$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa File: 74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa (raw, json) Hash identifier: O7jjKa6kDM4k9DY4GMMhZv0JS7WF50WNOwnxQKeT4Rc= Subject key identifier: 3C:8F:D8:16:E5:9B:DF:11:F1:83:DA:A7:32:7C:51:19:85:08:7D:91 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584D359FAC5100230F4A6F07F800 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 396981 IP address blocks: 2620:8c:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ac:51:00:23:0f:4a:6f:07:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=477adbab-faeb-413a-917c-10f24a804d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:58:a4:3f:64:49:91:d9:2a:73:8f:f9:1c: 2c:61:1d:0a:0f:c1:75:e7:97:cb:49:95:d7:4b:75: c5:cd:bf:28:7c:69:70:ca:a8:44:d7:00:8d:1a:b5: 43:63:00:a2:58:53:3c:8f:62:29:09:ee:26:ae:5c: 8a:f1:c4:1f:f5:ed:f2:42:d0:ec:b9:6e:37:81:cf: 57:eb:22:c6:ac:fc:05:36:9a:fa:6e:fe:f4:6e:35: dc:a6:d8:6f:a8:9a:44:70:97:4a:2d:92:52:18:47: ff:4c:83:74:36:78:6b:4a:d5:59:ef:aa:a0:3c:b5: 7d:ab:e9:95:e8:70:19:a4:ac:6b:90:7b:c6:79:80: 48:4b:eb:11:6f:b5:96:ed:8c:14:c5:9a:89:5b:78: d4:8b:e4:30:71:c9:e3:d2:82:dc:9c:22:17:b7:c3: d4:3e:54:69:65:3e:22:e3:67:f9:a5:d7:b3:6b:77: fe:8a:13:2b:ec:97:c6:e4:0a:13:f9:e7:8b:19:91: e7:f2:c9:b9:b3:82:29:33:fa:c7:12:eb:55:36:a6: d1:bf:8f:95:d9:93:2f:1f:b0:98:46:a5:e2:f8:78: a1:00:e4:11:66:28:f5:44:16:35:22:53:f5:17:b6: 52:11:59:98:7b:d0:51:a4:4a:e0:eb:49:c9:37:fa: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:D8:16:E5:9B:DF:11:F1:83:DA:A7:32:7C:51:19:85:08:7D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv6: 2620:8c:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b0:93:70:f3:09:24:e8:60:8d:b2:ba:e5:1b:97:e9:63:21: 29:f3:f9:86:74:00:f2:8f:e6:90:2f:aa:7c:d8:ee:61:20:23: 70:81:66:df:f3:4c:7c:81:ff:1f:32:0b:05:b3:cd:b0:a2:c4: a0:a6:19:51:6d:36:ef:76:dc:a8:5b:c2:78:bb:c6:f6:1d:99: 37:fb:8a:84:37:61:fc:40:ca:c4:6b:8b:e3:14:8c:e7:c3:a6: 36:2d:55:10:d1:c0:b5:1e:01:f4:25:25:ca:f8:3e:88:46:c3: 58:13:3a:33:01:ca:1a:3f:21:00:d7:2e:49:88:87:ce:2d:66: 54:7d:34:2c:31:a2:30:cf:c4:ab:1d:eb:0d:49:c7:2c:86:8b: 60:79:3c:d9:36:da:66:95:63:89:80:25:3b:40:16:d3:4f:b8: 09:f4:9d:e6:36:1f:06:b4:00:70:1e:94:91:8a:50:b7:06:ad: 58:aa:b3:6e:5a:b9:54:74:06:83:01:32:18:44:22:d8:ef:36: 53:dd:af:49:0d:7d:3e:dc:1c:93:50:c2:99:81:39:77:65:3f: 50:31:ee:d0:b5:fb:85:ea:42:e2:0a:b7:35:37:23:64:e3:15: 6d:ab:da:ac:75:ab:44:9b:bb:72:ee:f1:e0:05:97:03:94:dc: 1f:8b:8f:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n6xRACMPSm8H+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDc3YWRiYWItZmFlYi00MTNhLTkxN2MtMTBmMjRhODA0ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgppYpD9kSZHZKnOP+RwsYR0KD8F155fLSZXX S3XFzb8ofGlwyqhE1wCNGrVDYwCiWFM8j2IpCe4mrlyK8cQf9e3yQtDsuW43gc9X 6yLGrPwFNpr6bv70bjXcpthvqJpEcJdKLZJSGEf/TIN0NnhrStVZ76qgPLV9q+mV 6HAZpKxrkHvGeYBIS+sRb7WW7YwUxZqJW3jUi+Qwccnj0oLcnCIXt8PUPlRpZT4i 42f5pdeza3f+ihMr7JfG5AoT+eeLGZHn8sm5s4IpM/rHEutVNqbRv4+V2ZMvH7CY RqXi+HihAOQRZij1RBY1IlP1F7ZSEVmYe9BRpErg60nJN/ocNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDyP2Bblm98R8YPapzJ8URmFCH2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvNzRmZGQyZDQtMGQ4Yy0z MGE2LThjYjctZWMwMjU2MTZlMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWwk3DzCSToYI2yuuUbl+ljISnz+YZ0APKP5pAvqnzY7mEgI3CB Zt/zTHyB/x8yCwWzzbCixKCmGVFtNu923Khbwni7xvYdmTf7ioQ3YfxAysRri+MU jOfDpjYtVRDRwLUeAfQlJcr4PohGw1gTOjMByho/IQDXLkmIh84tZlR9NCwxojDP xKsd6w1JxyyGi2B5PNk22maVY4mAJTtAFtNPuAn0neY2Hwa0AHAelJGKULcGrViq s25auVR0BoMBMhhEItjvNlPdr0kNfT7cHJNQwpmBOXdlP1Ax7tC1+4XqQuIKtzU3 I2TjFW2r2qx1q0Sbu3Lu8eAFlwOU3B+LjzE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:26 2026 by rpki-client