$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa File: 976b052a-26cd-38db-a5dc-2ff58e9634b2.roa (raw, json) Hash identifier: 1wY9wnm1vd9RLjT5PeQzrUklB7OlMyBSwmz81H8XeZw= Subject key identifier: 25:49:4E:04:2E:83:9C:E8:33:43:EB:8C:0F:52:2B:67:A7:99:92:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587ABF6E7D8B39860C34E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 397212 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:ab:f6:e7:d8:b3:98:60:c3:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=75bfa914-383e-4887-b7bb-7bbfe61fe9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:06:88:57:68:1c:66:af:44:9d:ea:d4:ae: 4f:6f:c2:9f:af:a7:60:2e:07:36:0f:26:b1:f1:3e: 9a:18:c6:25:ce:5a:29:03:e2:32:91:28:4d:5e:73: 88:71:64:0b:37:80:a1:ad:66:4f:06:27:1d:2a:f3: 1b:1b:63:d5:88:41:b5:64:51:a2:59:8b:28:dc:a7: 1d:be:a4:6b:b1:3a:25:03:6d:d4:76:00:68:c6:e9: 4e:60:ae:22:fd:eb:07:38:75:28:76:ee:a1:f1:45: 3f:7d:72:0e:6f:16:07:77:2c:8e:32:21:30:77:ad: 06:f7:c7:df:44:a9:87:34:aa:9c:86:fb:31:b3:95: b5:b4:8e:a3:be:88:b4:3c:31:df:a8:13:8a:37:6a: 4e:c1:d9:ea:54:59:df:fe:58:d0:1c:87:5e:e2:e0: d6:e0:62:c3:42:71:2d:91:5d:9a:64:ac:0f:7f:c5: 7a:d6:e1:b5:f9:15:68:19:3a:48:53:78:47:85:b4: a0:8d:47:2a:64:04:93:62:dc:df:61:3b:22:31:9e: 17:d3:76:5c:5b:7d:ac:aa:2c:0c:52:b6:a3:b8:e6: 47:c8:b3:6e:fe:10:65:59:11:4a:cf:18:34:a7:e6: bb:09:4d:50:61:0d:ad:22:6e:3b:cb:1c:29:14:06: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:4E:04:2E:83:9C:E8:33:43:EB:8C:0F:52:2B:67:A7:99:92:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ec:b0:3b:a4:bf:9e:d4:83:7f:5f:88:77:20:ab:64:88:b7: 99:a1:25:dc:d8:61:fc:48:76:32:f3:43:73:c0:07:46:d5:1d: 87:28:7c:82:6d:ea:a9:ce:b2:fb:e7:4d:e1:2e:07:1b:20:c5: 2a:99:13:6e:fb:80:62:c5:9f:6f:ea:9a:91:c9:df:10:40:5a: 90:00:4d:e4:e0:5c:34:16:ce:df:7c:ba:17:5e:e7:94:98:87: 0f:f0:e3:f5:75:b5:15:78:3b:24:f9:87:ed:23:cc:b9:17:94: 73:1d:6d:d1:18:fe:30:cc:2a:36:ef:00:05:4d:4a:f2:f1:86: a8:24:8f:02:39:2c:d2:dc:c1:1b:70:1a:78:e5:a1:9c:98:55: 12:98:29:d9:b4:74:f4:19:ff:72:05:58:51:8c:8d:bb:b1:7d: 9e:57:42:b8:2d:79:bc:70:9e:66:d6:cf:e3:1e:16:27:e0:b6: 0b:43:ca:ae:de:09:12:e8:e0:57:55:48:77:f7:ce:0c:4a:80: 70:85:8c:a3:e8:ff:44:8e:74:3a:9e:c8:b7:81:3b:e3:31:62: 94:07:51:88:67:fe:cd:59:3e:8a:7b:0e:a7:54:4c:cf:0f:3e: fc:12:6d:1b:40:a8:47:f5:48:06:4b:a8:9f:09:d1:06:0a:ac: 39:54:ad:dc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6v259izmGDDToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NzViZmE5MTQtMzgzZS00ODg3LWI3YmItN2JiZmU2MWZlOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+AGiFdoHGavRJ3q1K5Pb8Kfr6dgLgc2Dyax 8T6aGMYlzlopA+IykShNXnOIcWQLN4ChrWZPBicdKvMbG2PViEG1ZFGiWYso3Kcd vqRrsTolA23UdgBoxulOYK4i/esHOHUodu6h8UU/fXIObxYHdyyOMiEwd60G98ff RKmHNKqchvsxs5W1tI6jvoi0PDHfqBOKN2pOwdnqVFnf/ljQHIde4uDW4GLDQnEt kV2aZKwPf8V61uG1+RVoGTpIU3hHhbSgjUcqZASTYtzfYTsiMZ4X03ZcW32sqiwM UrajuOZHyLNu/hBlWRFKzxg0p+a7CU1QYQ2tIm47yxwpFAb8HQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCVJTgQug5zoM0PrjA9SK2enmZJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTc2YjA1MmEtMjZjZC0z OGRiLWE1ZGMtMmZmNThlOTYzNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBN7LA7pL+e1IN/X4h3IKtkiLeZoSXc2GH8SHYy 80NzwAdG1R2HKHyCbeqpzrL7503hLgcbIMUqmRNu+4BixZ9v6pqRyd8QQFqQAE3k 4Fw0Fs7ffLoXXueUmIcP8OP1dbUVeDsk+YftI8y5F5RzHW3RGP4wzCo27wAFTUry 8YaoJI8COSzS3MEbcBp45aGcmFUSmCnZtHT0Gf9yBVhRjI27sX2eV0K4LXm8cJ5m 1s/jHhYn4LYLQ8qu3gkS6OBXVUh3984MSoBwhYyj6P9EjnQ6nsi3gTvjMWKUB1GI Z/7NWT6Kew6nVEzPDz78Em0bQKhH9UgGS6ifCdEGCqw5VK3c -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:22 2026 by rpki-client