e4:bf:d5:f8:d7:5a:cb:2c:a8:83:9b:42:c1:54:06: e4:c7:56:98:12:33:e0:a7:37:20:1f:0d:79:19:b5: 24:0f:d9:7c:1e:1d:5d:29:ea:65:af:65:cb:e3:62: a0:b7:06:1b:79:9e:5f:4f:e8:1a:84:ce:a8:09:9f: a1:a0:24:3a:3c:8d:99:b3:59:3f:23:4e:f1:77:ee: 55:f0:fe:69:b6:b6:c6:ee:be:8f:8b:99:54:ee:b7: bf:a4:90:47:70:89:a2:02:58:ab:30:4d:f1:b5:02: 49:08:2f:14:98:f9:d7:61:42:bc:81:84:2e:e5:b8: 21:f0:b9:9b:7a:a9:01:44:f8:0f:00:c2:50:2d:d7: ea:60:67:19:c4:2a:5d:7e:7e:13:70:ad:aa:82:5c: 4a:0c:7f:7d:78:d3:e5:a2:c2:25:54:73:1f:eb:17: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:9E:47:EA:D8:06:BE:6E:E4:A7:AD:6D:78:0C:49:AB:93:64:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e8:47:c6:0a:af:34:49:10:98:1f:00:0a:6c:0e:23:c6:1f: 7c:3e:45:4d:1a:f9:46:5e:ef:60:cf:6c:46:a3:85:b4:2d:05: 82:00:75:7d:d9:dc:aa:5f:b4:a2:0c:8f:fd:26:6e:50:f4:e1: 92:00:ee:1d:29:7b:8c:79:10:6f:b6:43:68:68:85:e0:98:5a: 80:8d:f6:13:71:0a:bf:91:c2:be:a2:fa:4f:7c:72:aa:e4:dd: f1:5c:43:3a:7f:b7:95:b1:e6:b3:8c:af:90:cc:fe:2a:da:d1: 54:43:cb:82:a8:3f:03:5e:b2:a6:96:c0:d7:d8:4e:eb:db:4a: f5:02:e7:97:65:db:91:e4:4d:09:b6:49:65:7a:14:fa:e5:9c: 6d:86:a5:97:6c:df:1d:29:0c:99:7d:92:46:f7:6a:21:ad:53: 8b:e2:ba:c4:9c:e7:f9:c1:e7:8d:fd:35:3b:5d:0b:96:67:4f: 58:0b:f5:cc:cd:88:99:2e:1d:7d:7f:41:ff:5f:12:eb:75:95: 5e:a3:14:90:6c:46:4b:7e:13:ed:5c:cf:ca:d2:aa:20:66:9a: 7f:90:36:97:3b:06:ee:7f:46:bd:89:19:f1:98:2d:a1:f6:37: 44:c6:45:e4:30:d3:0c:f2:05:a0:0e:a0:74:56:c2:0b:27:fb: e0:d6:59:be -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+liSpwlEMgNitcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjQ1ODBlMDQtYWMzNy00NWIyLWE3ODctYWI1MGUwZDRhMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUD8wjtBrL7Oo6ZDtSI3bqlNizACQ8H93s5V g4nXxWJnEjuLYZrvY+dn29g24veLTKvrXe3Rni4hMRyk67tQP4jEK6FOhALIdbfK gzpNjrCWTYuk1CNDNyjkv9X411rLLKiDm0LBVAbkx1aYEjPgpzcgHw15GbUkD9l8 Hh1dKeplr2XL42KgtwYbeZ5fT+gahM6oCZ+hoCQ6PI2Zs1k/I07xd+5V8P5ptrbG 7r6Pi5lU7re/pJBHcImiAlirME3xtQJJCC8UmPnXYUK8gYQu5bgh8LmbeqkBRPgP AMJQLdfqYGcZxCpdfn4TcK2qglxKDH99eNPlosIlVHMf6xc/QQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKLAnkfq2Aa+buSnrW14DEmrk2RLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRhZGJiNTItMDFmYS0z N2FmLTk5NWUtMzdmYWU0ZWIxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAH6EfGCq80SRCYHwAKbA4jxh98PkVNGvlGXu9g z2xGo4W0LQWCAHV92dyqX7SiDI/9Jm5Q9OGSAO4dKXuMeRBvtkNoaIXgmFqAjfYT cQq/kcK+ovpPfHKq5N3xXEM6f7eVseazjK+QzP4q2tFUQ8uCqD8DXrKmlsDX2E7r 20r1AueXZduR5E0JtkllehT65ZxthqWXbN8dKQyZfZJG92ohrVOL4rrEnOf5weeN /TU7XQuWZ09YC/XMzYiZLh19f0H/XxLrdZVeoxSQbEZLfhPtXM/K0qogZpp/kDaX Owbuf0a9iRnxmC2h9jdExkXkMNMM8gWgDqB0VsILJ/vg1lm+ -----END CERTIFICATE-----Generated at Fri Mar 27 04:48:18 2026 by rpki-client