$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3301885-ec7c-3f8e-b3a9-f59087dedd1f.roa File: a3301885-ec7c-3f8e-b3a9-f59087dedd1f.roa (raw, json) Hash identifier: 7aGmy+L3qXvoo97qGyle+8JCpmNaWHCrx8Hhxzny2iU= Subject key identifier: 89:FA:05:62:22:7C:17:5F:45:42:B5:08:6F:21:59:AC:CB:7B:63:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA99A5D4A7654571BEC880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3301885-ec7c-3f8e-b3a9-f59087dedd1f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397209 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:99:a5:d4:a7:65:45:71:be:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=d2ce18a1-3fde-4e99-8b36-ce44515e0b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:89:0c:0d:de:7c:4b:b3:02:89:dc:aa:ac: af:8d:2b:83:f3:e3:31:2d:3a:14:91:ee:1b:51:40: c6:9c:8c:8c:a0:8f:54:c9:f5:8e:0b:97:df:fc:46: 1f:8e:51:ee:08:16:8a:47:ee:a6:21:69:a4:00:ab: 2b:f8:6e:ec:20:c8:3b:82:e2:4e:6c:b4:5a:b7:1d: 69:85:c3:3c:43:0c:cc:3c:40:a6:ac:5a:8a:24:00: 86:8f:0a:b5:a6:38:16:6d:d4:c3:86:37:1e:d1:2e: 2c:00:6e:6f:90:eb:c0:56:d5:25:e9:95:cd:e0:cd: 41:53:41:01:7d:60:67:a3:3b:12:a7:36:29:70:ef: 55:e9:c5:8c:0b:af:43:2a:8c:c1:09:95:9b:cf:a9: 42:ef:91:cd:8e:0c:ef:21:49:b3:74:f8:2b:18:70: a3:a4:25:13:a2:eb:09:aa:51:89:a6:27:1f:92:21: 9b:6a:71:65:f0:75:56:18:0f:2b:a0:d2:cc:fb:35: 1e:dd:f0:d2:63:61:60:07:46:6f:9b:de:2a:6a:d7: ee:ba:d6:78:d5:19:4f:17:6e:21:12:77:37:0e:2b: b1:ad:72:9c:4b:9a:dc:93:03:12:40:b0:66:85:1b: 8c:52:02:d1:4f:1c:13:83:2d:8f:c3:6f:8e:18:be: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FA:05:62:22:7C:17:5F:45:42:B5:08:6F:21:59:AC:CB:7B:63:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3301885-ec7c-3f8e-b3a9-f59087dedd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b5:c5:ad:29:51:88:b3:3c:67:d7:74:65:ab:cb:b4:de:8c: 37:be:0c:bd:7e:21:26:2c:b2:ff:8e:f4:73:8e:67:5d:8b:13: b8:41:a2:a7:f3:11:31:87:ec:48:22:15:01:6b:a5:5c:ab:b6: c9:7d:11:10:1e:fb:84:e7:12:53:5f:fa:42:51:18:f0:2a:b5: d0:ba:3c:79:1f:2b:31:0f:f1:70:13:7f:05:02:53:01:85:e4: 8c:b3:a8:d5:a0:bb:e2:ca:42:f1:59:2f:88:cd:da:72:d5:dc: f5:27:f3:35:33:24:22:16:d2:81:e4:30:c8:2a:6a:8a:17:eb: e6:f7:53:77:12:b7:60:f6:81:c0:21:05:21:d0:11:9c:ce:c5: 31:a3:e1:e2:4c:48:0c:49:75:05:03:81:f6:26:67:9f:22:f3: e7:20:1c:97:21:57:70:23:0d:ac:df:e8:0e:57:80:1a:aa:6b: 70:ac:44:17:02:b4:06:99:c0:02:1d:9d:4c:84:0c:0f:cb:1e: 56:32:e1:8d:e4:a1:2a:ff:59:01:8f:38:29:0e:a0:9b:b6:07: 04:3b:ca:ea:1b:da:24:f3:d1:82:04:28:91:9a:3e:e7:a7:65: de:af:fc:a1:c9:ec:11:7e:5b:ce:be:15:46:d4:a5:ea:a1:a5: 5a:f4:77:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pml1KdlRXG+yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZDJjZTE4YTEtM2ZkZS00ZTk5LThiMzYtY2U0NDUxNWUwYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+JDA3efEuzAoncqqyvjSuD8+MxLToUke4b UUDGnIyMoI9UyfWOC5ff/EYfjlHuCBaKR+6mIWmkAKsr+G7sIMg7guJObLRatx1p hcM8QwzMPECmrFqKJACGjwq1pjgWbdTDhjce0S4sAG5vkOvAVtUl6ZXN4M1BU0EB fWBnozsSpzYpcO9V6cWMC69DKozBCZWbz6lC75HNjgzvIUmzdPgrGHCjpCUTousJ qlGJpicfkiGbanFl8HVWGA8roNLM+zUe3fDSY2FgB0Zvm94qatfuutZ41RlPF24h Enc3DiuxrXKcS5rckwMSQLBmhRuMUgLRTxwTgy2Pw2+OGL4saQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIn6BWIifBdfRUK1CG8hWazLe2ObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTMzMDE4ODUtZWM3Yy0z ZjhlLWIzYTktZjU5MDg3ZGVkZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAetcWtKVGIszxn13Rlq8u03ow3vgy9fiEmLLL/ jvRzjmddixO4QaKn8xExh+xIIhUBa6Vcq7bJfREQHvuE5xJTX/pCURjwKrXQujx5 HysxD/FwE38FAlMBheSMs6jVoLviykLxWS+Izdpy1dz1J/M1MyQiFtKB5DDIKmqK F+vm91N3Erdg9oHAIQUh0BGczsUxo+HiTEgMSXUFA4H2JmefIvPnIByXIVdwIw2s 3+gOV4AaqmtwrEQXArQGmcACHZ1MhAwPyx5WMuGN5KEq/1kBjzgpDqCbtgcEO8rq G9ok89GCBCiRmj7np2Xer/yhyewRflvOvhVG1KXqoaVa9He6 -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:41 2026 by rpki-client