$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5d7487b-5866-3930-93c5-55f0a8661ee9.roa File: f5d7487b-5866-3930-93c5-55f0a8661ee9.roa (raw, json) Hash identifier: xW38lCFkCFVv5fIAmrH+QPf54kYcPJKKR21/qz0gi2I= Subject key identifier: A0:FC:F2:F4:78:F2:3D:A0:CF:C1:BA:F5:31:53:A7:A5:FD:EF:ED:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B2AD9551B66C06DB4180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5d7487b-5866-3930-93c5-55f0a8661ee9.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396555 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b2:ad:95:51:b6:6c:06:db:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=df52d831-9b5b-4db6-82c7-c8ed318559d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:78:03:44:e6:cf:42:24:e6:ed:9b:07:d1: f6:59:e1:91:95:a5:6b:6f:0a:db:2a:2f:94:a6:f4: 93:4e:86:1a:6f:cb:c8:07:23:60:ae:81:57:95:06: f4:ea:30:e4:86:88:6e:92:ce:91:50:fe:4d:02:0b: 90:3c:ac:09:d4:8f:f9:0e:cf:50:00:26:2b:33:17: 4b:93:99:e7:53:84:ec:3d:98:0f:03:c9:9b:dc:00: 26:06:1a:96:11:3b:9c:15:df:90:91:33:e4:38:16: 11:54:62:0f:5c:47:0b:86:39:f7:13:ef:c6:56:4f: 40:e2:7a:29:ae:b0:05:3d:87:a8:6d:7a:fb:84:9a: d6:49:9a:ce:b7:a4:81:43:76:55:91:49:16:c5:bb: 6f:94:be:74:25:f4:ed:fe:e9:5c:81:a2:b8:7e:62: f6:b9:3d:50:41:dc:ef:9d:ed:3a:f9:8c:44:78:e6: fd:b2:c2:da:0f:d6:31:2d:2a:a5:a8:79:2c:94:9b: 3d:f0:37:99:da:14:d0:53:e5:55:55:dd:e1:b9:7b: f0:7f:94:5c:ef:6a:b2:05:a4:56:c8:b1:e9:cb:dc: ab:90:03:ba:80:62:e3:9d:fa:43:ba:7e:8c:73:83: 14:e1:63:d7:b6:a6:b4:9b:d3:38:ff:11:93:b5:2e: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:F2:F4:78:F2:3D:A0:CF:C1:BA:F5:31:53:A7:A5:FD:EF:ED:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5d7487b-5866-3930-93c5-55f0a8661ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:17:fa:72:49:e9:05:1d:0c:88:ba:21:53:66:bb:ee:59:0e: d5:b2:f1:1a:1e:44:25:69:ba:9c:63:0f:8d:16:12:a0:3a:25: 0b:0b:0e:dc:a8:3f:69:5f:30:d9:9c:14:d0:cf:47:43:94:f4: a4:f6:a8:d9:9e:6c:d0:39:82:64:0d:1e:32:b8:be:dd:86:b5: a4:d6:bb:dc:c5:47:c0:e0:b0:13:4d:7a:ad:96:5b:d3:ea:8f: de:51:5f:7e:ea:bd:39:dc:46:d8:99:81:81:d5:7a:61:99:42: 28:0e:53:34:f9:8f:12:15:38:7c:5b:13:f8:e7:4f:51:ec:d9: 59:1c:aa:ce:95:51:8a:4d:a2:b7:80:36:ef:c9:85:97:d0:1d: 08:62:7d:92:3e:75:49:6e:30:eb:60:fb:cf:7a:0d:ef:91:48: c2:90:2e:bd:f8:43:3c:fb:b6:56:34:a9:da:fb:bb:34:02:68: 7d:da:da:b2:36:07:17:24:87:09:14:b8:e4:c3:57:f8:cf:b1: 8a:af:86:10:94:ad:01:b4:e5:2a:59:d7:9f:d0:b7:23:9f:de: 36:d5:f1:75:21:3e:fd:05:02:d6:25:f0:f5:ac:f2:52:45:f7: 64:07:30:d4:f3:65:d8:ed:65:89:e2:3b:74:55:1f:15:92:95: d3:0e:12:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErKtlVG2bAbbQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGY1MmQ4MzEtOWI1Yi00ZGI2LTgyYzctYzhlZDMxODU1OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/t4A0Tmz0Ik5u2bB9H2WeGRlaVrbwrbKi+U pvSTToYab8vIByNgroFXlQb06jDkhohuks6RUP5NAguQPKwJ1I/5Ds9QACYrMxdL k5nnU4TsPZgPA8mb3AAmBhqWETucFd+QkTPkOBYRVGIPXEcLhjn3E+/GVk9A4nop rrAFPYeobXr7hJrWSZrOt6SBQ3ZVkUkWxbtvlL50JfTt/ulcgaK4fmL2uT1QQdzv ne06+YxEeOb9ssLaD9YxLSqlqHkslJs98DeZ2hTQU+VVVd3huXvwf5Rc72qyBaRW yLHpy9yrkAO6gGLjnfpDun6Mc4MU4WPXtqa0m9M4/xGTtS41bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKD88vR48j2gz8G69TFTp6X97+2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjVkNzQ4N2ItNTg2Ni0z OTMwLTkzYzUtNTVmMGE4NjYxZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsX+nJJ6QUdDIi6IVNmu+5ZDtWy8RoeRCVpupxjD40WEqA6JQsL DtyoP2lfMNmcFNDPR0OU9KT2qNmebNA5gmQNHjK4vt2GtaTWu9zFR8DgsBNNeq2W W9Pqj95RX37qvTncRtiZgYHVemGZQigOUzT5jxIVOHxbE/jnT1Hs2Vkcqs6VUYpN oreANu/JhZfQHQhifZI+dUluMOtg+896De+RSMKQLr34Qzz7tlY0qdr7uzQCaH3a 2rI2BxckhwkUuOTDV/jPsYqvhhCUrQG05SpZ15/QtyOf3jbV8XUhPv0FAtYl8PWs 8lJF92QHMNTzZdjtZYniO3RVHxWSldMOEoY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:12 2026 by rpki-client