$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa File: fa2641d0-543e-3775-9d82-1fd31c482edb.roa (raw, json) Hash identifier: jdzXlZQ29fe93aVE3zFPuPQKATzhDsEzI+B7cgeDv9w= Subject key identifier: 55:F6:84:BD:05:19:7A:37:F6:05:E2:1C:C5:B3:25:37:14:87:4C:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A52FDA02ED7882AA882E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396550 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:fd:a0:2e:d7:88:2a:a8:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=13cc8cfb-fffb-462e-bfe7-72e8a754f445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:f3:cc:99:f8:80:29:eb:7d:fa:dc:0d:19: 8f:48:34:7f:0e:1c:ce:ba:d1:56:90:81:38:57:b1: 2f:69:fd:ab:d1:ec:bd:f1:a7:08:c0:c5:d3:34:cb: ed:35:88:ec:6e:21:ec:39:6c:51:18:01:9b:19:12: f8:57:b9:2f:be:2e:dc:ce:20:69:da:d8:ab:ab:b4: c3:0b:cf:2b:09:cb:f3:e4:cc:98:c1:a2:f3:44:2b: a0:54:33:43:ff:91:a5:00:69:49:7d:66:3c:26:2f: c7:a6:71:70:35:12:ff:c7:40:ca:36:a7:11:c2:58: 3e:1e:62:47:16:2f:8d:2c:4c:77:d9:44:b3:62:14: 05:34:51:8a:34:b7:24:a1:30:2e:ed:a7:a1:8b:fd: 40:d1:89:53:bd:31:c4:9e:5e:60:61:bb:9a:c9:51: 8e:b1:6d:ff:08:c4:9a:a6:87:54:04:0a:47:08:2f: 41:97:66:59:9c:e1:a8:3f:e1:f9:f9:fa:88:51:7d: 3b:bf:d1:9a:9d:4a:30:01:f7:34:f4:f4:e4:c0:b4: 1c:6c:34:72:1d:e6:b8:14:d5:db:8a:4b:3b:18:93: 36:21:e0:b3:e6:c6:6b:18:22:8f:c4:dd:4b:ac:48: eb:c5:c0:2f:3b:18:a4:bf:b3:6c:16:00:3f:18:1e: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:84:BD:05:19:7A:37:F6:05:E2:1C:C5:B3:25:37:14:87:4C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa2641d0-543e-3775-9d82-1fd31c482edb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:af:ec:5b:c6:74:ae:ea:d6:50:e0:80:15:8a:d1:c1:ce:19: 11:f2:ab:4f:09:a2:ac:e9:af:03:10:dd:9b:ff:0f:2a:41:7e: ff:bd:ce:4d:fc:f0:ae:36:f6:be:18:fc:c4:ed:75:84:f8:c6: 18:11:30:bd:0c:2a:b3:a1:23:50:9a:59:ca:99:a1:eb:00:f4: 1e:7a:eb:97:34:4c:7d:c5:b2:4b:fc:b4:5c:5b:69:ca:51:72: d5:39:32:c4:17:e5:6d:8f:f0:62:bb:1c:6e:c8:dd:b0:a9:9a: 91:77:3c:0a:6d:de:0c:c1:22:e7:c8:b0:ca:16:09:cd:53:a4: fb:01:07:21:ce:98:01:d8:ec:b5:f7:9d:c4:c2:46:49:20:bc: 4c:7d:fe:f9:48:7c:9f:42:b4:56:78:00:53:11:e4:9c:2f:91: e8:98:8f:96:65:8c:8d:91:8f:87:4e:93:14:b7:80:fe:8f:41: 0f:32:5a:82:7a:5f:fa:9f:87:f4:20:41:68:cb:c0:9d:0f:73: 9d:e2:94:28:e2:c0:58:ea:b5:6c:67:ce:b4:3f:6e:a9:44:52: 1e:c1:37:bc:38:5f:a9:41:0a:f7:f2:3f:c9:ce:78:92:08:52: f5:c8:34:15:0e:35:05:55:d8:3d:9f:6a:72:5d:26:90:2d:6c: e4:8a:8c:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jelL9oC7XiCqoguAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTNjYzhjZmItZmZmYi00NjJlLWJmZTctNzJlOGE3NTRmNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg83zzJn4gCnrffrcDRmPSDR/DhzOutFWkIE4 V7Evaf2r0ey98acIwMXTNMvtNYjsbiHsOWxRGAGbGRL4V7kvvi7cziBp2tirq7TD C88rCcvz5MyYwaLzRCugVDND/5GlAGlJfWY8Ji/HpnFwNRL/x0DKNqcRwlg+HmJH Fi+NLEx32USzYhQFNFGKNLckoTAu7aehi/1A0YlTvTHEnl5gYbuayVGOsW3/CMSa podUBApHCC9Bl2ZZnOGoP+H5+fqIUX07v9GanUowAfc09PTkwLQcbDRyHea4FNXb iks7GJM2IeCz5sZrGCKPxN1LrEjrxcAvOxikv7NsFgA/GB65VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFX2hL0FGXo39gXiHMWzJTcUh0xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmEyNjQxZDAtNTQzZS0z Nzc1LTlkODItMWZkMzFjNDgyZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCv7FvGdK7q1lDggBWK0cHOGRHyq08JoqzprwMQ3Zv/DypBfv+9 zk388K429r4Y/MTtdYT4xhgRML0MKrOhI1CaWcqZoesA9B5665c0TH3Fskv8tFxb acpRctU5MsQX5W2P8GK7HG7I3bCpmpF3PApt3gzBIufIsMoWCc1TpPsBByHOmAHY 7LX3ncTCRkkgvEx9/vlIfJ9CtFZ4AFMR5JwvkeiYj5ZljI2Rj4dOkxS3gP6PQQ8y WoJ6X/qfh/QgQWjLwJ0Pc53ilCjiwFjqtWxnzrQ/bqlEUh7BN7w4X6lBCvfyP8nO eJIIUvXINBUONQVV2D2fanJdJpAtbOSKjNI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:26 2026 by rpki-client