$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa File: fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa (raw, json) Hash identifier: xHe39/4HmQcresNCldnF0/DUo5UKvZoFeoza+uaUtT4= Subject key identifier: 57:6D:A9:9A:67:48:32:50:C7:29:21:E3:6C:37:F2:4F:07:1D:23:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D359FDEA632FCBB7F42573F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 2620:74:73::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:de:a6:32:fc:bb:7f:42:57:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c1d6039a-4f30-461c-968f-831bc84913c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:d2:b2:42:62:03:88:dc:e1:6e:8f:d6:1b: e3:53:b5:af:00:23:3f:b2:5e:c6:d5:34:e0:fe:69: d4:6f:44:8f:22:5a:88:08:a2:19:29:dc:23:aa:3f: 0e:2f:de:57:db:0c:7c:82:88:53:6a:f2:b0:2c:cb: d9:42:6f:2d:2c:2f:27:28:a5:99:6a:d7:07:50:1c: 6a:4c:93:be:61:c4:73:71:d6:6d:b8:50:00:8b:4f: 71:9f:86:5d:f7:0b:42:dc:f2:3f:32:bf:40:ca:3b: 2b:81:2f:f4:83:b3:92:9b:66:8c:af:8f:c1:ac:c9: db:37:89:86:66:16:7e:9e:8a:9e:49:30:38:02:95: 4d:36:eb:12:37:cd:0e:6a:a9:93:fb:55:27:98:4d: eb:3b:14:b1:52:d3:6f:cb:6c:40:e0:34:5d:e9:7a: ad:f0:68:fc:e8:2b:93:27:45:af:82:6c:01:72:f6: 90:35:c0:bf:34:85:e6:56:4b:28:1c:c5:70:17:80: f8:97:48:f1:a4:bf:89:ad:37:8d:3f:5f:2b:0f:cf: 30:9a:83:00:25:4a:1e:fb:9f:24:ab:e7:53:7b:ad: 63:32:7c:58:8d:fa:e5:af:de:fb:7e:43:07:69:c0: cc:da:0d:c0:53:2c:c4:68:95:42:db:e9:e4:89:ad: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:A9:9A:67:48:32:50:C7:29:21:E3:6C:37:F2:4F:07:1D:23:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc5dd5f7-73b1-3b87-9b11-e86b4dd980cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:73::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ac:ba:dc:03:fa:18:ad:e7:ab:2a:68:d2:e5:d1:f7:28:bf: 8d:59:6c:4c:a4:9f:0b:0d:f9:0a:c7:88:49:66:bb:8b:b9:0d: 5a:33:df:b1:0a:59:93:0f:68:4b:8b:6e:ca:b2:7b:ce:c6:62: b6:1a:44:8f:aa:53:89:45:f9:30:e6:17:53:85:fc:04:fc:93: e4:26:29:11:e4:10:1b:02:31:2f:e5:50:ce:9e:62:2f:90:68: 64:f2:4e:f7:35:d4:7e:ef:13:b7:a4:89:c5:4b:f5:60:aa:79: 3c:c1:5b:15:0f:69:69:5e:b5:7b:19:7f:76:42:e9:ca:87:8e: 5c:75:62:08:00:24:cb:57:63:29:63:3e:59:55:8c:41:15:62: 17:13:b6:ab:91:48:67:1c:96:2f:8a:05:5a:5b:c1:36:6d:41: 82:d1:62:9f:78:51:08:a7:df:db:4f:63:45:30:ea:30:61:85: 56:b0:b3:bb:ab:b7:89:a2:f4:dc:a9:a2:c5:a4:71:26:be:11: 49:47:06:c3:05:24:2f:19:b1:99:f7:51:9c:bd:2b:6f:cc:b5: 7b:c7:f4:9d:b7:0b:6c:ca:dd:ea:c0:93:47:2a:9a:04:d4:28: f8:23:77:67:c6:ec:aa:48:01:d6:28:1c:14:14:aa:91:1c:64: 41:f1:ef:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n96mMvy7f0JXP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzFkNjAzOWEtNGYzMC00NjFjLTk2OGYtODMxYmM4NDkxM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfjSskJiA4jc4W6P1hvjU7WvACM/sl7G1TTg /mnUb0SPIlqICKIZKdwjqj8OL95X2wx8gohTavKwLMvZQm8tLC8nKKWZatcHUBxq TJO+YcRzcdZtuFAAi09xn4Zd9wtC3PI/Mr9AyjsrgS/0g7OSm2aMr4/BrMnbN4mG ZhZ+noqeSTA4ApVNNusSN80OaqmT+1UnmE3rOxSxUtNvy2xA4DRd6Xqt8Gj86CuT J0WvgmwBcvaQNcC/NIXmVksoHMVwF4D4l0jxpL+JrTeNP18rD88wmoMAJUoe+58k q+dTe61jMnxYjfrlr977fkMHacDM2g3AUyzEaJVC2+nkia0D/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdtqZpnSDJQxykh42w38k8HHSM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM1ZGQ1ZjctNzNiMS0z Yjg3LTliMTEtZTg2YjRkZDk4MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEusutwD+hit56sqaNLl0fcov41ZbEyknwsN+QrHiElmu4u5DVoz 37EKWZMPaEuLbsqye87GYrYaRI+qU4lF+TDmF1OF/AT8k+QmKRHkEBsCMS/lUM6e Yi+QaGTyTvc11H7vE7ekicVL9WCqeTzBWxUPaWletXsZf3ZC6cqHjlx1YggAJMtX YyljPllVjEEVYhcTtquRSGccli+KBVpbwTZtQYLRYp94UQin39tPY0Uw6jBhhVaw s7urt4mi9NyposWkcSa+EUlHBsMFJC8ZsZn3UZy9K2/MtXvH9J23C2zK3erAk0cq mgTUKPgjd2fG7KpIAdYoHBQUqpEcZEHx7yQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:45 2026 by rpki-client