$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d89d8c-b771-3ef3-9136-f36258900926.roa File: f2d89d8c-b771-3ef3-9136-f36258900926.roa (raw, json) Hash identifier: 8nl4I7fLpFrN063ufdh9p+VTrQAmjGnpdX6AZ4SX7nM= Subject key identifier: DA:C8:5A:90:5C:E7:B7:6A:C7:C9:0E:DA:47:F9:66:A5:F9:08:47:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5D8ECF0C8AADCDBC1F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d89d8c-b771-3ef3-9136-f36258900926.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 20362 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5d:8e:cf:0c:8a:ad:cd:bc:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=94c2e093-cfe0-495d-a179-9fc13ec252c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:11:9c:c4:ee:1d:2e:5c:ed:a0:2b:2e:ea: 12:b2:f5:82:36:48:1c:7a:5f:c1:07:12:32:6d:dc: 2b:9a:f1:70:c5:fb:95:84:c0:6b:7a:4d:96:eb:0f: a9:24:b5:71:48:aa:5f:1b:b0:e0:58:75:c5:14:cc: cc:ba:68:71:a1:ca:ca:b9:3e:e6:a4:5c:0b:a0:f6: c0:ab:a6:50:05:8d:af:c8:7b:05:7c:04:22:c2:6d: 01:55:64:43:b1:48:0e:80:8d:af:3f:5b:4f:61:80: 89:2c:f6:fe:35:cc:72:29:54:8d:77:15:89:4d:2f: ea:be:d7:27:85:47:45:af:05:91:64:68:46:f2:f5: f3:2f:ec:db:b2:d3:7b:bb:0b:cb:19:5b:d5:ec:c5: 41:60:2f:61:22:0b:9c:c7:c1:79:d4:79:b1:df:da: 17:09:5b:c7:7c:a8:2b:56:86:73:dd:c4:2f:dd:c0: f2:62:9d:1e:a5:d6:33:87:ca:c6:17:9e:32:a0:95: 75:72:a0:69:36:c2:be:2d:f4:9b:85:7f:a5:90:0c: 6a:b6:2c:2c:4e:95:fc:b2:75:99:19:a9:86:49:51: dc:76:06:e5:51:33:93:46:e0:b2:f8:62:ce:ea:98: dd:8e:a8:80:0a:8a:61:c6:3a:08:ea:70:dc:97:de: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:5A:90:5C:E7:B7:6A:C7:C9:0E:DA:47:F9:66:A5:F9:08:47:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d89d8c-b771-3ef3-9136-f36258900926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b2:04:f4:96:69:a9:a5:f6:66:12:48:6c:23:7e:8b:49:7b: 38:04:18:76:39:61:f9:4a:39:41:11:e4:5a:a0:65:8c:5c:1c: 01:f4:22:38:89:54:2c:a4:9e:7c:63:9b:fd:49:96:2f:1d:b9: 23:54:95:cf:eb:f5:09:51:05:70:6a:59:ab:86:4f:6c:70:b7: cc:42:34:9c:42:35:78:43:5c:41:c2:a4:eb:40:85:0e:43:72: 7f:04:a5:9a:0e:d2:63:02:f5:e4:e7:2b:62:ca:82:76:a9:af: 29:cf:1e:bf:d4:22:5e:35:4a:76:0e:f9:3b:bc:57:e2:4f:18: f5:2e:80:c8:c4:90:07:a0:b9:fd:57:0c:78:87:fc:39:cb:4d: d9:d5:08:56:fd:5b:70:53:e2:09:ae:91:72:a3:78:59:26:b8: 4f:d0:fa:93:bd:d1:bc:40:3c:c5:7f:9b:18:c6:f3:e7:ef:ca: 13:ef:0f:21:ce:e5:4c:3c:26:ac:e6:7e:5c:2e:47:9c:f0:be: 29:f8:e7:86:8b:bc:49:ce:81:ac:5e:a1:71:5d:89:93:85:ea: 29:45:00:1b:24:b6:bd:46:46:6c:32:e4:52:b6:7b:3e:ca:3f: 92:df:9a:05:e1:1a:c0:ef:df:5e:85:3b:af:73:b4:ba:0a:c3: aa:24:cf:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l2OzwyKrc28H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTRjMmUwOTMtY2ZlMC00OTVkLWExNzktOWZjMTNlYzI1MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVQRnMTuHS5c7aArLuoSsvWCNkgcel/BBxIy bdwrmvFwxfuVhMBrek2W6w+pJLVxSKpfG7DgWHXFFMzMumhxocrKuT7mpFwLoPbA q6ZQBY2vyHsFfAQiwm0BVWRDsUgOgI2vP1tPYYCJLPb+NcxyKVSNdxWJTS/qvtcn hUdFrwWRZGhG8vXzL+zbstN7uwvLGVvV7MVBYC9hIgucx8F51Hmx39oXCVvHfKgr VoZz3cQv3cDyYp0epdYzh8rGF54yoJV1cqBpNsK+LfSbhX+lkAxqtiwsTpX8snWZ GamGSVHcdgblUTOTRuCy+GLO6pjdjqiACophxjoI6nDcl95dyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNrIWpBc57dqx8kO2kf5ZqX5CEe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJkODlkOGMtYjc3MS0z ZWYzLTkxMzYtZjM2MjU4OTAwOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASsgT0lmmppfZmEkhsI36LSXs4BBh2OWH5SjlB EeRaoGWMXBwB9CI4iVQspJ58Y5v9SZYvHbkjVJXP6/UJUQVwalmrhk9scLfMQjSc QjV4Q1xBwqTrQIUOQ3J/BKWaDtJjAvXk5ytiyoJ2qa8pzx6/1CJeNUp2Dvk7vFfi Txj1LoDIxJAHoLn9Vwx4h/w5y03Z1QhW/VtwU+IJrpFyo3hZJrhP0PqTvdG8QDzF f5sYxvPn78oT7w8hzuVMPCas5n5cLkec8L4p+OeGi7xJzoGsXqFxXYmTheopRQAb JLa9RkZsMuRStns+yj+S35oF4RrA799ehTuvc7S6CsOqJM+n -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:10 2026 by rpki-client