$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa File: 192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json) Hash identifier: ztdEsn/3ki8ZGOeY9irRV5KR2e9xq8QdiOxa10Qiy0o= Subject key identifier: EA:D1:76:C0:4B:20:0E:95:C7:12:7D:65:20:BF:7E:D5:B6:59:89:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A8D36E859FC9FC968A7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7342 IP address blocks: 2620:74:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:8d:36:e8:59:fc:9f:c9:68:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=4f392321-d65f-4bf2-bafa-da73015a6602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:26:90:51:14:10:34:d9:ca:fc:14:43:55:ac: 55:90:a0:8a:7a:46:17:2e:a3:95:ae:79:40:66:4c: 5b:b3:5a:f0:75:00:d3:9e:1d:7b:29:8d:c1:2c:27: 63:c3:7e:5a:1f:81:b5:05:52:53:8f:dd:f8:a7:0d: 2a:ef:98:f4:de:9e:5f:3a:ab:79:62:4f:9e:1b:35: 61:9f:a6:40:99:d6:33:fb:df:3f:6b:03:74:91:b7: 09:9e:1a:16:fc:83:4a:c9:df:d2:fa:85:c9:a0:4d: a9:4a:fd:23:25:00:1f:80:54:0b:7a:5f:73:4f:7f: 70:a8:6a:d2:ab:54:20:73:e6:2b:9d:ca:28:a3:48: 17:c3:d2:66:18:73:bb:4f:21:ff:fc:b1:eb:84:8a: 1a:f5:0b:ec:7a:2a:38:70:6b:22:4f:f9:b2:2e:6a: 4f:d5:8d:4e:a5:88:b2:16:12:c5:18:16:30:85:c4: c4:79:ca:22:4b:0e:ea:e3:3a:2d:6f:cf:06:3b:c9: 7b:33:97:5a:72:b3:f3:d5:9c:34:1d:96:c0:83:4d: d3:97:ac:a7:10:f5:5b:48:0f:14:16:ce:3e:5b:ce: ec:f7:0d:d6:f1:bc:d5:e9:eb:7f:e7:43:70:fc:03: 95:f1:39:9d:cd:e6:32:28:04:ee:08:20:e9:83:9f: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D1:76:C0:4B:20:0E:95:C7:12:7D:65:20:BF:7E:D5:B6:59:89:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4f:cf:73:97:da:49:4d:bd:4a:d8:08:44:fd:3b:76:79:86: 19:77:7f:35:88:b9:71:eb:34:9f:76:32:95:5a:d5:f0:d4:d2: 3d:9a:14:65:79:2d:45:4d:4e:a0:9c:3a:06:b6:49:68:8c:9d: 03:02:f0:82:f0:fa:1e:ff:60:81:02:5b:08:66:ce:d5:93:12: e9:ef:eb:37:17:0c:66:cf:a8:52:d4:6d:67:6b:f1:ed:0a:97: b7:03:fe:65:40:1d:5e:e1:9d:a0:c3:d3:4a:e6:35:d6:57:cf: 9f:97:86:ca:d9:21:4b:38:a4:47:39:11:42:cb:7f:d2:a3:94: f7:c2:d6:6d:f7:14:0d:17:85:d6:83:37:8b:e3:3d:46:cb:90: 65:ac:fc:d4:a2:e6:aa:17:4b:84:be:8a:8a:b1:b2:35:fd:06: 99:1b:6c:d5:4e:89:25:2e:32:d2:c5:d8:fe:45:0f:6e:bb:a0: 3b:95:6c:9b:cf:8a:92:3e:52:8e:6d:e4:76:f9:9d:31:31:65: 3d:1d:f4:d4:49:07:8a:e9:5d:32:20:76:5e:2e:c7:55:26:d2: a3:75:f7:6a:a1:d4:44:b5:25:3f:e5:7d:56:42:6f:43:b5:d6: 5e:f1:a8:7e:e8:80:44:5f:2a:0a:95:34:4c:25:9b:95:af:ea: 87:32:06:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWo026Fn8n8lop8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NGYzOTIzMjEtZDY1Zi00YmYyLWJhZmEtZGE3MzAxNWE2NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iaQURQQNNnK/BRDVaxVkKCKekYXLqOVrnlA Zkxbs1rwdQDTnh17KY3BLCdjw35aH4G1BVJTj934pw0q75j03p5fOqt5Yk+eGzVh n6ZAmdYz+98/awN0kbcJnhoW/INKyd/S+oXJoE2pSv0jJQAfgFQLel9zT39wqGrS q1Qgc+Yrncooo0gXw9JmGHO7TyH//LHrhIoa9Qvseio4cGsiT/myLmpP1Y1OpYiy FhLFGBYwhcTEecoiSw7q4zotb88GO8l7M5dacrPz1Zw0HZbAg03Tl6ynEPVbSA8U Fs4+W87s9w3W8bzV6et/50Nw/AOV8TmdzeYyKATuCCDpg59aKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrRdsBLIA6VxxJ9ZSC/ftW2WYnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBPz3OX2klNvUrYCET9O3Z5hhl3fzWIuXHrNJ92MpVa1fDU0j2a FGV5LUVNTqCcOga2SWiMnQMC8ILw+h7/YIECWwhmztWTEunv6zcXDGbPqFLUbWdr 8e0Kl7cD/mVAHV7hnaDD00rmNdZXz5+XhsrZIUs4pEc5EULLf9KjlPfC1m33FA0X hdaDN4vjPUbLkGWs/NSi5qoXS4S+ioqxsjX9BpkbbNVOiSUuMtLF2P5FD267oDuV bJvPipI+Uo5t5Hb5nTExZT0d9NRJB4rpXTIgdl4ux1Um0qN192qh1ES1JT/lfVZC b0O11l7xqH7ogERfKgqVNEwlm5Wv6ocyBsE= -----END CERTIFICATE-----Generated at Sun Mar 29 23:50:46 2026 by rpki-client