$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa File: fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa (raw, json) Hash identifier: 3pqDNlMg87KNHiMC3uS2v8hDH3QcgeChNKxpfE+FIrs= Subject key identifier: 5E:01:14:E5:8C:63:A8:A6:4E:96:DF:39:7E:84:27:E8:93:B3:01:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912510E37E067E500FF8700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396553 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:51:0e:37:e0:67:e5:00:ff:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=1b40d640-af9c-4fc2-80c0-0cf678407347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:07:12:4e:18:f8:bc:30:d6:5e:8d:e4:b0: 60:d9:68:97:02:46:74:a4:34:db:62:a9:25:e4:98: 24:52:f5:ee:10:6c:b1:01:df:3c:f5:cb:02:f0:1d: 16:53:74:76:e1:72:18:9a:cd:07:47:f4:0d:f2:d8: e1:c1:7d:f9:b5:46:5b:0e:92:94:b5:4b:12:4d:32: 56:a3:fa:19:d4:61:e6:96:93:3f:3d:61:02:da:0e: fc:aa:69:41:c4:c6:67:e0:7c:52:ca:df:ef:05:2c: d2:a0:ef:95:f1:f6:c3:ae:8c:af:e6:cd:bd:f0:a4: dc:93:20:65:cb:65:92:4e:1a:e4:3d:5b:e2:47:2b: fd:87:32:1e:ca:1d:5f:b5:f1:18:a1:6f:1b:78:dc: fd:bc:34:f7:40:8c:38:cd:2d:52:3e:4e:8e:8d:34: 54:3d:43:33:a4:45:de:7b:e2:40:60:a0:16:e5:1d: 4e:32:d0:ab:36:a5:5d:c2:18:13:49:dc:7f:54:b3: 58:97:2c:df:d2:4b:e0:15:ed:71:d6:19:d2:36:71: dd:31:a7:0c:15:13:ce:17:c6:cc:75:5b:f1:48:e2: d9:b8:b4:22:3c:98:a3:69:f6:d9:b5:6d:0b:67:7d: 18:69:3a:04:85:b6:db:10:d1:d4:b6:73:22:43:0c: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:14:E5:8C:63:A8:A6:4E:96:DF:39:7E:84:27:E8:93:B3:01:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6f:18:9d:c2:f2:19:8d:6c:d4:97:4d:31:de:1f:6f:60:e2: 53:1e:0a:28:9e:e1:90:9e:36:af:5b:ce:4f:0c:19:e5:ef:81: 4c:03:3e:c6:72:d3:56:8b:38:ab:b5:db:a7:d3:b1:dd:f3:27: 53:a1:2d:77:a9:4e:3c:f2:d6:ce:85:30:cf:57:42:5c:1f:18: 09:81:ba:66:5c:19:06:d7:e7:9d:66:8f:0b:95:6c:dd:d7:17: 99:b9:da:1e:bb:9f:fd:7a:91:b5:fb:f7:3e:e2:53:db:30:5c: db:4a:ce:30:1a:16:33:90:07:b9:f2:d4:94:ac:b7:c7:34:c7: df:fa:33:7b:4f:43:7c:ab:a2:5a:6c:89:28:62:f0:c7:96:f0: a9:92:4d:9f:2d:ac:11:74:a2:61:c6:f8:14:a7:66:17:03:3b: b2:4b:7f:d8:d2:01:ee:32:c5:56:50:8f:d2:cd:46:69:f0:c8: 94:16:24:b2:0d:e5:65:bb:72:0c:17:f0:e5:e5:df:13:46:f7: a6:f3:3d:55:63:86:28:08:fa:09:67:40:32:e0:0f:aa:8f:52: 22:52:f1:27:40:3a:37:1e:b2:4b:0e:83:7c:5a:0e:32:71:4f: 80:4a:b4:cb:6b:02:ac:d1:3e:cd:ee:47:4a:ad:62:48:c9:26: 4e:91:d6:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElEON+Bn5QD/hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWI0MGQ2NDAtYWY5Yy00ZmMyLTgwYzAtMGNmNjc4NDA3MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugkHEk4Y+Lww1l6N5LBg2WiXAkZ0pDTbYqkl 5JgkUvXuEGyxAd889csC8B0WU3R24XIYms0HR/QN8tjhwX35tUZbDpKUtUsSTTJW o/oZ1GHmlpM/PWEC2g78qmlBxMZn4HxSyt/vBSzSoO+V8fbDroyv5s298KTckyBl y2WSThrkPVviRyv9hzIeyh1ftfEYoW8beNz9vDT3QIw4zS1SPk6OjTRUPUMzpEXe e+JAYKAW5R1OMtCrNqVdwhgTSdx/VLNYlyzf0kvgFe1x1hnSNnHdMacMFRPOF8bM dVvxSOLZuLQiPJijafbZtW0LZ30YaToEhbbbENHUtnMiQwyfYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4BFOWMY6imTpbfOX6EJ+iTswHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJkM2EzYjQtYmRiYS0z ZDVlLWIxYzYtZTFhYzNiYTZjYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdvGJ3C8hmNbNSXTTHeH29g4lMeCiie4ZCeNq9bzk8MGeXvgUwD PsZy01aLOKu126fTsd3zJ1OhLXepTjzy1s6FMM9XQlwfGAmBumZcGQbX551mjwuV bN3XF5m52h67n/16kbX79z7iU9swXNtKzjAaFjOQB7ny1JSst8c0x9/6M3tPQ3yr olpsiShi8MeW8KmSTZ8trBF0omHG+BSnZhcDO7JLf9jSAe4yxVZQj9LNRmnwyJQW JLIN5WW7cgwX8OXl3xNG96bzPVVjhigI+glnQDLgD6qPUiJS8SdAOjcesksOg3xa DjJxT4BKtMtrAqzRPs3uR0qtYkjJJk6R1ko= -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:53 2026 by rpki-client