$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f00f095f-f841-389c-972f-4987b0de0bf3.roa File: f00f095f-f841-389c-972f-4987b0de0bf3.roa (raw, json) Hash identifier: MxPxO2/CBgxTOaQT74OLM1UFBCcEzau8N9KqS+BzXrY= Subject key identifier: E5:C7:82:77:FF:B3:11:03:A9:CC:91:2E:CA:FF:10:4E:6A:A9:54:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A82B58D72038DDE08E468 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f00f095f-f841-389c-972f-4987b0de0bf3.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396600 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:82:b5:8d:72:03:8d:de:08:e4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1d946876-e488-405d-a351-165c99e944ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:4c:f0:ce:5b:b6:7c:b3:d2:63:c4:35:c3: f1:35:27:a1:75:10:28:49:fb:6f:37:9d:d4:80:4a: f9:19:b9:27:7f:56:8e:c5:77:7b:ac:ec:be:32:1d: a2:cc:f2:e2:75:66:2d:52:97:fd:85:a2:5e:67:93: 1f:46:34:a7:47:62:a8:29:f7:0a:ea:80:94:9b:f6: 93:67:c4:bc:55:3b:26:7f:55:87:dd:43:8e:29:dd: b6:f8:4d:cb:d2:45:31:70:4e:38:08:f6:8f:f3:02: 60:6e:82:b2:2a:10:fe:ae:1c:1d:ee:bf:39:51:04: 33:ae:ed:82:56:29:22:9d:65:df:4c:1c:e5:30:e6: 24:81:32:cb:47:9d:72:79:91:c3:26:b3:68:a2:cc: a4:44:93:07:08:d7:f3:5f:aa:cd:b1:c9:22:e0:d5: 5b:20:8e:f1:62:79:e4:ce:b6:dc:da:f6:f6:53:57: 6d:6b:13:d3:0b:ac:36:b3:a8:ab:11:5f:97:79:fb: aa:40:47:13:92:eb:ef:1d:08:80:6d:1f:3e:8a:d9: 08:8f:1d:c5:9a:a7:9f:dd:b3:16:d5:a9:86:83:6a: 18:51:61:29:b4:01:7c:8b:75:b6:3b:e3:b1:b7:e4: e0:aa:3b:41:85:b8:cf:03:b3:d2:05:8e:e8:b9:df: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:82:77:FF:B3:11:03:A9:CC:91:2E:CA:FF:10:4E:6A:A9:54:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f00f095f-f841-389c-972f-4987b0de0bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:60:d7:bb:35:a9:be:03:e8:43:d7:e4:ac:01:52:66:80:55: 33:ee:46:2e:a3:c4:11:21:3a:c3:4b:25:61:1d:f7:93:6f:fc: 63:8f:f6:0a:95:4f:78:77:49:02:c7:29:36:5a:a0:f8:a9:37: bd:8a:2e:7e:f0:aa:7b:4a:7d:ed:0c:18:88:2c:34:f1:50:0d: fa:1c:d6:3e:6b:8c:e7:4b:85:60:0e:6a:ab:56:bb:3b:65:b2: ec:33:bc:5b:f5:40:fc:c6:ed:8e:b6:92:ea:d4:83:8a:69:46: bd:e4:cd:7f:bd:d5:e5:03:19:8e:5f:f8:29:f7:d1:5c:20:7b: 85:b9:41:75:6d:7a:ad:2a:2b:91:a1:65:25:85:b6:03:38:38: 48:20:62:5f:76:7a:77:b4:21:89:d1:4d:27:5e:fe:1a:ff:ec: c6:8a:c4:5a:98:62:d2:3b:14:6c:37:d3:45:c0:4f:5e:ad:88: 1c:ca:d5:38:74:7a:4c:fe:06:67:a5:3d:f2:0e:81:d9:fb:8b: 08:0d:18:06:46:bc:4d:12:ae:44:42:c0:4b:fd:0b:8e:73:3b: 15:27:52:0a:5f:08:fe:0a:51:4c:00:a2:14:01:7c:a8:21:49: 39:66:f9:eb:df:02:8b:38:8a:08:39:5c:1a:6e:85:b6:45:38: 01:b4:0b:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoK1jXIDjd4I5GgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWQ5NDY4NzYtZTQ4OC00MDVkLWEzNTEtMTY1Yzk5ZTk0NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdM8M5btnyz0mPENcPxNSehdRAoSftvN53U gEr5Gbknf1aOxXd7rOy+Mh2izPLidWYtUpf9haJeZ5MfRjSnR2KoKfcK6oCUm/aT Z8S8VTsmf1WH3UOOKd22+E3L0kUxcE44CPaP8wJgboKyKhD+rhwd7r85UQQzru2C VikinWXfTBzlMOYkgTLLR51yeZHDJrNoosykRJMHCNfzX6rNscki4NVbII7xYnnk zrbc2vb2U1dtaxPTC6w2s6irEV+XefuqQEcTkuvvHQiAbR8+itkIjx3Fmqef3bMW 1amGg2oYUWEptAF8i3W2O+Oxt+TgqjtBhbjPA7PSBY7oud9fTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOXHgnf/sxEDqcyRLsr/EE5qqVTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjAwZjA5NWYtZjg0MS0z ODljLTk3MmYtNDk4N2IwZGUwYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJYNe7Nam+A+hD1+SsAVJmgFUz7kYuo8QRITrD SyVhHfeTb/xjj/YKlU94d0kCxyk2WqD4qTe9ii5+8Kp7Sn3tDBiILDTxUA36HNY+ a4znS4VgDmqrVrs7ZbLsM7xb9UD8xu2OtpLq1IOKaUa95M1/vdXlAxmOX/gp99Fc IHuFuUF1bXqtKiuRoWUlhbYDODhIIGJfdnp3tCGJ0U0nXv4a/+zGisRamGLSOxRs N9NFwE9erYgcytU4dHpM/gZnpT3yDoHZ+4sIDRgGRrxNEq5EQsBL/QuOczsVJ1IK Xwj+ClFMAKIUAXyoIUk5Zvnr3wKLOIoIOVwaboW2RTgBtAt6 -----END CERTIFICATE-----Generated at Thu Mar 26 12:48:12 2026 by rpki-client