$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa File: ef7ff300-591b-3e30-9d51-5402d83de4b6.roa (raw, json) Hash identifier: xgMWac2yedrD/mjmN87ml8qzeVS7Ekh4ostsSA7Rcwc= Subject key identifier: DD:1A:50:76:6F:93:CC:E0:18:20:5B:61:43:CC:A0:63:20:D3:C0:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA59C71D40252266449590 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396565 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:59:c7:1d:40:25:22:66:44:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=dff4df92-2361-4750-ab4f-60ec62df106e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:55:cd:e6:67:fd:31:b7:7c:71:f5:80:0f: 62:85:4a:10:3f:11:61:95:0e:d7:21:94:d2:d9:21: f0:ac:4e:65:5e:84:53:30:48:c4:88:b9:09:83:df: 07:d4:aa:e9:31:17:11:da:b5:20:e2:5f:c6:03:8b: c3:66:9f:06:c6:73:97:44:41:86:40:12:f6:37:ad: 58:b2:35:3e:1d:06:6f:aa:42:63:1c:5a:8d:89:5a: 23:59:74:30:ee:49:10:a1:b3:3b:76:44:11:c3:da: 0d:fd:21:c3:6b:41:e3:7c:3d:2a:42:a3:c0:6c:fa: ce:9b:8e:c2:8e:87:29:f3:1d:a3:b6:73:4a:02:60: bc:44:40:8f:d1:dd:66:22:15:03:9c:32:89:93:fe: a4:00:69:2e:df:5e:b1:d8:a0:ba:44:64:c6:d8:44: c8:f1:4e:33:b0:56:1e:77:d1:3b:e5:3c:30:40:55: 54:cd:f5:85:73:71:2e:c2:93:2b:6f:32:94:70:1b: 15:c9:1b:df:8a:28:ec:74:dc:b2:31:c3:42:cc:a3: c0:2e:f7:51:15:43:a8:33:da:ff:dc:3a:46:5a:45: 68:78:8c:8b:f5:08:1c:b2:b9:d3:45:ca:22:c2:90: a6:a8:91:f9:c2:0b:c0:29:21:9d:ab:be:c2:76:12: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:50:76:6F:93:CC:E0:18:20:5B:61:43:CC:A0:63:20:D3:C0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef7ff300-591b-3e30-9d51-5402d83de4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9a:33:a6:39:e0:27:17:2b:ff:9b:38:b1:63:11:c3:72:2c: ac:6f:f8:a3:29:2d:22:77:72:ec:fb:f1:63:74:54:11:65:3b: f6:dd:23:d6:41:6d:74:19:c2:13:34:79:43:81:65:e1:fc:1e: 1a:01:7e:df:48:72:ed:72:b5:e1:0d:8d:f9:9d:2b:9c:b7:3f: 49:c9:78:49:63:2d:80:a1:b3:b6:98:7f:28:6c:b9:bd:b3:78: 47:33:6f:19:da:d1:ef:ff:86:4f:14:4f:d3:a1:d5:c0:08:41: 5e:2d:b1:82:1f:c9:e7:eb:04:31:0a:7a:0c:aa:83:ea:62:bd: e7:1a:3e:e5:81:3e:05:52:fa:e1:24:04:6f:2b:95:ed:ea:1e: fc:d5:92:5a:ca:1c:bb:5c:f2:8b:e5:57:85:62:48:ef:c7:e9: 12:63:46:6a:8b:f3:a8:f4:d4:42:10:4a:22:ed:62:57:56:2d: 15:b5:da:02:e0:5d:f8:4b:3a:71:26:74:77:b5:2e:55:c3:7d: 89:3f:07:64:11:a7:df:90:e3:70:a0:90:45:b8:b9:e6:6e:b0: 3d:dc:6e:c2:d8:da:ce:60:e2:5f:33:ad:8d:5e:e4:14:ce:15: 45:d6:f8:ff:d8:2b:b2:cb:9e:e2:7e:e6:24:c5:49:4b:f3:ec: a8:91:21:c5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lnHHUAlImZElZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGZmNGRmOTItMjM2MS00NzUwLWFiNGYtNjBlYzYyZGYxMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/FVzeZn/TG3fHH1gA9ihUoQPxFhlQ7XIZTS 2SHwrE5lXoRTMEjEiLkJg98H1KrpMRcR2rUg4l/GA4vDZp8GxnOXREGGQBL2N61Y sjU+HQZvqkJjHFqNiVojWXQw7kkQobM7dkQRw9oN/SHDa0HjfD0qQqPAbPrOm47C jocp8x2jtnNKAmC8RECP0d1mIhUDnDKJk/6kAGku316x2KC6RGTG2ETI8U4zsFYe d9E75TwwQFVUzfWFc3EuwpMrbzKUcBsVyRvfiijsdNyyMcNCzKPALvdRFUOoM9r/ 3DpGWkVoeIyL9QgcsrnTRcoiwpCmqJH5wgvAKSGdq77CdhID8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN0aUHZvk8zgGCBbYUPMoGMg08C0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY3ZmYzMDAtNTkxYi0z ZTMwLTlkNTEtNTQwMmQ4M2RlNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8mjOmOeAnFyv/mzixYxHDciysb/ijKS0id3Ls +/FjdFQRZTv23SPWQW10GcITNHlDgWXh/B4aAX7fSHLtcrXhDY35nSuctz9JyXhJ Yy2AobO2mH8obLm9s3hHM28Z2tHv/4ZPFE/TodXACEFeLbGCH8nn6wQxCnoMqoPq Yr3nGj7lgT4FUvrhJARvK5Xt6h781ZJayhy7XPKL5VeFYkjvx+kSY0Zqi/Oo9NRC EEoi7WJXVi0VtdoC4F34SzpxJnR3tS5Vw32JPwdkEaffkONwoJBFuLnmbrA93G7C 2NrOYOJfM62NXuQUzhVF1vj/2Cuyy57ifuYkxUlL8+yokSHF -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:05 2026 by rpki-client