$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/490308cb-6afe-3124-a7d4-ba7d28df5cb3.roa File: 490308cb-6afe-3124-a7d4-ba7d28df5cb3.roa (raw, json) Hash identifier: yzWKdCGE14FHvYdGie4h1kwFuhCMqzWrXCHEG0h7ejE= Subject key identifier: 5A:44:A6:B4:7E:81:20:54:A1:3C:15:5D:85:2B:47:60:94:FA:41:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587AD9F63441B30A9105A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/490308cb-6afe-3124-a7d4-ba7d28df5cb3.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 397200 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:ad:9f:63:44:1b:30:a9:10:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=a07d5170-0113-4650-b93e-c12d0c3a9933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:98:b0:99:e7:e8:3a:8a:84:13:13:3c:54: e5:b0:9b:5e:78:5c:1e:f1:3a:58:95:6d:e5:74:4d: a1:b6:a0:49:ab:dc:a9:4f:e3:ee:bb:64:24:82:6a: 85:d8:c5:3d:d0:41:5c:9a:e8:dd:74:9f:8c:69:3f: 1b:d3:bd:28:11:c6:54:50:d0:cc:09:05:78:c5:18: e8:53:f6:0c:c5:dc:f6:f0:72:6e:35:79:0d:d2:de: bb:26:50:4a:0f:a5:b9:80:24:29:80:8a:28:08:f6: 89:cd:20:4b:ab:bb:55:a5:36:01:61:ef:17:a2:3a: 14:47:2d:62:9c:39:44:29:2a:92:a5:95:d8:7b:85: 4c:2b:9a:76:3f:66:fa:ef:27:d6:04:3d:12:24:8a: a2:1d:0d:d1:e3:db:a5:3d:d4:78:3b:85:15:53:95: cf:fe:3a:c5:71:2b:af:07:29:98:63:52:4e:02:ce: 40:bf:7a:9b:ee:d0:4c:0d:33:ed:70:6c:70:e0:4f: 6f:a4:92:95:51:5b:e0:c8:50:d5:00:0a:bf:a5:d6: 26:44:3b:2c:12:d4:03:61:dc:a8:2a:15:f4:99:b1: e3:68:5e:d8:10:7b:16:79:83:b1:81:a9:95:58:f9: eb:99:53:23:35:0d:0a:83:f2:32:c4:82:ed:61:7b: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:44:A6:B4:7E:81:20:54:A1:3C:15:5D:85:2B:47:60:94:FA:41:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/490308cb-6afe-3124-a7d4-ba7d28df5cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:44:e7:5a:b6:af:b5:30:dc:ce:33:f6:68:24:89:7f:8f:19: ed:d4:47:a8:98:05:0e:f2:65:3b:d0:b7:bc:11:37:74:4e:f6: 23:c0:ce:ec:a2:83:ea:fd:c0:e1:04:51:44:0f:69:95:0f:14: 94:f3:e2:ed:0d:c1:1a:35:c3:18:cb:c0:6a:64:c2:07:98:b7: 47:95:08:5b:91:84:ec:2c:6a:dd:28:f8:1e:33:33:bd:86:43: bb:aa:76:7d:3d:0b:85:d4:f2:2c:b9:68:41:08:0e:6e:3d:2e: ff:6b:9f:93:3e:21:fd:22:b5:99:c6:4a:1a:98:d7:b9:f9:48: f8:a9:9c:ae:d2:5d:0f:3f:31:22:16:ce:8a:9b:e2:65:c5:45: a1:b2:cf:1d:d2:26:5a:08:c0:94:32:67:26:d0:21:e8:28:cc: eb:28:7a:38:c9:21:d9:da:c4:1f:44:62:d1:30:61:75:7c:d8: 7b:b8:67:85:b6:79:88:d1:c5:63:66:1c:2d:ae:55:8f:55:8d: 2e:b7:e1:7a:89:d6:a1:56:09:3b:1d:0d:a0:fd:16:c1:05:ad: 87:6e:a9:23:0b:9e:58:03:e4:3e:dc:a4:5e:6d:3c:64:aa:22: 42:27:32:94:3e:dd:71:f8:14:b6:64:d3:7e:0c:29:a8:9f:9b: 50:09:fe:fa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h62fY0QbMKkQWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YTA3ZDUxNzAtMDExMy00NjUwLWI5M2UtYzEyZDBjM2E5OTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2iYsJnn6DqKhBMTPFTlsJteeFwe8TpYlW3l dE2htqBJq9ypT+Puu2QkgmqF2MU90EFcmujddJ+MaT8b070oEcZUUNDMCQV4xRjo U/YMxdz28HJuNXkN0t67JlBKD6W5gCQpgIooCPaJzSBLq7tVpTYBYe8XojoURy1i nDlEKSqSpZXYe4VMK5p2P2b67yfWBD0SJIqiHQ3R49ulPdR4O4UVU5XP/jrFcSuv BymYY1JOAs5Av3qb7tBMDTPtcGxw4E9vpJKVUVvgyFDVAAq/pdYmRDssEtQDYdyo KhX0mbHjaF7YEHsWeYOxgamVWPnrmVMjNQ0Kg/IyxILtYXtS8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFpEprR+gSBUoTwVXYUrR2CU+kFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDkwMzA4Y2ItNmFmZS0z MTI0LWE3ZDQtYmE3ZDI4ZGY1Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQROdatq+1MNzOM/ZoJIl/jxnt1EeomAUO8mU7 0Le8ETd0TvYjwM7sooPq/cDhBFFED2mVDxSU8+LtDcEaNcMYy8BqZMIHmLdHlQhb kYTsLGrdKPgeMzO9hkO7qnZ9PQuF1PIsuWhBCA5uPS7/a5+TPiH9IrWZxkoamNe5 +Uj4qZyu0l0PPzEiFs6Km+JlxUWhss8d0iZaCMCUMmcm0CHoKMzrKHo4ySHZ2sQf RGLRMGF1fNh7uGeFtnmI0cVjZhwtrlWPVY0ut+F6idahVgk7HQ2g/RbBBa2Hbqkj C55YA+Q+3KRebTxkqiJCJzKUPt1x+BS2ZNN+DCmon5tQCf76 -----END CERTIFICATE-----Generated at Mon Mar 2 05:51:50 2026 by rpki-client