$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd1da9e6-9ecd-34f4-95f5-3c82f1c607c6.roa File: dd1da9e6-9ecd-34f4-95f5-3c82f1c607c6.roa (raw, json) Hash identifier: 1Zr4f3Kz7VUknNOKEfWXIPwYffbNvHxmt5+HvKf2SZw= Subject key identifier: 60:CF:00:40:C0:6C:88:CB:DF:E3:06:43:80:CF:26:FC:F1:25:B3:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587AF1119A05BB1B0B90C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd1da9e6-9ecd-34f4-95f5-3c82f1c607c6.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396572 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:af:11:19:a0:5b:b1:b0:b9:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=25ebd7e1-b815-43e1-8535-02bf3463a498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:85:3e:78:47:58:f4:5a:2b:23:1e:5c:18: 63:b0:8f:20:d5:c4:6b:38:bd:19:77:d4:47:b1:8c: 11:3d:d7:3a:49:bb:d0:29:c6:07:cc:a5:99:22:08: c3:3c:84:a0:cf:70:7e:f2:f2:a5:6d:12:c8:af:93: 5a:8d:0f:6b:76:e3:ad:7b:2e:06:78:6f:ac:f6:7c: 89:89:bf:aa:57:54:86:45:5a:b1:ef:42:5a:1a:bf: 1f:93:b5:c0:55:f7:9f:ed:f1:18:f6:9b:35:89:b8: 86:de:7e:e0:a5:fc:84:aa:3f:71:0e:cf:fe:62:05: 01:15:6f:4b:60:33:79:1a:14:aa:92:a1:17:f2:b3: ad:2d:f3:72:7d:9c:c1:8b:b6:c5:59:31:8c:20:a2: 19:17:d4:e8:96:66:b6:ca:6c:dc:87:16:d0:a2:3c: 89:b6:1b:e3:ee:a2:e5:12:bb:eb:be:da:eb:af:66: 7e:e4:df:fb:cc:97:e7:91:2f:48:91:fe:c2:e3:d5: b8:9a:3a:3a:83:49:ad:84:e2:15:66:e5:3c:76:82: ec:4f:bc:5c:54:92:e8:52:65:36:65:6a:c5:af:e8: eb:21:b6:32:fb:bc:aa:a5:93:31:0d:a4:9d:ab:53: 1b:68:b4:8d:ee:0d:2a:c3:9b:b9:7e:3c:96:6a:d9: 10:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CF:00:40:C0:6C:88:CB:DF:E3:06:43:80:CF:26:FC:F1:25:B3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd1da9e6-9ecd-34f4-95f5-3c82f1c607c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fe:7b:f3:5d:39:f1:4f:7e:be:5f:6c:46:89:fa:6e:d5:0a: 2b:fc:ad:f9:8b:62:b1:81:33:01:e1:7c:fa:9a:41:d8:16:8e: 07:31:19:66:1b:3c:28:60:f1:0d:71:43:c3:f6:e0:58:7c:d3: 64:e8:ba:8b:3e:98:de:d2:9c:66:dc:b2:55:2b:78:21:47:34: e0:32:dd:bc:5d:8a:b5:8f:03:b3:35:85:e2:dd:4e:16:be:d1: 07:ff:8c:71:6f:9f:74:38:ca:ca:c6:3c:16:93:ed:3c:d6:ea: 2f:07:7b:83:97:73:a6:c3:32:2a:26:2d:1e:08:5d:0e:4e:d3: af:70:17:6a:f5:7f:c0:e8:7f:33:dd:4a:23:93:ee:7f:bc:b6: f7:c3:d6:52:df:11:ea:f3:85:5f:d3:05:49:ec:68:dc:a2:e1: 5b:b8:9e:24:fb:22:8e:4b:e1:12:f4:0f:a3:9e:e0:90:c5:43: 6f:f5:6c:50:bf:1f:e9:35:ff:7c:df:8e:20:85:2e:d4:c3:77: 7e:29:f0:13:01:df:f9:d9:60:6c:3e:16:b5:1b:54:f9:c0:e1: 2e:e2:3e:e7:de:45:c9:f6:6f:c3:c2:48:84:8a:bd:0c:d6:36: ae:67:81:23:19:e2:cc:65:a5:9b:24:16:09:44:3d:f2:67:52: a9:8f:d8:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h68RGaBbsbC5DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk MjVlYmQ3ZTEtYjgxNS00M2UxLTg1MzUtMDJiZjM0NjNhNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlmFPnhHWPRaKyMeXBhjsI8g1cRrOL0Zd9RH sYwRPdc6SbvQKcYHzKWZIgjDPISgz3B+8vKlbRLIr5NajQ9rduOtey4GeG+s9nyJ ib+qV1SGRVqx70JaGr8fk7XAVfef7fEY9ps1ibiG3n7gpfyEqj9xDs/+YgUBFW9L YDN5GhSqkqEX8rOtLfNyfZzBi7bFWTGMIKIZF9Tolma2ymzchxbQojyJthvj7qLl Ervrvtrrr2Z+5N/7zJfnkS9Ikf7C49W4mjo6g0mthOIVZuU8doLsT7xcVJLoUmU2 ZWrFr+jrIbYy+7yqpZMxDaSdq1MbaLSN7g0qw5u5fjyWatkQYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGDPAEDAbIjL3+MGQ4DPJvzxJbNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQxZGE5ZTYtOWVjZC0z NGY0LTk1ZjUtM2M4MmYxYzYwN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+/nvzXTnxT36+X2xGifpu1Qor/K35i2KxgTMB 4Xz6mkHYFo4HMRlmGzwoYPENcUPD9uBYfNNk6LqLPpje0pxm3LJVK3ghRzTgMt28 XYq1jwOzNYXi3U4WvtEH/4xxb590OMrKxjwWk+081uovB3uDl3OmwzIqJi0eCF0O TtOvcBdq9X/A6H8z3Uojk+5/vLb3w9ZS3xHq84Vf0wVJ7GjcouFbuJ4k+yKOS+ES 9A+jnuCQxUNv9WxQvx/pNf98344ghS7Uw3d+KfATAd/52WBsPha1G1T5wOEu4j7n 3kXJ9m/DwkiEir0M1jauZ4EjGeLMZaWbJBYJRD3yZ1Kpj9gQ -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:08 2026 by rpki-client