$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea1d4463-af35-3b28-843f-9f7dee93ec08.roa File: ea1d4463-af35-3b28-843f-9f7dee93ec08.roa (raw, json) Hash identifier: tHuS0upLML/Y+gCelt1Su23OnwaK2k6wqFOGPiihhjg= Subject key identifier: 71:84:4B:3D:E5:E8:53:37:A2:93:14:9B:39:93:3D:27:F6:00:47:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B1BFFA9480146889C580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea1d4463-af35-3b28-843f-9f7dee93ec08.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396561 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b1:bf:fa:94:80:14:68:89:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=43d43b55-57b3-4f9e-8197-8e975985d09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:6f:31:90:ea:6e:4e:2c:d6:00:ab:a9:33: f0:15:f9:c3:ae:55:e0:a3:9e:17:b1:f2:20:25:cf: 50:0b:08:c0:95:7a:ed:a7:e9:1b:a4:a8:5b:f9:a4: ef:49:2c:5a:9a:30:d0:33:a3:18:d2:0d:61:d8:b9: e1:67:d5:17:c3:d3:dc:09:d8:5f:95:97:7c:4d:14: 04:dc:3f:ab:68:17:e8:88:2c:ce:ea:48:d5:03:25: f6:f0:8d:ed:49:a5:cf:ed:19:19:af:36:ee:6d:18: 97:3b:50:8c:80:37:4c:b6:de:b7:13:bc:af:00:f4: ee:b3:de:45:83:fb:41:e9:18:65:e2:96:6c:19:17: 88:d2:0c:bf:56:47:1f:12:ca:4c:bd:20:8f:13:2c: 76:39:a4:09:21:34:52:04:a6:a4:a9:ef:8c:7d:03: d0:6f:e8:9f:97:35:bc:05:a2:63:a2:05:bb:f2:cb: e1:f6:11:06:de:48:78:b2:95:52:1a:ed:f3:2a:09: 3a:85:9a:bc:a2:19:7e:49:40:53:5b:c4:92:57:e7: b1:bd:c4:22:6e:e2:65:ad:d1:b6:c7:f3:40:c9:b6: e3:8a:64:b3:f4:ee:9d:9f:3e:0a:3e:ac:f7:56:b2: d6:2b:19:6e:ca:d5:ca:ab:04:49:97:0d:2b:e8:d8: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:4B:3D:E5:E8:53:37:A2:93:14:9B:39:93:3D:27:F6:00:47:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea1d4463-af35-3b28-843f-9f7dee93ec08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:51:0e:6c:0b:2b:b9:ad:d1:a9:d6:52:50:d1:31:08:e6:50: 88:90:f3:b9:42:fc:0c:01:0f:a2:6a:62:01:51:74:fd:27:0d: f2:db:ae:c4:6c:6c:2d:2f:51:fa:cc:36:05:cc:3a:39:4c:0f: 01:58:f0:20:1f:be:17:ea:76:32:69:7a:92:f5:e7:f0:a5:eb: e1:5f:2f:86:f6:14:14:b4:90:08:90:2d:b8:40:d1:7e:e1:12: 5a:b2:6f:f7:9d:b7:99:27:6d:dc:95:07:07:36:47:17:aa:8b: 5e:31:21:b9:61:aa:e7:a3:12:03:8d:b1:02:1f:36:3c:f5:c7: b6:87:bc:29:0d:04:d2:88:7c:47:03:ca:0d:a2:81:5b:24:9a: ba:4f:ce:82:c4:20:dd:8c:c8:d9:81:59:72:97:ce:18:86:59: 96:ac:31:56:1d:e2:40:c6:96:b0:b7:aa:fc:a9:ac:f4:92:eb: 4d:f0:ac:14:d4:11:6c:50:d5:ce:9f:b7:13:e8:a5:bd:81:5b: bb:bc:79:34:ac:70:79:a2:cd:91:c7:90:9c:6a:1f:8e:41:5b: 34:fd:e4:7a:3c:61:92:52:39:a0:31:df:fa:9f:47:80:6f:b2: 90:2c:d4:64:b5:d5:2c:5c:85:e9:33:db:36:db:a4:74:91:e5: b9:c5:36:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bG/+pSAFGiJxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk NDNkNDNiNTUtNTdiMy00ZjllLTgxOTctOGU5NzU5ODVkMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tvMZDqbk4s1gCrqTPwFfnDrlXgo54XsfIg Jc9QCwjAlXrtp+kbpKhb+aTvSSxamjDQM6MY0g1h2LnhZ9UXw9PcCdhflZd8TRQE 3D+raBfoiCzO6kjVAyX28I3tSaXP7RkZrzbubRiXO1CMgDdMtt63E7yvAPTus95F g/tB6Rhl4pZsGReI0gy/VkcfEspMvSCPEyx2OaQJITRSBKakqe+MfQPQb+iflzW8 BaJjogW78svh9hEG3kh4spVSGu3zKgk6hZq8ohl+SUBTW8SSV+exvcQibuJlrdG2 x/NAybbjimSz9O6dnz4KPqz3VrLWKxluytXKqwRJlw0r6Ng06wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGESz3l6FM3opMUmzmTPSf2AEd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWExZDQ0NjMtYWYzNS0z YjI4LTg0M2YtOWY3ZGVlOTNlYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItRDmwLK7mt0anWUlDRMQjmUIiQ87lC/AwBD6JqYgFRdP0nDfLb rsRsbC0vUfrMNgXMOjlMDwFY8CAfvhfqdjJpepL15/Cl6+FfL4b2FBS0kAiQLbhA 0X7hElqyb/edt5knbdyVBwc2Rxeqi14xIblhquejEgONsQIfNjz1x7aHvCkNBNKI fEcDyg2igVskmrpPzoLEIN2MyNmBWXKXzhiGWZasMVYd4kDGlrC3qvyprPSS603w rBTUEWxQ1c6ftxPopb2BW7u8eTSscHmizZHHkJxqH45BWzT95Ho8YZJSOaAx3/qf R4BvspAs1GS11Sxchekz2zbbpHSR5bnFNqo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:05:20 2026 by rpki-client