$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa File: ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa (raw, json) Hash identifier: IjmNXl0f7z2upmaB7mXJyIab3bTqUSFYNBsY2IgrZ0s= Subject key identifier: 3E:57:B7:A3:0F:40:C3:51:3A:D7:1A:49:E2:62:79:73:FA:83:17:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA531AFDBAA8F724965B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397203 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:53:1a:fd:ba:a8:f7:24:96:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1511bb1c-af47-4bac-b406-8839fff02d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:89:5c:ba:94:e8:b4:c5:23:7d:62:54:36:96: 76:24:89:94:a7:36:cf:b7:29:f9:09:55:f1:58:c8: 0f:12:a3:c5:97:95:49:3d:f5:51:ac:d2:ad:fa:5c: ca:40:cf:4a:0a:fa:40:a1:e9:10:ad:1f:e9:45:5c: c2:65:a2:7b:96:99:c3:39:89:4b:c6:bd:1b:1b:97: ce:7a:17:f8:73:26:a7:98:f9:7b:d5:c7:70:2c:5d: 3a:90:47:e4:3d:24:8c:98:6c:74:3e:60:0a:a8:49: 80:58:0b:e9:9d:fe:02:68:a7:be:96:54:47:fd:60: a4:90:f8:35:b6:9b:d3:2c:46:7a:8a:cf:1d:7c:88: 61:f7:b6:52:49:d5:1d:24:b2:03:6d:c6:45:da:0c: c9:38:00:e4:d9:4e:8a:71:cd:31:fd:6f:f9:b8:44: 77:d0:87:0c:d5:04:c4:e7:c4:eb:9c:89:a2:19:51: d5:04:ab:f9:35:de:ef:da:d7:a5:49:48:9b:7f:cc: f3:ac:10:6a:32:91:be:e2:45:6e:3d:3e:06:6b:69: c3:2b:79:48:39:aa:e8:b2:1d:bd:62:46:05:0b:66: f7:3d:89:e7:27:f1:77:85:de:f5:96:19:6c:18:bd: d4:db:d6:85:83:bf:35:7e:7f:c0:2a:34:65:56:6f: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:B7:A3:0F:40:C3:51:3A:D7:1A:49:E2:62:79:73:FA:83:17:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6a:c5:73:cc:9f:b5:cd:ec:99:49:cb:c5:67:3f:7a:54:b7: 12:af:eb:21:f4:35:80:00:86:28:19:a2:d6:0a:3d:d3:e0:70: 71:04:18:f7:b3:28:30:0d:c2:42:d8:75:c4:6e:0c:30:9f:68: dd:2c:a5:30:4f:e3:80:d3:84:77:61:31:57:58:0b:f6:1e:33: dc:51:78:d3:13:75:79:2c:33:3a:d1:c9:1b:14:2b:db:f1:40: e5:f6:b8:00:0b:07:e8:a0:bc:29:ed:08:a5:00:03:ca:e1:c1: bc:e6:95:0e:3c:59:e3:e3:3c:7c:34:0f:32:3c:af:78:92:8a: f0:24:91:43:d8:31:bd:5d:af:ce:7a:46:af:e6:15:e4:93:4c: b5:84:44:f4:7d:b8:fd:82:f3:dd:47:b5:de:08:99:af:f7:76: 06:e5:7a:1d:28:8e:96:47:d2:d7:ac:3b:40:28:4a:32:8f:28: 51:60:d9:5f:43:d4:b1:3f:a7:3d:ef:e2:b1:b9:5e:fb:97:c9: 8d:60:ec:44:9e:92:50:64:2f:8d:74:1f:f6:12:d1:aa:d6:eb: cc:49:2a:21:23:27:24:71:b2:64:be:15:50:84:60:db:be:fb: ea:d4:de:55:0c:ef:fe:b5:99:13:79:e3:9f:28:39:da:6f:7a: 42:f2:c6:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lMa/bqo9ySWW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTUxMWJiMWMtYWY0Ny00YmFjLWI0MDYtODgzOWZmZjAyZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YlcupTotMUjfWJUNpZ2JImUpzbPtyn5CVXx WMgPEqPFl5VJPfVRrNKt+lzKQM9KCvpAoekQrR/pRVzCZaJ7lpnDOYlLxr0bG5fO ehf4cyanmPl71cdwLF06kEfkPSSMmGx0PmAKqEmAWAvpnf4CaKe+llRH/WCkkPg1 tpvTLEZ6is8dfIhh97ZSSdUdJLIDbcZF2gzJOADk2U6Kcc0x/W/5uER30IcM1QTE 58TrnImiGVHVBKv5Nd7v2telSUibf8zzrBBqMpG+4kVuPT4Ga2nDK3lIOarosh29 YkYFC2b3PYnnJ/F3hd71lhlsGL3U29aFg781fn/AKjRlVm/+mwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD5Xt6MPQMNROtcaSeJieXP6gxe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5ZjgyNTQtMDhhZS0z YmM1LWFiMWUtNTMyZmNmMDI2OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBasVzzJ+1zeyZScvFZz96VLcSr+sh9DWAAIYo GaLWCj3T4HBxBBj3sygwDcJC2HXEbgwwn2jdLKUwT+OA04R3YTFXWAv2HjPcUXjT E3V5LDM60ckbFCvb8UDl9rgACwfooLwp7QilAAPK4cG85pUOPFnj4zx8NA8yPK94 korwJJFD2DG9Xa/Oekav5hXkk0y1hET0fbj9gvPdR7XeCJmv93YG5XodKI6WR9LX rDtAKEoyjyhRYNlfQ9SxP6c97+KxuV77l8mNYOxEnpJQZC+NdB/2EtGq1uvMSSoh IyckcbJkvhVQhGDbvvvq1N5VDO/+tZkTeeOfKDnab3pC8sb0 -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:57 2026 by rpki-client