$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa File: fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa (raw, json) Hash identifier: 4kCPyY+IRh9WRfyOCpRr40tDaewnUseUY0NwYw8NBD8= Subject key identifier: B7:4A:17:44:7D:58:11:B1:22:ED:97:EC:1D:7C:AC:3B:3B:B0:0D:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A2381935538E29BA59540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36626 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:23:81:93:55:38:e2:9b:a5:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a5ed3efc-842b-46f0-a9ba-3333e3abe938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:2a:db:c2:6c:6f:07:4e:7b:1d:fb:82:91: 35:1d:a0:b1:b9:61:49:1c:a8:28:87:aa:e7:a8:9e: 8e:d1:73:91:49:81:9b:cb:11:9b:f7:cf:6b:77:d3: 80:0d:54:c7:0e:93:8e:de:3a:30:c2:f4:7c:cb:b2: 7f:8f:d2:99:6e:54:9b:d9:52:2f:dc:fa:47:94:c6: 69:13:03:59:fb:f4:cc:26:a2:12:df:91:bc:f8:96: 8c:9a:34:1d:ba:4a:09:99:d1:71:b8:7f:1b:25:d7: 8f:d1:8e:c4:de:c5:43:1f:3b:e8:28:28:23:9e:6d: be:1d:95:69:cc:0c:d6:18:eb:a8:b5:1b:51:c9:11: b9:2b:1b:db:c2:25:57:89:d4:90:69:5a:21:31:92: 28:66:4f:e7:b4:b4:4c:c3:72:22:e6:de:ec:6e:c5: 7d:a5:49:9c:e1:78:e5:ac:23:06:2f:ec:f7:c4:29: dc:c4:81:72:08:99:27:b9:98:12:1e:a3:6c:96:52: d8:4b:19:ad:f1:95:59:18:e1:7a:75:4f:1e:02:5f: 77:b9:37:fd:d5:bc:ec:73:a6:7b:61:da:81:8d:ae: ed:49:0d:e4:09:34:3e:b3:4f:6b:a1:38:6c:9e:dc: 24:9d:d0:20:01:40:f7:f2:e1:a6:26:86:5c:98:8f: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:17:44:7D:58:11:B1:22:ED:97:EC:1D:7C:AC:3B:3B:B0:0D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcd4e3c2-9267-3353-b234-d018c3c5f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d1:b4:30:04:2a:c7:80:af:52:15:63:dc:e0:fd:b7:10:3e: 87:ab:43:c5:66:f9:0d:3f:f5:2b:84:e1:7f:ca:ad:74:33:0d: 32:68:49:01:6e:e9:a4:0e:fe:ed:6e:8f:2b:ee:e2:f3:09:d1: b8:cf:dc:00:2f:f8:22:09:ad:f6:1e:a5:13:8e:f4:0f:2f:e6: b3:de:7b:4a:55:d2:65:b3:c7:a1:49:39:99:53:89:e9:dc:53: ef:81:d3:0c:4d:da:07:cf:e7:b7:4b:82:29:83:95:04:b2:06: 2b:68:c0:11:53:a9:72:48:24:cb:6a:04:61:e9:12:83:bf:c3: da:ff:e0:04:37:99:d4:0e:bf:eb:ae:ed:17:7e:7a:b7:13:4d: ce:65:5c:72:e1:5a:0b:f9:2e:80:02:6d:ee:60:9e:23:95:36: 1a:fe:28:ec:30:43:de:d6:c7:f3:8b:d4:d2:85:36:4f:e9:15: db:71:7d:e6:6e:6c:85:7a:e1:65:01:cb:d0:f5:05:e5:c8:5d: 43:65:dc:cc:13:71:73:31:08:0f:33:07:d8:d9:2c:45:b0:d6: d8:9b:64:26:93:ae:12:34:d5:ea:15:ce:8a:8b:0e:a2:2d:e5: bb:bf:1a:2b:62:c4:07:5c:4d:52:e4:60:ac:55:64:d6:21:ae: cf:10:f7:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiOBk1U44pullUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTVlZDNlZmMtODQyYi00NmYwLWE5YmEtMzMzM2UzYWJlOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxQq28JsbwdOex37gpE1HaCxuWFJHKgoh6rn qJ6O0XORSYGbyxGb989rd9OADVTHDpOO3jowwvR8y7J/j9KZblSb2VIv3PpHlMZp EwNZ+/TMJqIS35G8+JaMmjQdukoJmdFxuH8bJdeP0Y7E3sVDHzvoKCgjnm2+HZVp zAzWGOuotRtRyRG5KxvbwiVXidSQaVohMZIoZk/ntLRMw3Ii5t7sbsV9pUmc4Xjl rCMGL+z3xCncxIFyCJknuZgSHqNsllLYSxmt8ZVZGOF6dU8eAl93uTf91bzsc6Z7 YdqBja7tSQ3kCTQ+s09roThsntwkndAgAUD38uGmJoZcmI+9rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdKF0R9WBGxIu2X7B18rDs7sA1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNkNGUzYzItOTI2Ny0z MzUzLWIyMzQtZDAxOGMzYzVmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTRtDAEKseAr1IVY9zg/bcQPoerQ8Vm+Q0/9SuE4X/KrXQzDTJo SQFu6aQO/u1ujyvu4vMJ0bjP3AAv+CIJrfYepROO9A8v5rPee0pV0mWzx6FJOZlT iencU++B0wxN2gfP57dLgimDlQSyBitowBFTqXJIJMtqBGHpEoO/w9r/4AQ3mdQO v+uu7Rd+ercTTc5lXHLhWgv5LoACbe5gniOVNhr+KOwwQ97Wx/OL1NKFNk/pFdtx feZubIV64WUBy9D1BeXIXUNl3MwTcXMxCA8zB9jZLEWw1tibZCaTrhI01eoVzoqL DqIt5bu/GitixAdcTVLkYKxVZNYhrs8Q99w= -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:58 2026 by rpki-client