$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa File: e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa (raw, json) Hash identifier: CPzNLS+LYK8GUozPb9H92+2PatcONc9etxNQsU5rMGE= Subject key identifier: 7F:DF:48:18:A8:DB:2B:C8:B1:D9:2E:2C:4F:73:0A:4C:6A:CA:18:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA53FAD8F7C8AD1D985820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396585 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:53:fa:d8:f7:c8:ad:1d:98:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=cc6246d2-bda2-4ad6-add3-d9f98ee8baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:03:bd:91:d0:39:50:6c:7f:b3:3b:57:ca: 86:ab:7e:e3:43:f2:76:b8:63:94:d6:2c:1c:27:bc: 93:99:4f:0a:93:aa:97:05:24:fe:76:29:ce:b3:c9: f3:e2:32:6f:74:7d:54:d9:c4:11:c8:48:db:95:e0: f1:50:d8:71:ca:5f:ca:13:36:ac:61:81:0d:cc:c6: 22:d8:f9:a0:ae:42:67:c3:83:d6:9d:aa:f0:08:c9: 1b:a1:a9:e2:ea:bb:44:88:87:cc:37:66:1c:e7:1b: 45:b9:03:50:15:6d:95:be:d0:65:2f:c0:f8:48:80: 3b:e4:96:82:21:82:3b:8d:28:18:cd:82:fc:98:ae: 1e:75:d5:73:0e:7b:97:ca:7e:ad:92:55:02:e2:26: 4b:c2:3e:df:94:59:af:49:62:f1:f6:5d:4d:99:ad: ce:75:3f:8a:23:a8:0c:a3:ef:03:77:45:f5:88:c8: 84:65:d1:3a:6d:c2:56:d7:ff:54:1c:f3:1b:72:fe: 25:58:a1:25:f9:48:10:1a:72:11:15:06:61:b2:dc: c0:40:b0:ff:3f:34:d2:91:7d:e3:4f:4a:f1:d0:b1: 3e:ad:27:cd:9c:08:01:6c:4b:4f:2c:b0:5d:1b:ff: 16:0f:80:4e:05:70:4d:ed:ab:0e:d4:9e:1c:63:ff: 30:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DF:48:18:A8:DB:2B:C8:B1:D9:2E:2C:4F:73:0A:4C:6A:CA:18:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:63:cc:06:94:8b:dd:58:29:9f:1d:b0:63:0f:5c:e3:c4:2e: 65:0f:82:6a:01:88:2c:20:99:d8:75:cb:1d:36:6b:46:a7:a2: 3a:6e:0f:11:49:d8:b3:3d:e6:70:a0:09:be:d8:13:11:57:35: 05:8a:c5:41:19:42:30:be:4a:ae:c6:d0:85:81:1b:7d:98:ac: 56:29:1a:bd:8a:7c:bd:c9:a7:79:89:21:6c:aa:e9:ce:6b:0b: 61:41:6c:42:e1:f9:1d:2c:79:aa:2d:16:87:39:00:0a:14:bc: 1b:c1:53:d4:15:ad:b1:13:bd:fe:3a:cd:ca:a4:ca:00:81:24: 7f:d2:de:57:3d:55:ba:3f:e2:e6:1f:47:0a:4f:fb:c6:dd:e4: d9:ad:5e:67:45:a5:7b:78:14:4b:3f:0b:5c:4d:8a:68:65:5f: 80:1d:16:bd:8f:60:60:b1:0f:36:c7:c6:7d:f9:32:84:c9:d7: 3a:36:03:66:c5:c5:ab:9c:fd:56:9a:ca:f3:3a:32:75:11:fa: 4f:5f:86:52:62:b2:88:60:8d:4e:67:8b:5b:48:51:db:2b:06: ab:ae:37:b9:a4:ea:14:b2:3e:48:b0:c1:24:a4:d6:61:23:9f: 1f:9d:c7:7f:86:95:15:ad:e5:70:70:77:3a:f9:cb:55:05:9c: 72:56:73:35 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lP62PfIrR2YWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2M2MjQ2ZDItYmRhMi00YWQ2LWFkZDMtZDlmOThlZThiYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5sDvZHQOVBsf7M7V8qGq37jQ/J2uGOU1iwc J7yTmU8Kk6qXBST+dinOs8nz4jJvdH1U2cQRyEjbleDxUNhxyl/KEzasYYENzMYi 2PmgrkJnw4PWnarwCMkboani6rtEiIfMN2Yc5xtFuQNQFW2VvtBlL8D4SIA75JaC IYI7jSgYzYL8mK4eddVzDnuXyn6tklUC4iZLwj7flFmvSWLx9l1Nma3OdT+KI6gM o+8Dd0X1iMiEZdE6bcJW1/9UHPMbcv4lWKEl+UgQGnIRFQZhstzAQLD/PzTSkX3j T0rx0LE+rSfNnAgBbEtPLLBdG/8WD4BOBXBN7asO1J4cY/8w+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH/fSBio2yvIsdkuLE9zCkxqyhizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZThjNDhkZTYtYzJjZi0z MzFhLWExZTQtMjM3ZDBjNWIyNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhY8wGlIvdWCmfHbBjD1zjxC5lD4JqAYgsIJnY dcsdNmtGp6I6bg8RSdizPeZwoAm+2BMRVzUFisVBGUIwvkquxtCFgRt9mKxWKRq9 iny9yad5iSFsqunOawthQWxC4fkdLHmqLRaHOQAKFLwbwVPUFa2xE73+Os3KpMoA gSR/0t5XPVW6P+LmH0cKT/vG3eTZrV5nRaV7eBRLPwtcTYpoZV+AHRa9j2BgsQ82 x8Z9+TKEydc6NgNmxcWrnP1WmsrzOjJ1EfpPX4ZSYrKIYI1OZ4tbSFHbKwarrje5 pOoUsj5IsMEkpNZhI58fncd/hpUVreVwcHc6+ctVBZxyVnM1 -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:48 2026 by rpki-client