$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa File: 11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa (raw, json) Hash identifier: aQCY0JevNjeDGtltagXlTxKhWwmivjNY1oTV1Cnrejo= Subject key identifier: 4C:9E:D9:BE:E9:6B:83:E1:39:80:71:2B:98:99:DD:58:39:AB:A4:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587ABB80098CF80F54ADF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 25485 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:ab:b8:00:98:cf:80:f5:4a:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=c6498461-0aef-408a-b54d-c207f8302cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:44:e4:41:6c:15:48:b4:05:46:dd:1d:9f: 97:62:a6:5f:e0:14:9e:f4:bd:02:13:2b:26:b1:13: 7c:4c:30:79:7e:fb:4d:cc:ad:87:5a:e1:d0:80:e7: f5:81:e3:8c:c5:1a:cc:52:55:d6:25:6e:09:22:9e: 1f:4e:31:e3:99:40:ca:7f:37:78:2f:62:c3:f5:7c: 5f:13:34:3b:85:e7:a3:81:97:8e:2b:91:47:e5:b2: 00:c4:3f:46:af:6d:fd:cc:14:3f:7e:e8:0b:2d:83: 5f:7e:22:5a:49:0e:97:a5:69:f6:0e:ca:a5:33:00: d7:e0:56:bb:65:90:6e:ab:95:36:c3:68:40:08:06: 51:7e:bd:33:31:75:f7:0f:53:c1:6f:55:81:88:c5: cf:24:9d:14:fa:4e:17:10:81:79:5c:ce:8f:29:b7: 99:5f:10:84:e5:fb:f1:53:01:b0:a7:c2:21:9c:d2: c6:1c:26:8b:a9:45:bc:3d:8d:69:66:3b:24:ec:0e: 05:ee:c7:f9:d1:dc:63:ff:b6:af:e9:83:1c:27:02: 97:f3:0c:d5:f6:c3:f7:e7:f1:f4:41:5f:7d:f5:9e: 5d:ca:b8:e7:81:72:33:b1:26:a3:24:26:45:1c:f3: 8f:e0:fd:e7:eb:c3:d8:c3:37:cf:3c:2e:2d:81:c1: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:D9:BE:E9:6B:83:E1:39:80:71:2B:98:99:DD:58:39:AB:A4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:54:8b:8c:40:77:5d:db:a8:d1:66:52:4d:7e:2c:b8:d0:62: 68:48:c3:3a:45:72:8e:21:0b:73:8a:78:7b:03:ff:de:63:aa: 96:e9:29:f8:09:5a:53:34:b5:d8:10:58:61:6f:bc:67:27:5f: 0a:9b:fe:c7:a9:70:91:06:58:5a:9e:c4:08:4b:b9:5a:92:77: 48:2d:76:5b:58:07:33:00:05:28:51:94:98:19:55:db:16:7c: 82:75:fb:ad:79:b1:8a:94:2e:df:1f:ec:39:20:45:a7:1d:d9: ef:d2:d1:0e:7d:6c:e9:b2:db:32:65:46:39:e7:73:af:c2:8b: e1:e6:de:0e:d4:06:ac:2b:4b:b5:de:ce:88:4f:4c:54:40:e4: c6:f5:68:37:20:b1:ab:a4:be:cd:21:ee:58:d6:a8:e0:6b:12: 35:33:2f:89:8b:4f:9a:6b:3d:a2:7f:0c:be:4a:f3:bb:08:93: 51:64:f7:0c:15:80:be:bb:4f:19:e3:72:fe:5e:b6:1c:60:c7: 4f:ed:7f:2b:91:27:cb:8c:fb:96:83:67:e9:a5:c6:49:67:58: 72:4c:1a:bd:a3:27:b1:31:94:3d:2f:03:6b:29:68:73:2d:cc: d5:68:c7:a8:e1:3d:44:f3:ff:76:ba:2c:e0:6d:05:af:46:3e: 98:81:4d:e2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6u4AJjPgPVK30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YzY0OTg0NjEtMGFlZi00MDhhLWI1NGQtYzIwN2Y4MzAyY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3BE5EFsFUi0BUbdHZ+XYqZf4BSe9L0CEysm sRN8TDB5fvtNzK2HWuHQgOf1geOMxRrMUlXWJW4JIp4fTjHjmUDKfzd4L2LD9Xxf EzQ7heejgZeOK5FH5bIAxD9Gr239zBQ/fugLLYNffiJaSQ6XpWn2DsqlMwDX4Fa7 ZZBuq5U2w2hACAZRfr0zMXX3D1PBb1WBiMXPJJ0U+k4XEIF5XM6PKbeZXxCE5fvx UwGwp8IhnNLGHCaLqUW8PY1pZjsk7A4F7sf50dxj/7av6YMcJwKX8wzV9sP35/H0 QV999Z5dyrjngXIzsSajJCZFHPOP4P3n68PYwzfPPC4tgcFrMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEye2b7pa4PhOYBxK5iZ3Vg5q6RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhM2FiOTQtNWQ4Yi0z MDU0LWEwNGUtNTM1OWYyOWM3ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3VIuMQHdd26jRZlJNfiy40GJoSMM6RXKOIQtz inh7A//eY6qW6Sn4CVpTNLXYEFhhb7xnJ18Km/7HqXCRBlhansQIS7lakndILXZb WAczAAUoUZSYGVXbFnyCdfutebGKlC7fH+w5IEWnHdnv0tEOfWzpstsyZUY553Ov wovh5t4O1AasK0u13s6IT0xUQOTG9Wg3ILGrpL7NIe5Y1qjgaxI1My+Ji0+aaz2i fwy+SvO7CJNRZPcMFYC+u08Z43L+XrYcYMdP7X8rkSfLjPuWg2fppcZJZ1hyTBq9 oyexMZQ9LwNrKWhzLczVaMeo4T1E8/92uizgbQWvRj6YgU3i -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:09 2026 by rpki-client