$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e890356c-5059-3641-97cf-e51d6e0e83be.roa File: e890356c-5059-3641-97cf-e51d6e0e83be.roa (raw, json) Hash identifier: gTJ2cVo5CjgKRfOS+Ij43acZyk2Giu1lgr6VE0jYp+k= Subject key identifier: 15:3F:6C:D8:EF:C4:9D:71:20:13:F3:42:40:80:ED:2C:B7:11:00:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA573590E3778F5679C8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e890356c-5059-3641-97cf-e51d6e0e83be.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396611 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:57:35:90:e3:77:8f:56:79:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=6a605629-77d7-42e3-982f-9197fbd7f0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:23:6d:e3:ca:0a:14:f8:82:51:c9:ea:1f: 9f:19:d2:01:38:82:f1:67:6d:11:e8:4e:49:96:6d: bd:e4:8f:64:c3:0a:f7:18:6b:89:ec:59:86:5e:3f: 79:3d:52:ae:d1:10:60:be:19:56:69:66:d1:43:34: 00:03:b0:67:72:3b:b3:78:0d:a4:d6:12:6c:85:c1: b5:d2:7d:38:43:c9:56:1e:06:b5:94:40:e9:f5:32: ae:11:93:35:ba:71:4e:f5:47:26:30:22:fc:14:f9: 63:2c:13:41:e1:c3:ad:32:d6:7d:2f:c6:d7:eb:cd: 83:2e:71:e7:8c:a9:e0:c4:05:a6:5c:d8:27:6f:ca: a2:de:8d:a5:12:d0:81:24:7c:ff:98:1b:ca:0d:26: 62:df:40:28:8e:d6:8e:7c:1e:21:87:32:86:d8:1c: f0:f8:db:dd:e9:f7:1d:a2:77:ba:5f:ca:9f:4e:30: 0b:5d:d5:0b:aa:f1:a7:4e:32:0b:60:0d:85:74:b3: 6c:4f:77:2a:93:b1:5c:81:62:40:d8:fa:37:44:30: 33:a9:05:48:ca:63:15:86:05:4f:74:e2:ed:c1:ae: a4:b7:d0:88:cf:e5:9d:d2:f2:10:ed:7d:b3:4b:3d: 12:07:18:42:47:aa:e0:40:ca:c8:ed:cb:f2:5e:fc: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:6C:D8:EF:C4:9D:71:20:13:F3:42:40:80:ED:2C:B7:11:00:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e890356c-5059-3641-97cf-e51d6e0e83be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4b:8f:e8:63:79:e1:0f:28:29:a7:ce:99:12:7b:58:9e:29: e7:df:cf:fd:43:c4:86:4f:4c:42:b3:b9:56:24:a0:d0:32:24: 1c:84:5a:30:93:f6:80:70:c7:17:66:11:32:c9:64:ee:ce:b5: 55:90:b6:ea:73:3f:32:10:fe:9a:c7:d8:eb:c5:4a:c8:05:f0: 93:fd:5c:72:25:0b:98:eb:67:99:c3:0d:d3:b1:2c:47:47:4c: 88:29:b9:0d:17:da:12:fa:e8:fd:2c:9a:27:dd:9b:ec:7e:0d: fe:fc:62:ad:b4:58:c3:95:c6:13:cc:04:0d:bc:17:6c:5d:0a: 92:d9:02:1f:7d:f4:89:7e:7d:de:92:1e:92:66:33:dc:ed:8a: e7:4a:c2:14:e6:be:a9:2b:68:b8:be:fd:52:80:fa:51:aa:b3: 57:91:b3:c3:47:56:11:b1:80:8f:70:ac:1a:31:8c:44:60:29: ac:ca:4c:68:3d:1b:b7:30:79:e0:c8:cd:77:93:df:33:36:ba: a0:7b:9c:ba:f6:46:b4:9d:f4:66:75:08:53:58:4b:e7:48:93: c1:38:d0:ba:d3:91:a0:4a:9e:9d:eb:0f:4a:42:be:5a:d7:15: 21:ac:07:e3:14:d0:2d:d4:2b:a2:43:6b:b9:30:d5:ef:26:3c: b4:d3:07:f6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lc1kON3j1Z5yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NmE2MDU2MjktNzdkNy00MmUzLTk4MmYtOTE5N2ZiZDdmMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr24jbePKChT4glHJ6h+fGdIBOILxZ20R6E5J lm295I9kwwr3GGuJ7FmGXj95PVKu0RBgvhlWaWbRQzQAA7BncjuzeA2k1hJshcG1 0n04Q8lWHga1lEDp9TKuEZM1unFO9UcmMCL8FPljLBNB4cOtMtZ9L8bX682DLnHn jKngxAWmXNgnb8qi3o2lEtCBJHz/mBvKDSZi30AojtaOfB4hhzKG2Bzw+Nvd6fcd one6X8qfTjALXdULqvGnTjILYA2FdLNsT3cqk7FcgWJA2Po3RDAzqQVIymMVhgVP dOLtwa6kt9CIz+Wd0vIQ7X2zSz0SBxhCR6rgQMrI7cvyXvzXFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBU/bNjvxJ1xIBPzQkCA7Sy3EQDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTg5MDM1NmMtNTA1OS0z NjQxLTk3Y2YtZTUxZDZlMGU4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeS4/oY3nhDygpp86ZEntYninn38/9Q8SGT0xC s7lWJKDQMiQchFowk/aAcMcXZhEyyWTuzrVVkLbqcz8yEP6ax9jrxUrIBfCT/Vxy JQuY62eZww3TsSxHR0yIKbkNF9oS+uj9LJon3Zvsfg3+/GKttFjDlcYTzAQNvBds XQqS2QIfffSJfn3ekh6SZjPc7YrnSsIU5r6pK2i4vv1SgPpRqrNXkbPDR1YRsYCP cKwaMYxEYCmsykxoPRu3MHngyM13k98zNrqge5y69ka0nfRmdQhTWEvnSJPBONC6 05GgSp6d6w9KQr5a1xUhrAfjFNAt1CuiQ2u5MNXvJjy00wf2 -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:20 2026 by rpki-client