$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa File: fffe1080-ba53-3a25-a249-2ea2617bd944.roa (raw, json) Hash identifier: wwoO0f7JGvT6zu8sNLBP2rbCDJwxRnSOPt13oBZT+A4= Subject key identifier: A6:56:7A:7A:FD:1D:D8:0F:BC:27:48:FA:EB:89:21:27:27:57:57:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA56692F321D19328A32C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 10515 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:56:69:2f:32:1d:19:32:8a:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3962ee0d-a412-409b-913c-66c0e665a00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:5e:33:4c:bc:3f:16:3d:dd:b6:d2:94:ac: 3e:14:89:15:ab:f4:e4:f9:ad:3e:42:f1:e0:b4:62: d0:7e:bb:0a:e1:ce:f1:c1:20:1f:83:74:60:53:25: 53:e7:96:65:84:a2:b7:ea:58:7f:fc:f1:43:3e:7d: 5c:4e:0d:27:94:63:1b:e4:d8:1a:06:69:3f:27:81: 27:85:12:89:e3:7e:f4:8a:3b:1d:20:9e:07:7c:7b: 94:7c:c0:46:8f:76:7e:dd:2c:d7:dd:fe:22:d9:93: a6:1c:99:42:b4:2b:80:e9:88:3e:51:a9:57:48:02: db:a5:1d:1f:38:d7:b1:17:da:48:04:89:ee:1e:42: bd:2e:6c:f2:f1:27:50:c2:bf:ee:6b:04:1a:92:2f: 50:dc:74:bd:9a:c2:0a:15:58:45:63:45:ac:a0:40: 21:f2:72:46:b1:ca:bf:ac:c0:31:92:85:60:0b:4e: 58:7f:fe:4e:55:9c:99:2e:d5:51:bd:48:f9:62:63: 46:16:4e:71:a6:fa:1c:07:65:f0:da:f5:a8:aa:21: b6:46:25:77:8c:f8:68:37:f7:5c:01:38:de:9e:e4: cc:b6:b8:a0:d7:3f:24:01:b7:ae:68:89:8c:22:52: 74:8b:fc:ab:16:e0:18:31:a9:69:cb:ff:b6:bb:56: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:7A:7A:FD:1D:D8:0F:BC:27:48:FA:EB:89:21:27:27:57:57:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:34:66:f1:37:cb:d9:80:71:8c:14:85:a6:49:75:24:8e:3f: a2:24:2a:42:1c:72:df:92:18:3a:4c:37:e0:da:84:47:dd:f5: 6f:e7:ff:23:37:2a:f6:f5:4c:c3:60:fc:a0:62:7e:8c:cc:a8: 45:53:f7:e9:6d:30:3b:31:89:b4:8a:8f:d2:28:b5:79:02:15: 17:23:5f:0f:99:6b:3b:55:74:9e:79:a4:23:ca:5b:b9:da:8b: 51:27:ac:80:cf:76:86:be:ad:4e:66:b5:36:a4:7d:12:5f:80: 62:e3:a6:82:39:12:66:a4:d1:54:cf:3f:6c:3f:09:df:c9:8c: 83:89:72:f9:9d:2c:e0:8c:41:5c:d4:76:35:9a:66:14:40:c5: ee:ab:4e:ce:1b:71:bf:34:38:c6:3f:ca:ea:c6:bd:15:6b:c7: cc:c4:35:93:65:87:5b:5c:96:69:c0:f0:fb:88:39:90:e2:a1: c7:fa:eb:01:37:0f:7a:9f:c5:6f:48:9b:a9:ee:37:87:dc:a3: f2:be:4e:93:8d:ca:0b:41:1d:56:b0:d9:67:9e:ff:51:3d:79: 08:00:f9:a0:94:77:2c:dc:35:bd:c2:18:f1:a5:1f:36:41:f6: 8e:12:c3:69:72:48:32:e4:d8:69:19:c9:35:dd:77:99:72:b7: 75:c8:fe:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lZpLzIdGTKKMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Mzk2MmVlMGQtYTQxMi00MDliLTkxM2MtNjZjMGU2NjVhMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e5eM0y8PxY93bbSlKw+FIkVq/Tk+a0+QvHg tGLQfrsK4c7xwSAfg3RgUyVT55ZlhKK36lh//PFDPn1cTg0nlGMb5NgaBmk/J4En hRKJ4370ijsdIJ4HfHuUfMBGj3Z+3SzX3f4i2ZOmHJlCtCuA6Yg+UalXSALbpR0f ONexF9pIBInuHkK9Lmzy8SdQwr/uawQaki9Q3HS9msIKFVhFY0WsoEAh8nJGscq/ rMAxkoVgC05Yf/5OVZyZLtVRvUj5YmNGFk5xpvocB2Xw2vWoqiG2RiV3jPhoN/dc ATjenuTMtrig1z8kAbeuaImMIlJ0i/yrFuAYMalpy/+2u1YDEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKZWenr9HdgPvCdI+uuJIScnV1fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTEwODAtYmE1My0z YTI1LWEyNDktMmVhMjYxN2JkOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlNGbxN8vZgHGMFIWmSXUkjj+iJCpCHHLfkhg6 TDfg2oRH3fVv5/8jNyr29UzDYPygYn6MzKhFU/fpbTA7MYm0io/SKLV5AhUXI18P mWs7VXSeeaQjylu52otRJ6yAz3aGvq1OZrU2pH0SX4Bi46aCORJmpNFUzz9sPwnf yYyDiXL5nSzgjEFc1HY1mmYUQMXuq07OG3G/NDjGP8rqxr0Va8fMxDWTZYdbXJZp wPD7iDmQ4qHH+usBNw96n8VvSJup7jeH3KPyvk6TjcoLQR1WsNlnnv9RPXkIAPmg lHcs3DW9whjxpR82QfaOEsNpckgy5NhpGck13XeZcrd1yP57 -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:35 2026 by rpki-client