$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa File: b27f9224-f2f6-354b-a909-331d9c0d7145.roa (raw, json) Hash identifier: 3GFU7SWMA0ahaV2W4j3GFvX0u6TbAO6LXSXIi+qSeFg= Subject key identifier: 70:AC:D9:71:D2:49:68:45:E7:E1:59:19:A4:93:0E:84:B9:F5:C2:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587ABC8D5B1D7D12DE07280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396565 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:ab:c8:d5:b1:d7:d1:2d:e0:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=83dad441-ad6a-4083-b252-ff9643e179fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:b1:74:d3:4e:2d:d8:dd:01:01:bc:33:4f: 1d:8a:e0:5e:5b:11:36:a3:92:fa:f4:02:67:9d:b2: 90:cf:9f:36:6f:dc:f1:11:5d:eb:06:4e:b2:a6:74: ff:e6:9d:a4:79:bd:0d:62:39:5e:c0:b0:ae:07:60: 6c:00:c9:f7:c3:91:b4:85:a5:30:f2:9c:a9:14:ed: 67:23:2f:0b:32:c1:7a:39:72:5e:f0:7c:ef:de:5b: 46:2e:ed:d2:10:1f:b4:21:0d:04:52:e7:76:56:86: dd:f4:6b:7d:8a:1a:25:11:94:dc:5c:3e:5a:4f:47: 0a:53:b7:5f:30:a1:00:30:89:5c:0e:82:86:38:7f: 8a:77:39:6f:ab:27:6b:ff:49:f9:2d:c3:12:e2:e2: 3b:c5:55:6d:b8:05:3f:d0:f1:06:07:68:53:ec:f0: e9:de:a9:8d:96:aa:a3:90:e6:3b:15:77:b9:d0:34: 79:b3:7a:40:27:a0:97:3a:e5:9e:21:f5:80:76:3b: 72:3f:a1:13:27:16:37:48:67:2f:90:c2:19:db:ee: 99:48:2e:71:8a:07:47:69:84:39:69:10:8e:23:77: f4:f8:4c:57:c9:ba:63:bd:10:1a:3a:a8:81:27:1f: 23:9a:54:b9:08:2d:75:70:41:79:34:59:28:ca:4a: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:D9:71:D2:49:68:45:E7:E1:59:19:A4:93:0E:84:B9:F5:C2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b27f9224-f2f6-354b-a909-331d9c0d7145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:59:55:d9:91:dd:ec:ab:e1:b8:28:94:c4:55:5b:e9:a8:f5: 58:4a:64:f3:90:4b:3d:10:7e:1b:ef:93:c4:7f:4e:5d:6e:34: 2c:8a:32:68:35:65:5e:76:ac:ab:e9:19:79:b2:15:72:6c:1a: 99:d3:89:17:fd:e8:ba:9d:68:e9:08:e8:cb:5e:02:bf:db:79: 8c:30:0d:f2:ec:a9:45:56:2d:aa:c9:dc:21:0a:7e:91:ec:80: ee:46:ae:26:a2:57:05:7a:eb:47:e3:ba:42:16:ab:a7:23:55: 19:f0:ec:7a:25:e1:5a:7b:71:56:fc:60:6c:6b:d7:e8:12:d5: 67:4f:65:1d:69:a0:4f:1d:35:49:c6:b9:a7:6a:14:ca:fb:a8: dd:d7:60:2a:38:40:58:c9:da:2c:b8:5d:ee:1c:5a:5a:63:4d: 10:41:95:b9:9c:e7:5a:1c:db:cb:04:81:58:11:63:24:e5:ed: e3:6a:80:36:5c:57:ed:3d:e2:ac:e7:eb:16:76:0f:9c:74:86: 71:e7:f0:c4:cf:0e:0c:f8:75:9c:47:f9:4f:fe:e5:74:5a:2b: b5:8c:85:5b:98:9f:69:68:26:ed:65:d6:2e:da:0a:32:00:04: 19:8a:6b:03:a0:a7:6a:6a:91:58:19:7f:2e:36:89:f6:4e:97: f2:f3:a3:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6vI1bHX0S3gcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ODNkYWQ0NDEtYWQ2YS00MDgzLWIyNTItZmY5NjQzZTE3OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOGxdNNOLdjdAQG8M08diuBeWxE2o5L69AJn nbKQz582b9zxEV3rBk6ypnT/5p2keb0NYjlewLCuB2BsAMn3w5G0haUw8pypFO1n Iy8LMsF6OXJe8Hzv3ltGLu3SEB+0IQ0EUud2Vobd9Gt9iholEZTcXD5aT0cKU7df MKEAMIlcDoKGOH+Kdzlvqydr/0n5LcMS4uI7xVVtuAU/0PEGB2hT7PDp3qmNlqqj kOY7FXe50DR5s3pAJ6CXOuWeIfWAdjtyP6ETJxY3SGcvkMIZ2+6ZSC5xigdHaYQ5 aRCOI3f0+ExXybpjvRAaOqiBJx8jmlS5CC11cEF5NFkoykpyAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHCs2XHSSWhF5+FZGaSTDoS59cICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjI3ZjkyMjQtZjJmNi0z NTRiLWE5MDktMzMxZDljMGQ3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAYWVXZkd3sq+G4KJTEVVvpqPVYSmTzkEs9EH4b 75PEf05dbjQsijJoNWVedqyr6Rl5shVybBqZ04kX/ei6nWjpCOjLXgK/23mMMA3y 7KlFVi2qydwhCn6R7IDuRq4molcFeutH47pCFqunI1UZ8Ox6JeFae3FW/GBsa9fo EtVnT2UdaaBPHTVJxrmnahTK+6jd12AqOEBYydosuF3uHFpaY00QQZW5nOdaHNvL BIFYEWMk5e3jaoA2XFftPeKs5+sWdg+cdIZx5/DEzw4M+HWcR/lP/uV0Wiu1jIVb mJ9paCbtZdYu2goyAAQZimsDoKdqapFYGX8uNon2Tpfy86O2 -----END CERTIFICATE-----Generated at Mon Mar 2 23:53:47 2026 by rpki-client