$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa File: 37dcc827-500d-3f5b-b386-f2f53f92ae66.roa (raw, json) Hash identifier: UYMVecdUKuvk8qZ8NivwXOLeuc1q0cbOnvWOtf7IF1s= Subject key identifier: E1:F0:E9:7C:CD:57:7A:89:3C:69:E0:90:0F:7B:7F:F6:BC:C7:C4:CD Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584D80FFE1C9CF5FD1525CC0E740 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 54225 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e1:c9:cf:5f:d1:52:5c:c0:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=1f0e854b-2882-4414-be38-26b739e9428f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:9f:d5:ff:7e:77:86:8e:44:2b:0b:da:ce: e7:04:ea:1b:31:db:be:51:5a:02:03:62:35:01:ce: 05:4a:f0:20:b0:cb:97:c0:60:3c:6b:56:4a:7e:e9: d2:33:fe:2b:b3:da:92:1a:28:1b:e1:4b:e6:a1:6a: bf:0a:bb:56:68:c8:79:18:f5:fb:f5:0f:dc:0b:db: a6:ce:fa:c9:bb:46:56:c7:e3:ee:e5:16:99:bf:3e: 94:3f:cb:58:6f:e7:03:93:77:90:b4:fb:c7:a7:a9: 0c:b7:f6:87:6c:a7:65:df:6d:3f:2a:55:8b:03:db: 27:73:84:f3:a6:2a:99:b4:18:88:d2:67:48:16:71: a5:57:d9:b2:87:02:c1:d2:68:60:f6:8f:25:d6:52: 91:ea:c3:73:37:b1:47:e7:11:24:41:49:e0:73:5a: 7e:bb:9e:16:44:f3:1b:83:1b:02:56:97:66:19:6e: 18:8b:2c:22:6b:2e:ed:74:8f:3a:df:49:3c:c1:32: 66:48:ad:45:1b:0e:66:5e:27:14:ef:7d:7b:72:ed: c8:d4:58:bf:17:a9:82:e1:57:b5:98:ff:54:0c:bd: 94:f0:86:6e:f1:1d:15:bb:ab:82:11:b3:34:4e:f0: 01:2b:7f:ae:2f:be:a5:de:16:7d:68:7f:72:ab:63: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:E9:7C:CD:57:7A:89:3C:69:E0:90:0F:7B:7F:F6:BC:C7:C4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d4:26:f6:47:f5:f1:0f:4a:8b:90:ff:d0:cb:29:c6:c5:ab: 4d:ea:89:8a:8d:62:8b:0b:37:32:c7:60:8c:f2:86:dd:c2:da: 2f:94:64:96:91:34:49:78:23:e2:96:a3:9f:d0:f6:14:ea:ce: 59:a7:b9:aa:aa:a3:6b:dc:48:40:3a:86:9d:ad:e8:f9:ae:7b: 2f:e5:56:fd:ee:6e:3e:34:01:48:b8:ee:42:70:21:70:1a:d4: c7:42:2d:88:da:61:7a:86:6f:dd:86:0b:34:90:d1:89:20:76: 9f:23:85:22:8e:8f:be:04:57:68:10:09:18:94:25:c7:13:f1: e1:dc:15:6b:0e:49:b4:88:ad:1d:c1:9f:6d:80:6f:b5:6e:d5: 16:49:96:75:5c:e7:b1:53:ba:6f:6e:83:33:ad:67:b2:1a:eb: 27:cf:20:64:09:d8:2a:3d:1c:a0:c9:b9:a9:24:c2:f9:27:d8: c6:d8:44:66:04:30:9b:eb:7b:f6:ca:77:26:5e:e5:d8:52:c9: b3:37:99:90:94:9f:fc:22:2e:c4:28:d4:34:b6:a8:ab:35:ef: 4d:3c:e1:05:00:5b:00:67:98:6d:1d:b1:c2:24:de:e6:6d:53: c4:1f:af:26:b9:58:e6:4f:3d:aa:fd:8a:b5:cd:0f:ea:ea:65: 82:49:e1:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2A/+HJz1/RUlzA50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MWYwZTg1NGItMjg4Mi00NDE0LWJlMzgtMjZiNzM5ZTk0MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfif1f9+d4aORCsL2s7nBOobMdu+UVoCA2I1 Ac4FSvAgsMuXwGA8a1ZKfunSM/4rs9qSGigb4UvmoWq/CrtWaMh5GPX79Q/cC9um zvrJu0ZWx+Pu5RaZvz6UP8tYb+cDk3eQtPvHp6kMt/aHbKdl320/KlWLA9snc4Tz piqZtBiI0mdIFnGlV9myhwLB0mhg9o8l1lKR6sNzN7FH5xEkQUngc1p+u54WRPMb gxsCVpdmGW4Yiywiay7tdI8630k8wTJmSK1FGw5mXicU7317cu3I1Fi/F6mC4Ve1 mP9UDL2U8IZu8R0Vu6uCEbM0TvABK3+uL76l3hZ9aH9yq2MMywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOHw6XzNV3qJPGngkA97f/a8x8TNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvMzdkY2M4MjctNTAwZC0z ZjViLWIzODYtZjJmNTNmOTJhZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCi1Cb2R/XxD0qLkP/QyynGxatN6omKjWKLCzcyx2CM8obdwtovlGSW kTRJeCPilqOf0PYU6s5Zp7mqqqNr3EhAOoadrej5rnsv5Vb97m4+NAFIuO5CcCFw GtTHQi2I2mF6hm/dhgs0kNGJIHafI4Uijo++BFdoEAkYlCXHE/Hh3BVrDkm0iK0d wZ9tgG+1btUWSZZ1XOexU7pvboMzrWeyGusnzyBkCdgqPRygybmpJML5J9jG2ERm BDCb63v2yncmXuXYUsmzN5mQlJ/8Ii7EKNQ0tqirNe9NPOEFAFsAZ5htHbHCJN7m bVPEH68muVjmTz2q/Yq1zQ/q6mWCSeE/ -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:03 2026 by rpki-client