$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa File: f5916bc5-ecd2-3b43-b31a-0e5def489853.roa (raw, json) Hash identifier: skeVY4a67WvPnVD6HtMBMHt0ev5OgAmp+vtU07OhzNk= Subject key identifier: B7:46:E1:88:59:EC:AD:90:3A:E6:20:29:8A:18:A7:86:00:BB:B2:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8DC4674E037FE6319DC8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397200 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8d:c4:67:4e:03:7f:e6:31:9d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6c6d5f72-6343-4d53-82f9-8bd81e476065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:ed:50:50:63:13:53:6d:06:b3:88:dd:bc: 30:d7:04:13:68:a4:8b:1c:ab:a2:30:f4:26:50:45: 90:7c:82:92:6a:10:7e:e5:84:06:57:bd:9b:f5:dd: 28:68:35:41:d9:17:e9:3c:9d:73:a4:ab:e4:fe:ca: 6f:45:2a:0d:5d:8c:b9:cb:59:02:6c:7f:32:6b:cd: ac:65:b2:25:44:c7:d0:fc:97:64:c3:33:77:66:d6: 0f:d5:25:46:c2:a7:67:70:a6:92:9e:68:13:48:72: 01:e5:d8:8b:63:75:3c:07:ce:b9:4d:7b:d1:86:e9: bc:67:b4:3e:db:7c:4a:b2:5d:49:ee:35:9d:6c:dd: 0f:be:4c:e6:09:a9:c8:43:79:53:44:62:22:c6:1d: 5c:b5:f6:f3:de:89:0d:ac:aa:36:4d:a8:85:4d:a6: c1:be:2f:97:6d:26:3c:fc:d3:5d:15:dd:e0:1d:fd: 7b:09:84:15:8b:5d:d0:5e:8f:4d:51:15:ef:34:e1: 8f:17:71:38:79:0e:5f:f1:1a:4d:42:87:48:d5:a3: c7:ad:83:c5:63:2c:70:57:32:fa:d8:97:3f:f4:66: 37:17:de:fc:ce:35:ab:c9:91:4b:ba:01:e1:dc:9a: 90:ed:4b:1e:54:40:f7:6c:b9:27:3e:18:02:71:12: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:46:E1:88:59:EC:AD:90:3A:E6:20:29:8A:18:A7:86:00:BB:B2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:be:c2:20:90:fa:65:b8:48:2c:18:bb:c7:70:65:89:19:4d: ad:aa:65:cd:a5:1c:81:1f:04:61:4f:d8:4d:da:e2:31:ba:bf: c3:0f:f2:cf:ed:75:db:6b:a2:19:59:39:31:07:3f:c5:c0:1b: ac:8c:e3:5f:9f:35:c5:bc:ea:80:af:93:9c:a7:92:bc:70:ab: 57:41:2c:66:18:94:18:df:e4:6a:aa:f6:5e:c4:6b:c4:1a:23: 85:71:6a:f3:e7:18:1d:25:a8:22:bd:0b:dd:98:ad:e0:ed:1a: 45:4b:eb:e5:28:4d:f0:ae:b7:4b:0c:82:aa:5e:48:18:28:87: aa:f7:63:2c:d4:7f:a6:92:b3:98:dc:56:88:d0:58:29:1c:2d: 87:59:e0:20:30:19:af:d6:f0:b0:3c:17:6b:d0:1f:9c:02:be: 22:6c:05:fc:09:4b:ff:88:82:3c:9e:72:78:b0:09:f1:82:d5: 1c:03:6c:36:4f:ba:6e:b2:2f:b6:46:e7:2c:b0:6e:4c:b7:ea: 0c:8e:36:d2:96:19:7e:c0:98:61:0e:c4:17:2b:cf:60:87:db: f6:3a:77:bd:4d:6d:0c:97:9d:58:c4:32:9c:b1:96:cf:d4:92: dd:8d:ca:60:25:b9:60:cc:65:07:94:86:67:c1:3f:1b:c4:fe: d7:e1:73:1b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo3EZ04Df+YxncgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmM2ZDVmNzItNjM0My00ZDUzLTgyZjktOGJkODFlNDc2MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRHtUFBjE1NtBrOI3bww1wQTaKSLHKuiMPQm UEWQfIKSahB+5YQGV72b9d0oaDVB2RfpPJ1zpKvk/spvRSoNXYy5y1kCbH8ya82s ZbIlRMfQ/JdkwzN3ZtYP1SVGwqdncKaSnmgTSHIB5diLY3U8B865TXvRhum8Z7Q+ 23xKsl1J7jWdbN0PvkzmCanIQ3lTRGIixh1ctfbz3okNrKo2TaiFTabBvi+XbSY8 /NNdFd3gHf17CYQVi13QXo9NURXvNOGPF3E4eQ5f8RpNQodI1aPHrYPFYyxwVzL6 2Jc/9GY3F978zjWryZFLugHh3JqQ7UseVED3bLknPhgCcRL5RwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLdG4YhZ7K2QOuYgKYoYp4YAu7LJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU5MTZiYzUtZWNkMi0z YjQzLWIzMWEtMGU1ZGVmNDg5ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsvsIgkPpluEgsGLvHcGWJGU2tqmXNpRyBHwRh T9hN2uIxur/DD/LP7XXba6IZWTkxBz/FwBusjONfnzXFvOqAr5Ocp5K8cKtXQSxm GJQY3+RqqvZexGvEGiOFcWrz5xgdJagivQvdmK3g7RpFS+vlKE3wrrdLDIKqXkgY KIeq92Ms1H+mkrOY3FaI0FgpHC2HWeAgMBmv1vCwPBdr0B+cAr4ibAX8CUv/iII8 nnJ4sAnxgtUcA2w2T7pusi+2RucssG5Mt+oMjjbSlhl+wJhhDsQXK89gh9v2One9 TW0Ml51YxDKcsZbP1JLdjcpgJblgzGUHlIZnwT8bxP7X4XMb -----END CERTIFICATE-----Generated at Fri Mar 27 06:13:34 2026 by rpki-client