$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa File: 697b5991-20b5-30f0-a736-3f611edf5c89.roa (raw, json) Hash identifier: qvIxeCtMRhljQzuz1Xx07hK0KEop7z+umsU0IKf71R0= Subject key identifier: EC:C1:1D:99:43:07:71:63:D0:F2:82:82:F6:64:93:B0:43:94:9A:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CE1FCD9DEE26573142BC1F080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 396588 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:d9:de:e2:65:73:14:2b:c1:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=fb4d2c89-3f4d-46f2-96cd-1f333d5c2c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:b1:16:5a:89:a2:99:66:fa:32:11:4e:59: 7e:0a:bf:ac:48:e7:c7:2f:a0:2b:1a:77:18:71:10: 83:9c:60:ca:df:9a:7c:05:ee:6e:2e:0b:73:9f:e8: e6:f1:6a:30:02:49:55:80:57:75:d4:f9:5f:17:5b: 65:63:c9:64:13:2e:b7:d5:93:42:47:c4:97:b5:f9: 5f:74:73:6c:9e:98:01:3e:a5:36:e0:b4:dd:15:d3: 5f:c9:a3:e2:54:49:d9:c7:41:b2:fb:5f:c5:79:bc: 5f:82:a4:e5:85:3d:5c:e0:01:c7:b6:b5:03:15:f5: fc:c6:54:b7:e7:43:50:7a:29:90:ca:0d:79:c2:76: 99:c0:d0:59:3c:3c:5e:b6:94:9a:f1:64:76:f3:34: 1e:a2:60:c7:8d:80:40:60:2c:e6:f7:72:bc:d9:af: c7:39:01:a6:97:61:de:fb:3a:44:6c:c5:f1:9a:9f: 48:4f:ac:bb:46:45:d9:65:d8:1e:df:ea:22:1a:07: dc:e0:c1:ef:2d:a4:e7:69:17:c3:f6:9d:fb:b9:71: cf:51:98:d6:39:dd:e7:35:14:d4:40:22:75:d6:ca: 96:3d:5d:94:28:96:2e:ae:13:ae:ee:ba:4f:92:7e: a5:8c:a5:07:e1:7e:fd:ca:d1:b2:19:9c:4b:54:98: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:1D:99:43:07:71:63:D0:F2:82:82:F6:64:93:B0:43:94:9A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/697b5991-20b5-30f0-a736-3f611edf5c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0c:a8:cd:29:91:37:22:ed:49:b5:ab:87:11:dc:65:37:63: ed:85:df:33:1f:a3:86:12:5c:c8:1f:1c:25:34:eb:60:72:24: 32:4e:ca:2e:df:06:1e:8a:f4:94:48:2d:82:33:12:df:81:10: 77:d1:0b:ae:1e:ef:f6:0a:ff:2c:fa:16:86:3e:91:6b:74:5e: 19:9e:88:9d:dd:36:d7:d7:3a:b0:de:c8:41:ed:65:75:f0:55: c4:62:c9:e6:e9:59:46:0b:c3:6e:68:a4:3b:92:57:e7:6e:d2: 25:8a:a7:ad:67:22:38:5c:db:57:bb:a0:af:92:f4:33:cd:4c: 50:3c:1a:1e:24:71:91:30:5f:fd:41:99:c0:05:66:3b:9d:ee: da:4e:cd:64:95:eb:78:64:64:51:6d:34:85:91:5d:e8:cd:b8: 4e:0c:c6:cf:62:df:74:cb:be:42:23:66:66:72:a5:00:b4:74: 95:59:73:fe:9b:08:cb:c1:57:bf:76:8c:0b:47:44:9d:83:f5: 6f:bc:a9:93:53:43:e4:ab:0e:3d:c4:05:01:5a:08:c6:35:3e: f4:09:fa:c8:b1:4d:5d:90:4b:69:3f:5a:55:cd:5f:83:cc:c6: 20:8f:ea:7e:98:ff:01:0c:1e:92:83:32:9c:52:16:d4:4b:2b: aa:73:ad:bc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEzh/Nne4mVzFCvB8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk ZmI0ZDJjODktM2Y0ZC00NmYyLTk2Y2QtMWYzMzNkNWMyYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIyxFlqJoplm+jIRTll+Cr+sSOfHL6ArGncY cRCDnGDK35p8Be5uLgtzn+jm8WowAklVgFd11PlfF1tlY8lkEy631ZNCR8SXtflf dHNsnpgBPqU24LTdFdNfyaPiVEnZx0Gy+1/FebxfgqTlhT1c4AHHtrUDFfX8xlS3 50NQeimQyg15wnaZwNBZPDxetpSa8WR28zQeomDHjYBAYCzm93K82a/HOQGml2He +zpEbMXxmp9IT6y7RkXZZdge3+oiGgfc4MHvLaTnaRfD9p37uXHPUZjWOd3nNRTU QCJ11sqWPV2UKJYurhOu7rpPkn6ljKUH4X79ytGyGZxLVJi0JwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOzBHZlDB3Fj0PKCgvZkk7BDlJpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk3YjU5OTEtMjBiNS0z MGYwLWE3MzYtM2Y2MTFlZGY1Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFDKjNKZE3Iu1JtauHEdxlN2Pthd8zH6OGElzI HxwlNOtgciQyTsou3wYeivSUSC2CMxLfgRB30QuuHu/2Cv8s+haGPpFrdF4Znoid 3TbX1zqw3shB7WV18FXEYsnm6VlGC8NuaKQ7klfnbtIliqetZyI4XNtXu6CvkvQz zUxQPBoeJHGRMF/9QZnABWY7ne7aTs1klet4ZGRRbTSFkV3ozbhODMbPYt90y75C I2ZmcqUAtHSVWXP+mwjLwVe/dowLR0Sdg/VvvKmTU0Pkqw49xAUBWgjGNT70CfrI sU1dkEtpP1pVzV+DzMYgj+p+mP8BDB6SgzKcUhbUSyuqc628 -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:00 2026 by rpki-client