$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa File: fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa (raw, json) Hash identifier: 7cd0/6r32Me6q5NSn3crdG14AboLsqwT5WENRqFLYAA= Subject key identifier: 4F:49:51:FB:3A:8E:78:A4:DF:26:14:B6:30:C6:0B:2B:BC:A1:73:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A4AAA15D8B068D36E8830 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36623 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4a:aa:15:d8:b0:68:d3:6e:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bcb56333-29c0-4833-85e0-6857f6ac7a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:8c:40:49:df:f7:fc:d3:4a:c0:b6:09:1c: 45:e5:2a:0a:e1:a7:eb:74:de:8e:74:bb:24:ba:f1: d9:14:e9:4f:e9:6b:bd:0e:dd:94:e2:a7:e8:2d:a4: 61:b6:cc:0b:3f:d4:34:42:47:12:a2:2e:fc:9a:83: e1:1b:f4:9b:ad:8e:4e:fe:58:3b:f0:6c:aa:cd:87: d0:8e:d5:7e:8b:c8:e1:0a:20:6d:be:65:3d:cf:82: 72:a4:0b:e7:41:b8:4a:91:60:26:4c:56:fe:12:71: 21:ca:dd:ee:e2:f4:19:0c:08:8f:3c:04:c3:6e:48: 96:48:77:dc:8f:ef:48:76:cb:3b:d6:85:b6:f2:cc: c4:b6:41:99:e1:12:d2:33:86:b6:8a:36:7a:2f:38: ef:08:08:b3:f3:c1:eb:f4:f1:76:ea:97:0c:59:c4: 04:ae:d3:46:4e:95:e4:41:19:97:36:94:7e:41:0d: 96:df:7c:75:83:c9:60:73:e3:31:8d:d1:4f:05:d3: 18:3d:e5:a0:65:32:98:77:c3:7e:88:5e:56:39:c5: bd:4e:8d:0f:64:81:4e:2a:24:95:77:79:45:9f:96: 15:1e:03:9f:0c:39:8e:53:ac:6f:12:f7:60:5a:29: 05:f0:10:0c:66:df:5f:b8:fb:4f:ad:60:de:f5:9b: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:49:51:FB:3A:8E:78:A4:DF:26:14:B6:30:C6:0B:2B:BC:A1:73:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe64cd-8bd0-3bee-8d1a-a408a66c2895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:c2:e6:0e:14:a2:79:52:99:57:14:30:2c:69:ad:d8:2a: 07:83:8a:4b:04:50:33:03:65:1a:45:41:49:46:5d:b8:1f:63: d7:49:f8:3d:83:44:57:a2:d8:18:f5:af:65:60:04:2d:db:bc: b3:1f:cd:3a:a9:b0:70:b4:e2:e5:b9:f9:15:91:15:90:b8:2c: e8:cd:03:21:53:98:3d:5e:35:c2:eb:32:49:ab:37:92:c0:1a: 62:fc:9b:12:06:71:1b:c0:91:02:fc:c5:5d:c7:2e:93:e3:53: 30:01:a1:88:74:a8:3d:62:24:21:26:08:22:e5:9e:b3:19:48: 11:65:c5:4d:0b:90:08:63:17:03:7f:a5:da:16:41:a0:a6:86: f7:b8:5f:c9:5a:63:48:1c:1a:2f:42:08:e7:e9:07:79:a5:1d: 46:53:2b:0b:ca:db:4b:ab:b6:57:5b:c3:5c:b9:1d:b3:e3:4d: f1:76:59:8a:3e:59:08:b8:73:80:79:0a:a1:96:43:6d:3b:5d: 04:f9:32:8f:c7:20:c8:4a:3e:6a:1c:fb:32:f7:95:4f:1f:10: 71:83:ca:2b:68:ae:df:02:02:0b:7b:17:cb:58:6a:ce:88:03: 76:e3:90:e8:57:b8:de:af:4b:3e:02:ef:21:06:93:c8:1d:6a: 4a:d3:61:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekqqFdiwaNNuiDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmNiNTYzMzMtMjljMC00ODMzLTg1ZTAtNjg1N2Y2YWM3YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6MQEnf9/zTSsC2CRxF5SoK4afrdN6OdLsk uvHZFOlP6Wu9Dt2U4qfoLaRhtswLP9Q0QkcSoi78moPhG/SbrY5O/lg78GyqzYfQ jtV+i8jhCiBtvmU9z4JypAvnQbhKkWAmTFb+EnEhyt3u4vQZDAiPPATDbkiWSHfc j+9Idss71oW28szEtkGZ4RLSM4a2ijZ6LzjvCAiz88Hr9PF26pcMWcQErtNGTpXk QRmXNpR+QQ2W33x1g8lgc+MxjdFPBdMYPeWgZTKYd8N+iF5WOcW9To0PZIFOKiSV d3lFn5YVHgOfDDmOU6xvEvdgWikF8BAMZt9fuPtPrWDe9ZvIVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9JUfs6jnik3yYUtjDGCyu8oXNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTY0Y2QtOGJkMC0z YmVlLThkMWEtYTQwOGE2NmMyODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI72wuYOFKJ5UplXFDAsaa3YKgeDiksEUDMDZRpFQUlGXbgfY9dJ +D2DRFei2Bj1r2VgBC3bvLMfzTqpsHC04uW5+RWRFZC4LOjNAyFTmD1eNcLrMkmr N5LAGmL8mxIGcRvAkQL8xV3HLpPjUzABoYh0qD1iJCEmCCLlnrMZSBFlxU0LkAhj FwN/pdoWQaCmhve4X8laY0gcGi9CCOfpB3mlHUZTKwvK20urtldbw1y5HbPjTfF2 WYo+WQi4c4B5CqGWQ207XQT5Mo/HIMhKPmoc+zL3lU8fEHGDyitort8CAgt7F8tY as6IA3bjkOhXuN6vSz4C7yEGk8gdakrTYTc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:26 2026 by rpki-client