$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa File: fd2672cb-ea7b-3db3-8538-a969394a19b4.roa (raw, json) Hash identifier: msbKVkPUA/7DAQlLeARv7hfBVrcxI7tjxI3vZhnJv8s= Subject key identifier: 83:9B:51:45:90:1F:E8:4D:8E:95:12:C5:38:F9:A4:03:57:12:A8:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A89635676C3311858D7CC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 211369 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:89:63:56:76:c3:31:18:58:d7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cc739fc7-3490-4bbf-b14f-54ba300310e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2b:b4:9f:c2:1f:51:38:f4:90:f4:22:8e:d4: e6:37:86:00:6a:29:77:5f:5e:6b:17:47:4d:0b:ac: 58:9c:12:a5:21:a9:45:b3:19:f1:6c:8c:00:b7:08: 76:4a:29:ed:68:9e:d2:9a:91:c6:ae:ef:3e:61:7e: 7c:d3:76:98:c5:56:d5:f6:b9:cb:b7:59:18:fb:4e: 9e:34:96:a2:39:9d:bc:5d:c3:cc:ab:1f:7f:70:dc: 49:a1:4d:98:2e:ce:18:c1:a8:f7:68:81:8d:c6:5c: df:c7:27:74:ae:56:c0:a0:91:c7:e3:e3:3b:57:f9: b9:65:12:f5:a2:cb:e4:08:81:4f:72:8f:63:93:5e: e2:a1:3b:13:cb:d1:f5:5b:27:f5:84:60:ec:b2:3a: 5f:a7:bc:57:7c:c2:59:91:eb:17:0f:0a:7e:f9:4c: 0a:70:2a:8c:c4:7b:22:1d:23:dc:18:82:cb:b8:db: 8e:23:9a:1d:d3:04:aa:9e:79:a7:6e:82:b9:9c:f1: 8e:ca:49:ae:dd:94:d8:ff:d1:5d:0d:9c:d8:71:a9: db:74:0d:0d:e6:2a:68:e9:30:a4:6c:3c:84:7c:81: 56:ab:a9:96:3e:2c:64:0f:5d:58:32:c3:e0:a1:85: e3:3d:b9:ba:2e:82:91:b7:b4:1e:b2:43:aa:75:d9: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9B:51:45:90:1F:E8:4D:8E:95:12:C5:38:F9:A4:03:57:12:A8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:94:f7:93:20:ce:a3:4c:90:c4:e2:0b:01:a2:0a:44:d2:fe: b0:63:5f:67:c9:5a:a6:7e:e8:5e:22:b5:d0:b2:ce:c0:ed:4f: 28:ff:23:05:bd:de:ca:f4:8a:81:d4:71:6f:b2:bf:e6:77:c1: 19:df:87:3a:ce:56:b0:2d:fb:34:1a:f1:26:65:3f:ef:41:2a: 77:7e:32:44:fc:91:4a:3a:bf:8c:4a:79:87:bf:d5:1b:d4:7b: 43:bd:0e:96:23:9e:c1:1b:2a:96:2e:77:91:8f:2d:c4:02:06: 09:e2:ba:0c:c4:7c:2b:b0:ad:7d:3a:d1:51:53:8b:e2:df:c3: fe:0d:43:88:0f:a5:fb:5f:1d:51:41:48:01:f3:38:b4:b2:94: 3b:46:d0:c0:0e:bb:26:9f:d5:65:1f:20:b2:a3:d8:91:09:9d: 58:d4:9f:79:27:7f:65:ec:af:82:7f:59:29:0c:5b:29:4c:f5: 19:e7:23:4d:ed:b1:24:37:eb:41:b5:cb:37:f1:f6:2d:da:5e: 75:26:2f:b1:bd:37:c9:de:1e:43:43:6f:f4:ea:41:8a:81:89: fc:cc:b7:25:28:a1:1b:d7:1b:ae:29:d0:7d:89:f2:b0:f5:35: 7f:1e:cc:e5:80:11:54:a8:68:86:4a:97:e6:af:d8:77:cb:d4: d9:43:a9:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wColjVnbDMRhY18wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2M3MzlmYzctMzQ5MC00YmJmLWIxNGYtNTRiYTMwMDMxMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiu0n8IfUTj0kPQijtTmN4YAail3X15rF0dN C6xYnBKlIalFsxnxbIwAtwh2SintaJ7SmpHGru8+YX5803aYxVbV9rnLt1kY+06e NJaiOZ28XcPMqx9/cNxJoU2YLs4Ywaj3aIGNxlzfxyd0rlbAoJHH4+M7V/m5ZRL1 osvkCIFPco9jk17ioTsTy9H1Wyf1hGDssjpfp7xXfMJZkesXDwp++UwKcCqMxHsi HSPcGILLuNuOI5od0wSqnnmnboK5nPGOykmu3ZTY/9FdDZzYcanbdA0N5ipo6TCk bDyEfIFWq6mWPixkD11YMsPgoYXjPbm6LoKRt7QeskOqddn2KwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIObUUWQH+hNjpUSxTj5pANXEqjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQyNjcyY2ItZWE3Yi0z ZGIzLTg1MzgtYTk2OTM5NGExOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCGlPeTIM6jTJDE4gsBogpE0v6wY19nyVqmfuhe IrXQss7A7U8o/yMFvd7K9IqB1HFvsr/md8EZ34c6zlawLfs0GvEmZT/vQSp3fjJE /JFKOr+MSnmHv9Ub1HtDvQ6WI57BGyqWLneRjy3EAgYJ4roMxHwrsK19OtFRU4vi 38P+DUOID6X7Xx1RQUgB8zi0spQ7RtDADrsmn9VlHyCyo9iRCZ1Y1J95J39l7K+C f1kpDFspTPUZ5yNN7bEkN+tBtcs38fYt2l51Ji+xvTfJ3h5DQ2/06kGKgYn8zLcl KKEb1xuuKdB9ifKw9TV/HszlgBFUqGiGSpfmr9h3y9TZQ6lu -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:36 2026 by rpki-client