$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa File: 3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa (raw, json) Hash identifier: QwmUMvt+jXxUPBWPQj7QKoKfkErCnpkMavh/+ElBfC8= Subject key identifier: 27:46:2A:50:96:40:0A:B4:8D:C7:75:2C:5D:F9:49:A9:8C:AF:67:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D09124FEB122C51B057FCEFE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396545 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:4f:eb:12:2c:51:b0:57:fc:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=ca924458-9868-4ea1-81d6-1c16e6fe976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6a:5e:c3:00:61:cd:d8:e0:67:e0:2d:a3:d2: 0c:f2:37:67:40:c4:76:ec:0f:6d:0c:60:4f:5f:e5: a3:ef:bb:ae:cd:10:50:ae:e1:bf:c5:dd:c5:e3:e6: 8a:20:db:f2:18:f9:0d:8b:b6:ef:1c:e2:3b:2c:b0: ae:6f:a1:a6:5d:d9:54:c0:1e:ed:50:e3:34:87:ec: 50:9b:2f:8c:22:d6:bc:95:97:61:82:76:9a:37:d7: c1:58:1a:6a:1d:87:85:15:f7:74:64:40:37:b4:c6: 52:db:2b:19:db:c0:f8:b9:2f:8f:06:f0:28:d4:98: 45:9e:ae:2c:b8:16:cd:5f:7b:9c:b3:10:e1:19:74: e5:0a:d6:69:03:07:19:d8:b7:88:38:87:6c:ff:c6: f0:0e:00:31:90:a0:2f:42:4c:db:b5:c1:7f:53:52: 7e:e1:db:b4:6a:bf:17:e2:32:76:2d:72:4e:85:03: 83:a4:c6:de:7e:c4:41:74:9d:d4:41:ee:9d:03:8d: c5:7b:9d:c0:f1:d1:a7:e3:75:cc:79:aa:ba:3d:da: 43:ed:d7:4e:6a:bf:5c:38:24:80:f0:09:49:c2:db: 35:08:48:17:c7:a4:6e:5e:f0:56:dd:64:f2:f2:92: c9:b7:22:d5:29:e0:2c:27:d7:cc:25:27:43:c2:d1: 1c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:46:2A:50:96:40:0A:B4:8D:C7:75:2C:5D:F9:49:A9:8C:AF:67:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3455a75f-4479-3cd0-98ce-9c8d9c90a5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:95:48:9a:a7:b6:da:de:45:42:66:b4:2e:f3:94:32:a0:7a: 7b:e2:f6:89:6b:42:f9:1b:a6:19:1b:ab:0c:00:33:e7:ff:46: 44:f2:d0:4b:79:23:a9:cd:77:0e:8c:b2:75:c9:2d:3f:83:29: f1:6b:9e:02:6f:2e:99:61:4b:d4:0b:b0:c9:b4:83:f6:40:e7: 0d:46:3c:3a:02:b9:3c:cb:8e:35:66:06:4c:4d:e2:f4:be:13: 9b:fb:37:a7:09:34:56:36:46:1a:14:98:2f:ed:67:af:ed:9b: d8:27:7e:fe:d4:19:5d:d6:44:59:fe:bc:89:38:89:2e:79:06: e2:7f:8a:43:23:e1:e2:74:46:c0:90:be:7b:f5:db:75:87:15: db:8c:8f:6d:17:b9:ac:2a:41:58:8a:56:50:eb:18:02:84:fd: ae:90:cd:52:fb:25:95:30:74:5d:91:fe:65:f4:e9:14:5a:1d: 03:a6:bc:22:83:77:dc:10:fb:68:64:f3:41:f8:7c:22:88:e4: 84:7c:60:e2:d0:d4:59:5c:b5:f5:e0:90:f5:aa:a4:92:5e:7f: d3:29:06:c7:35:32:75:64:b2:38:f7:b2:a2:46:1e:2f:d3:fa: 20:da:0b:fa:fc:fd:76:37:47:3c:aa:53:47:12:0b:42:bf:44: 51:98:a8:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEk/rEixRsFf87+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Y2E5MjQ0NTgtOTg2OC00ZWExLTgxZDYtMWMxNmU2ZmU5NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42pewwBhzdjgZ+Ato9IM8jdnQMR27A9tDGBP X+Wj77uuzRBQruG/xd3F4+aKINvyGPkNi7bvHOI7LLCub6GmXdlUwB7tUOM0h+xQ my+MIta8lZdhgnaaN9fBWBpqHYeFFfd0ZEA3tMZS2ysZ28D4uS+PBvAo1JhFnq4s uBbNX3ucsxDhGXTlCtZpAwcZ2LeIOIds/8bwDgAxkKAvQkzbtcF/U1J+4du0ar8X 4jJ2LXJOhQODpMbefsRBdJ3UQe6dA43Fe53A8dGn43XMeaq6PdpD7ddOar9cOCSA 8AlJwts1CEgXx6RuXvBW3WTy8pLJtyLVKeAsJ9fMJSdDwtEcJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdGKlCWQAq0jcd1LF35SamMr2dqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1NWE3NWYtNDQ3OS0z Y2QwLTk4Y2UtOWM4ZDljOTBhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6VSJqnttreRUJmtC7zlDKgenvi9olrQvkbphkbqwwAM+f/RkTy 0Et5I6nNdw6MsnXJLT+DKfFrngJvLplhS9QLsMm0g/ZA5w1GPDoCuTzLjjVmBkxN 4vS+E5v7N6cJNFY2RhoUmC/tZ6/tm9gnfv7UGV3WRFn+vIk4iS55BuJ/ikMj4eJ0 RsCQvnv123WHFduMj20XuawqQViKVlDrGAKE/a6QzVL7JZUwdF2R/mX06RRaHQOm vCKDd9wQ+2hk80H4fCKI5IR8YOLQ1FlctfXgkPWqpJJef9MpBsc1MnVksjj3sqJG Hi/T+iDaC/r8/XY3RzyqU0cSC0K/RFGYqD0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:58 2026 by rpki-client