$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da15d666-4abc-38e7-af4b-b192431d4827.roa File: da15d666-4abc-38e7-af4b-b192431d4827.roa (raw, json) Hash identifier: XtX1mAnbTZkwC8FSz1NR6yWLkiMIGwmu3gjqSe/j2Ow= Subject key identifier: 14:F9:3E:EA:A6:47:10:6B:15:FD:1E:E7:BA:78:98:45:FC:E5:0A:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587A9B47B762D2BEFB71100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da15d666-4abc-38e7-af4b-b192431d4827.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396589 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:a9:b4:7b:76:2d:2b:ef:b7:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=b7a6a4fd-b962-497a-ad29-c62276c13f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:7c:1b:99:4c:d6:75:bd:f7:17:91:5c:98: e5:23:f5:51:f2:23:36:b3:f1:74:2e:ea:46:4e:9c: de:25:ae:02:14:bd:c1:e7:19:96:d6:c8:78:37:ab: cf:23:e2:54:34:04:38:73:de:50:6e:08:00:9b:65: a3:3d:17:7c:5e:5d:ef:b3:5a:bd:33:de:35:f7:62: 3a:dd:31:14:7c:5c:13:40:dd:d2:a8:3c:8c:bb:47: bb:c2:06:ea:26:46:5a:cf:5c:06:c1:a9:36:1a:fc: 0d:85:12:3d:fc:c7:6b:8d:83:f6:9a:e9:a6:8f:b4: 90:f2:f7:43:43:1b:4b:ac:7e:68:16:ff:0a:6d:5f: 6a:ef:ca:f1:79:96:60:1d:a8:67:7f:ee:14:ac:c7: b7:66:7d:fe:88:1c:ad:ed:9e:67:12:82:52:15:db: 08:2c:e4:07:ad:47:65:85:26:b0:84:51:21:23:2c: 1a:16:83:fd:58:03:ac:60:aa:c6:5e:3b:21:d6:ef: 7d:30:50:db:65:b7:b9:7f:a3:7d:86:7f:e9:cf:d7: 31:dd:36:b9:1c:e8:74:df:8c:3c:80:5d:a5:e7:d8: b4:ba:2e:5e:9d:02:3f:9f:d1:ea:4e:a9:e4:36:79: dc:8f:fb:6e:29:3a:37:8f:6c:30:d2:74:f3:b8:69: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:3E:EA:A6:47:10:6B:15:FD:1E:E7:BA:78:98:45:FC:E5:0A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da15d666-4abc-38e7-af4b-b192431d4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:22:1c:3c:8d:3a:48:61:e6:3a:21:c6:c5:e3:48:92:11:48: e2:18:95:be:0d:22:c2:91:b5:5e:56:77:68:71:93:ce:a5:50: f6:8a:ee:bf:85:1a:85:cc:fb:cb:22:21:b4:45:5b:27:8b:b2: c0:c0:06:9e:4f:c8:02:7c:35:ad:12:c7:f2:2d:9d:b2:3b:2e: e2:5e:f1:38:82:8c:b9:e7:81:fd:51:95:fa:2e:72:c5:2c:0c: f2:76:70:c5:16:d5:00:4c:5e:d8:0d:08:69:48:7a:bf:fd:37: a2:4b:47:b5:be:59:d9:88:8a:59:47:9a:f0:2e:2c:a0:c7:de: 37:1d:c5:47:8d:31:5f:6c:02:94:b0:35:32:49:a7:99:20:57: 3c:84:cf:e3:90:2b:d7:aa:29:5f:19:38:f1:ec:fd:9d:d2:4f: ad:0a:d1:43:a4:f3:08:ad:40:1e:ac:25:4f:52:39:fc:6e:c4: c4:11:3a:dc:18:12:f1:6f:9c:92:5f:9e:42:91:be:b3:7f:3d: 46:b3:1a:62:24:93:95:ef:49:91:e1:0f:87:b8:04:ab:2d:49: 85:2a:f5:84:5a:01:1d:69:57:ec:7f:98:c5:69:b7:dc:39:d6: db:61:e4:66:2e:32:3a:19:af:b9:4e:a0:f5:45:46:9f:2a:15: c4:6b:29:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6m0e3YtK++3EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk YjdhNmE0ZmQtYjk2Mi00OTdhLWFkMjktYzYyMjc2YzEzZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HF8G5lM1nW99xeRXJjlI/VR8iM2s/F0LupG TpzeJa4CFL3B5xmW1sh4N6vPI+JUNAQ4c95QbggAm2WjPRd8Xl3vs1q9M94192I6 3TEUfFwTQN3SqDyMu0e7wgbqJkZaz1wGwak2GvwNhRI9/MdrjYP2mummj7SQ8vdD QxtLrH5oFv8KbV9q78rxeZZgHahnf+4UrMe3Zn3+iByt7Z5nEoJSFdsILOQHrUdl hSawhFEhIywaFoP9WAOsYKrGXjsh1u99MFDbZbe5f6N9hn/pz9cx3Ta5HOh034w8 gF2l59i0ui5enQI/n9HqTqnkNnncj/tuKTo3j2ww0nTzuGkdOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBT5PuqmRxBrFf0e57p4mEX85QoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGExNWQ2NjYtNGFiYy0z OGU3LWFmNGItYjE5MjQzMWQ0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWIhw8jTpIYeY6IcbF40iSEUjiGJW+DSLCkbVe VndocZPOpVD2iu6/hRqFzPvLIiG0RVsni7LAwAaeT8gCfDWtEsfyLZ2yOy7iXvE4 goy554H9UZX6LnLFLAzydnDFFtUATF7YDQhpSHq//TeiS0e1vlnZiIpZR5rwLiyg x943HcVHjTFfbAKUsDUySaeZIFc8hM/jkCvXqilfGTjx7P2d0k+tCtFDpPMIrUAe rCVPUjn8bsTEETrcGBLxb5ySX55Ckb6zfz1GsxpiJJOV70mR4Q+HuASrLUmFKvWE WgEdaVfsf5jFabfcOdbbYeRmLjI6Ga+5TqD1RUafKhXEaynw -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:41 2026 by rpki-client