$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa File: 2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa (raw, json) Hash identifier: XAHxzpphFJ5Q1m7JQ6EPObbm+IaUK5tMwXdfGHoc22c= Subject key identifier: 35:7C:5E:BE:F6:34:FF:C7:37:85:23:32:FE:BA:E8:A2:CC:82:48:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587AE3C0852D097378AE880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396586 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:ae:3c:08:52:d0:97:37:8a:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=a6409f2b-a33f-485b-ae06-ed7a0e6cdcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ed:20:7c:f3:e0:e3:b6:b4:a2:50:10:bf:cc: 5e:ae:c2:cc:b4:ce:68:43:25:ac:31:7f:3f:40:43: 50:42:33:3f:b6:c9:08:a1:0d:5f:20:f9:56:02:05: a1:be:f1:d0:ff:84:e1:cd:b7:39:34:a5:4d:5f:49: e9:c7:f8:8d:a4:50:d3:4c:bd:63:21:14:69:70:01: d4:bd:d7:2e:a3:31:90:fd:27:e7:4b:b4:3a:12:eb: 02:94:8e:12:77:12:37:0c:79:d5:61:fb:a7:bc:ab: 7a:a4:d0:eb:42:61:ad:5e:22:1a:0b:45:c8:ce:9f: b0:ff:68:aa:6a:bb:6e:a6:15:7d:55:a9:67:0a:dd: d7:af:d3:02:97:c7:b8:e5:ad:c3:42:24:a4:b6:7a: 90:c9:09:99:02:33:10:94:f3:15:f2:3e:16:c8:8b: 7f:37:2c:35:79:0f:67:66:b3:0e:6a:a9:b9:6c:7c: f2:39:56:e1:90:86:13:b3:3f:88:50:9b:8e:ea:1c: 1e:34:51:da:ff:66:62:d2:c8:eb:1e:3d:a3:f1:33: 1d:84:7b:23:e6:44:f8:4c:33:8d:34:52:36:39:27: c8:64:21:62:a2:42:54:0f:44:74:ae:c6:60:ae:0f: b0:2d:21:39:21:44:a6:eb:25:64:59:3a:e3:4f:05: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7C:5E:BE:F6:34:FF:C7:37:85:23:32:FE:BA:E8:A2:CC:82:48:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:55:c2:89:5d:c5:73:c7:c5:00:8a:fd:d5:62:46:e4:e1:b2: 39:1b:f2:7f:bd:91:f5:85:12:d5:b7:a0:9d:d5:ee:47:ee:02: e4:75:e8:6d:f3:6d:67:28:48:3c:56:2d:57:bf:b0:cd:ac:68: e0:2a:9b:d0:03:d4:7d:9a:22:0b:82:5f:fd:24:68:6e:80:fe: b0:ce:af:1a:8b:a4:06:05:4e:54:f7:57:a2:2b:3a:7e:04:58: 8b:af:d9:2a:e6:07:cb:7d:ca:34:17:8e:95:0b:33:11:e8:07: 7a:e3:da:27:54:4d:9a:8d:79:c7:e7:9a:1e:5e:b5:8a:94:02: 7b:ba:bd:2e:35:3c:dc:4d:6e:22:87:4d:07:27:50:5d:50:28: 9f:7c:e2:98:05:5c:12:31:0c:af:6f:76:30:0d:46:71:24:6c: 6e:91:99:ab:0a:8c:c7:78:7a:e2:75:46:42:f3:48:73:fa:5f: 39:26:b6:6d:c3:cb:9a:64:e6:39:ab:78:9c:89:3f:56:10:05: ca:87:d3:8b:ec:19:54:b5:46:f6:b2:ae:76:73:17:f2:2f:38: bc:1f:60:31:4a:29:64:82:50:c0:cc:33:4b:6b:4c:40:e7:3a: ca:f9:7f:ed:f7:ff:c2:80:21:1e:23:be:91:8e:b6:15:3c:67: a0:fa:bc:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h648CFLQlzeK6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YTY0MDlmMmItYTMzZi00ODViLWFlMDYtZWQ3YTBlNmNkY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+0gfPPg47a0olAQv8xersLMtM5oQyWsMX8/ QENQQjM/tskIoQ1fIPlWAgWhvvHQ/4Thzbc5NKVNX0npx/iNpFDTTL1jIRRpcAHU vdcuozGQ/SfnS7Q6EusClI4SdxI3DHnVYfunvKt6pNDrQmGtXiIaC0XIzp+w/2iq artuphV9ValnCt3Xr9MCl8e45a3DQiSktnqQyQmZAjMQlPMV8j4WyIt/Nyw1eQ9n ZrMOaqm5bHzyOVbhkIYTsz+IUJuO6hweNFHa/2Zi0sjrHj2j8TMdhHsj5kT4TDON NFI2OSfIZCFiokJUD0R0rsZgrg+wLSE5IUSm6yVkWTrjTwX9SwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDV8Xr72NP/HN4UjMv666KLMgkiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzNzAxNmEtMDIzMi0z Yzc1LWE2Y2YtZThiNGQyYTlmOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB7VcKJXcVzx8UAiv3VYkbk4bI5G/J/vZH1hRLV t6Cd1e5H7gLkdeht821nKEg8Vi1Xv7DNrGjgKpvQA9R9miILgl/9JGhugP6wzq8a i6QGBU5U91eiKzp+BFiLr9kq5gfLfco0F46VCzMR6Ad649onVE2ajXnH55oeXrWK lAJ7ur0uNTzcTW4ih00HJ1BdUCiffOKYBVwSMQyvb3YwDUZxJGxukZmrCozHeHri dUZC80hz+l85JrZtw8uaZOY5q3iciT9WEAXKh9OL7BlUtUb2sq52cxfyLzi8H2Ax SilkglDAzDNLa0xA5zrK+X/t9//CgCEeI76RjrYVPGeg+rwq -----END CERTIFICATE-----Generated at Mon Mar 2 02:03:26 2026 by rpki-client