$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa File: ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa (raw, json) Hash identifier: ZDIXu14Ydrl3r1nXw9/aAZSXLgyh5KsqymP1Fl80YZU= Subject key identifier: 86:A1:71:77:C0:37:9B:62:E0:75:D3:BA:FF:C2:9A:F7:4B:48:D0:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA549A3F51836DA9ED8700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396578 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:54:9a:3f:51:83:6d:a9:ed:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=bcb1e4f7-3203-4576-9999-4c383de7ac82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:c7:df:43:d8:b5:05:4b:96:c8:5b:a2:18: 48:17:99:69:d3:2e:e2:b1:18:d8:a8:83:85:d2:7f: e9:82:5c:fb:6e:e3:5e:c9:a9:f5:2a:3e:e5:0f:bc: 8c:9e:e6:e4:ee:21:5f:2a:38:45:9d:77:e0:82:a1: 95:56:24:11:60:b2:a6:c7:d2:40:14:68:2c:09:d7: cb:7e:1b:ec:b9:8f:60:af:87:2d:ba:63:70:d5:e8: f4:25:cc:97:3b:62:05:a6:33:9a:3f:3b:c9:e6:37: 14:09:ea:ac:92:c1:99:66:a6:c1:88:72:20:1a:ea: c9:56:41:96:e6:fa:a1:86:20:5a:25:1f:f8:53:60: 57:3a:ed:8a:4e:04:52:02:6a:d6:30:82:b2:3d:4c: bc:7a:1e:e7:0c:cd:73:4a:5f:f9:c9:ae:f6:29:26: 3c:c6:98:7c:f9:38:b3:99:02:c3:57:4b:cc:3e:5e: 77:05:3c:4d:16:06:e5:4f:1d:47:7f:9e:05:8c:c7: 13:35:94:1f:50:f5:02:33:0b:6d:4a:2f:72:6b:e0: e6:76:04:a2:4f:e8:1d:25:6d:8e:20:b5:3c:28:d5: 37:77:cd:49:16:f9:92:17:90:d5:d2:ce:cb:04:8c: b5:a2:46:c6:e0:40:ce:5b:4d:a1:38:27:cd:c7:13: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:71:77:C0:37:9B:62:E0:75:D3:BA:FF:C2:9A:F7:4B:48:D0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ead5c81f-8463-37cb-86bf-cb33e0212b4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3b:b4:da:43:df:e2:ec:ca:3d:9e:2e:d3:08:5d:cb:1e:e1: ec:de:71:23:a8:e7:98:4d:d1:00:71:74:91:b8:65:b7:21:7a: c6:43:93:85:25:94:c1:0a:55:2a:b0:55:20:cc:c6:9a:60:13: 48:cd:bc:3b:11:e2:2e:39:dc:8f:dd:31:40:8d:3e:43:16:dc: 55:b8:f7:02:a2:bb:a8:47:d7:e8:a9:83:14:7e:03:6c:67:5f: df:4c:45:a4:e8:55:af:5b:f7:2d:4d:e1:52:58:d7:23:7d:47: 25:92:26:6d:cf:a8:2c:d7:bf:75:3e:ec:9b:85:17:e8:27:76: 31:9f:2a:67:a3:4c:1a:c3:99:2c:11:a9:58:a0:ee:c3:11:24: 47:2f:0e:5f:75:2d:78:a8:d7:d9:b2:7f:08:d9:e3:36:b3:06: 15:ac:5a:f1:66:b2:6b:98:a2:cf:78:21:83:cf:3a:21:f4:ad: 48:d5:e0:01:84:16:bd:3e:33:eb:73:0f:51:73:9a:7a:ae:c5: 97:e4:6d:de:c2:3a:64:7f:62:3b:0f:44:71:05:70:63:38:fc: 22:c8:a1:8d:b2:ea:59:4e:c0:4e:84:2d:23:64:af:a8:63:37: e3:a0:1d:44:57:53:12:a5:08:ff:d0:8a:6b:2f:33:de:cb:fb: 03:11:00:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lSaP1GDbanthwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YmNiMWU0ZjctMzIwMy00NTc2LTk5OTktNGMzODNkZTdhYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWbH30PYtQVLlshbohhIF5lp0y7isRjYqIOF 0n/pglz7buNeyan1Kj7lD7yMnubk7iFfKjhFnXfggqGVViQRYLKmx9JAFGgsCdfL fhvsuY9gr4ctumNw1ej0JcyXO2IFpjOaPzvJ5jcUCeqsksGZZqbBiHIgGurJVkGW 5vqhhiBaJR/4U2BXOu2KTgRSAmrWMIKyPUy8eh7nDM1zSl/5ya72KSY8xph8+Tiz mQLDV0vMPl53BTxNFgblTx1Hf54FjMcTNZQfUPUCMwttSi9ya+DmdgSiT+gdJW2O ILU8KNU3d81JFvmSF5DV0s7LBIy1okbG4EDOW02hOCfNxxNbuwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIahcXfAN5ti4HXTuv/CmvdLSNAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFkNWM4MWYtODQ2My0z N2NiLTg2YmYtY2IzM2UwMjEyYjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUO7TaQ9/i7Mo9ni7TCF3LHuHs3nEjqOeYTdEA cXSRuGW3IXrGQ5OFJZTBClUqsFUgzMaaYBNIzbw7EeIuOdyP3TFAjT5DFtxVuPcC oruoR9foqYMUfgNsZ1/fTEWk6FWvW/ctTeFSWNcjfUclkiZtz6gs1791PuybhRfo J3Yxnypno0waw5ksEalYoO7DESRHLw5fdS14qNfZsn8I2eM2swYVrFrxZrJrmKLP eCGDzzoh9K1I1eABhBa9PjPrcw9Rc5p6rsWX5G3ewjpkf2I7D0RxBXBjOPwiyKGN supZTsBOhC0jZK+oYzfjoB1EV1MSpQj/0IprLzPey/sDEQA2 -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:51 2026 by rpki-client