$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa File: 42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa (raw, json) Hash identifier: GuAUatdoFM45CPBkKIACZuv0dozwsLyz/m0mEAmceW4= Subject key identifier: D8:1C:3D:D2:B3:1B:39:4F:EB:79:72:60:B6:37:32:2F:44:00:7E:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091255058A55C4B1229AE420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397193 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:55:05:8a:55:c4:b1:22:9a:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=00bff2a0-7657-464d-a816-b1beff3ace7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:72:ae:4d:c8:7b:c7:8e:fd:5c:00:c4:55: 33:a5:f1:ce:b6:59:00:a9:1d:07:85:b1:45:85:99: 5b:e4:77:6e:00:42:a2:e8:bc:48:9c:1e:1a:05:5e: 68:a4:3e:17:83:6b:ae:4d:d6:0e:70:1e:7a:77:1b: a7:a2:50:fd:7d:5d:89:43:3a:49:34:9d:01:29:27: ee:88:b1:f6:b2:7d:92:95:cc:fc:44:9a:3d:a5:8f: 71:e0:4a:b5:0e:aa:91:b6:3b:74:5b:b1:e8:31:85: ab:79:70:c0:4e:74:92:aa:ed:92:cf:e1:95:d8:1d: 89:3e:ed:12:c7:bc:94:66:74:ff:99:c4:c0:a9:58: a3:32:b5:47:b1:f6:95:29:0a:4e:20:78:85:89:1d: 2f:03:3c:99:31:69:1d:6d:20:45:93:b2:cc:0b:12: 88:32:c5:fa:11:20:fa:56:1e:8e:7f:be:bd:d1:2b: ee:db:06:00:3c:bb:81:5b:d3:4e:d1:c6:30:e9:22: 92:dd:85:e4:aa:78:6d:39:1a:4d:77:06:b7:5f:60: 10:3e:a0:96:84:44:95:08:7c:55:d8:93:3a:f1:1a: 37:5b:5a:71:3c:f2:e3:c7:8e:a5:f0:c1:fe:48:05: 89:3f:ae:0c:2e:9b:72:06:6d:99:c4:7d:6e:7c:4b: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:3D:D2:B3:1B:39:4F:EB:79:72:60:B6:37:32:2F:44:00:7E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c7:df:f5:f8:e1:7d:6e:92:a8:5a:13:c4:68:ef:a5:83:d7: 68:46:0f:70:ff:d9:f9:4a:f6:b1:57:2d:4f:ef:00:22:e4:1b: 39:5c:65:cd:dc:eb:7d:70:82:c3:d9:0f:b4:ff:a7:e0:b5:d1: c8:53:76:b1:19:96:c0:3a:ac:0b:32:97:47:80:93:8d:0a:02: 50:3b:bf:16:da:0b:92:c2:45:a0:92:1d:e9:e9:90:7e:57:1a: b7:0d:22:15:a7:d9:87:46:af:c1:8c:5f:f8:e5:ec:70:07:f5: d2:24:15:28:4a:cc:3a:2c:09:e1:68:33:9a:51:64:75:75:44: 04:60:b2:6a:bb:09:a8:35:fc:9e:eb:c4:b3:f2:4b:47:f5:dc: d1:73:c3:15:a0:0f:ee:9d:e6:77:6f:75:6f:d0:41:7b:4f:68: be:65:b6:31:2c:16:c2:53:c3:86:be:2c:af:98:51:61:de:2a: 8e:36:ed:32:a4:a2:39:25:66:f2:b3:85:ee:7c:e9:29:72:b5: fc:a3:4b:34:d8:9c:1f:cb:fa:ec:f7:0c:94:93:06:38:ee:fc: ba:90:38:f5:1e:1f:5b:0b:71:14:33:72:84:62:56:3b:28:d9: 81:24:50:10:40:57:43:ab:7d:39:95:0b:86:d0:86:6f:cc:60: a4:8f:0c:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElUFilXEsSKa5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDBiZmYyYTAtNzY1Ny00NjRkLWE4MTYtYjFiZWZmM2FjZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUpyrk3Ie8eO/VwAxFUzpfHOtlkAqR0HhbFF hZlb5HduAEKi6LxInB4aBV5opD4Xg2uuTdYOcB56dxunolD9fV2JQzpJNJ0BKSfu iLH2sn2Slcz8RJo9pY9x4Eq1DqqRtjt0W7HoMYWreXDATnSSqu2Sz+GV2B2JPu0S x7yUZnT/mcTAqVijMrVHsfaVKQpOIHiFiR0vAzyZMWkdbSBFk7LMCxKIMsX6ESD6 Vh6Of7690Svu2wYAPLuBW9NO0cYw6SKS3YXkqnhtORpNdwa3X2AQPqCWhESVCHxV 2JM68Ro3W1pxPPLjx46l8MH+SAWJP64MLptyBm2ZxH1ufEs/eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgcPdKzGzlP63lyYLY3Mi9EAH4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmYjljMWUtMmM4OC0z ZmNiLTlhZDgtNWE2OGFhMTkyYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITH3/X44X1ukqhaE8Ro76WD12hGD3D/2flK9rFXLU/vACLkGzlc Zc3c631wgsPZD7T/p+C10chTdrEZlsA6rAsyl0eAk40KAlA7vxbaC5LCRaCSHenp kH5XGrcNIhWn2YdGr8GMX/jl7HAH9dIkFShKzDosCeFoM5pRZHV1RARgsmq7Cag1 /J7rxLPyS0f13NFzwxWgD+6d5ndvdW/QQXtPaL5ltjEsFsJTw4a+LK+YUWHeKo42 7TKkojklZvKzhe586SlytfyjSzTYnB/L+uz3DJSTBjju/LqQOPUeH1sLcRQzcoRi Vjso2YEkUBBAV0OrfTmVC4bQhm/MYKSPDIY= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:27 2026 by rpki-client