$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa File: 3efc0e54-d79f-3d11-8871-bc00149b77b4.roa (raw, json) Hash identifier: 42buy3rRoM4boheY0zzOTsNQe0NjpGwDMsNxdtVappE= Subject key identifier: 59:11:C8:84:CF:FF:32:75:DE:3E:FC:35:68:4C:69:38:DF:1C:9D:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A8D2620755A11F201C780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7342 IP address blocks: 2620:74:a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:8d:26:20:75:5a:11:f2:01:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f4c6e349-5143-4977-88c4-84687856ac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:d7:da:2a:97:3b:12:31:f1:32:d6:58:8d: fc:02:b9:19:52:fa:d6:d5:11:d4:eb:b1:d3:64:5c: a1:33:f5:64:d0:f6:61:30:2c:e1:e5:9d:a9:46:d2: b5:de:cb:5c:e9:f3:0f:e7:52:78:59:c3:c4:14:7f: 50:16:ea:9d:64:ba:f1:c4:65:11:f0:d1:0a:4e:92: 0b:94:dc:a0:e1:ef:d6:b1:c7:2d:57:ed:25:24:b6: f8:5f:d1:1c:3b:44:b2:0f:ee:4d:55:7a:4f:32:23: 1d:04:b6:72:2c:e2:89:b6:e4:b6:4f:ab:55:d8:d8: a5:bb:f5:10:28:6c:89:60:63:e1:2f:2d:8e:47:ad: f6:32:78:b2:d0:8b:9f:69:ce:2e:95:8b:71:30:7d: b2:e0:bd:27:44:8a:cf:85:92:be:df:9d:8f:69:7c: 0f:bf:a3:82:33:b6:94:49:66:47:80:d1:27:3a:3f: b2:1e:9e:8f:c8:55:ee:69:69:d4:dc:bb:16:9f:7b: 65:78:0a:5f:71:f0:4e:f2:40:a4:f8:6f:db:ec:a6: b3:a0:a6:1d:2f:61:87:fb:0d:2f:e5:b1:11:0c:c4: eb:2b:93:69:d3:9a:60:1f:c0:f6:df:81:ee:d3:a9: 1b:ef:aa:80:a0:ac:e3:06:9b:ce:34:53:9c:ba:ff: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:11:C8:84:CF:FF:32:75:DE:3E:FC:35:68:4C:69:38:DF:1C:9D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3efc0e54-d79f-3d11-8871-bc00149b77b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3b:39:e5:c7:8b:13:09:4c:36:fa:27:89:e4:12:a9:cd:34: 27:77:aa:ca:2e:48:63:67:73:b4:f4:6f:6b:10:d2:92:fd:00: 51:11:2f:6c:f9:33:53:54:9f:ea:72:0e:2d:27:7c:ef:4f:a1: 82:2e:79:17:45:5a:61:e8:c1:bf:0b:31:37:bc:91:a9:b8:01: 13:b6:78:1a:21:e1:f5:ae:ed:d5:eb:49:41:49:a0:91:67:80: 64:c2:e6:96:ae:3b:c4:fb:48:d6:8a:7e:fe:a6:32:10:22:3c: 22:e4:9e:ff:bd:e1:74:7b:a0:38:f6:53:61:87:b8:b3:e8:9b: 03:c3:22:0d:f2:13:91:21:e0:40:86:72:52:47:5e:ac:ff:cc: b4:a4:ca:79:9c:09:52:a2:73:9c:eb:7d:c8:b9:6c:8d:20:d4: e1:02:d4:bb:6f:98:48:85:8b:ac:11:dc:b5:1d:e4:57:27:ec: 4f:64:9b:c4:05:ed:d2:59:01:d5:bd:23:a6:29:4e:25:85:0d: 4a:cf:99:2d:bf:0a:74:54:1b:43:eb:9a:d7:89:e7:85:61:06: 2d:6f:54:22:7a:0a:f8:bb:59:c5:62:15:0d:69:4e:8d:8a:38: a7:2c:b6:05:c0:67:ba:f8:60:e2:f5:97:92:d2:79:f0:e0:b5: 05:36:a2:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWo0mIHVaEfIBx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjRjNmUzNDktNTE0My00OTc3LTg4YzQtODQ2ODc4NTZhYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz/X2iqXOxIx8TLWWI38ArkZUvrW1RHU67HT ZFyhM/Vk0PZhMCzh5Z2pRtK13stc6fMP51J4WcPEFH9QFuqdZLrxxGUR8NEKTpIL lNyg4e/WscctV+0lJLb4X9EcO0SyD+5NVXpPMiMdBLZyLOKJtuS2T6tV2Nilu/UQ KGyJYGPhLy2OR632Mniy0Iufac4ulYtxMH2y4L0nRIrPhZK+352PaXwPv6OCM7aU SWZHgNEnOj+yHp6PyFXuaWnU3LsWn3tleApfcfBO8kCk+G/b7KazoKYdL2GH+w0v 5bERDMTrK5Np05pgH8D234Hu06kb76qAoKzjBpvONFOcuv/J1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFkRyITP/zJ13j78NWhMaTjfHJ10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VmYzBlNTQtZDc5Zi0z ZDExLTg4NzEtYmMwMDE0OWI3N2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACE7OeXHixMJTDb6J4nkEqnNNCd3qsouSGNnc7T0b2sQ0pL9AFER L2z5M1NUn+pyDi0nfO9PoYIueRdFWmHowb8LMTe8kam4ARO2eBoh4fWu7dXrSUFJ oJFngGTC5pauO8T7SNaKfv6mMhAiPCLknv+94XR7oDj2U2GHuLPomwPDIg3yE5Eh 4ECGclJHXqz/zLSkynmcCVKic5zrfci5bI0g1OEC1LtvmEiFi6wR3LUd5Fcn7E9k m8QF7dJZAdW9I6YpTiWFDUrPmS2/CnRUG0PrmteJ54VhBi1vVCJ6Cvi7WcViFQ1p To2KOKcstgXAZ7r4YOL1l5LSefDgtQU2onc= -----END CERTIFICATE-----Generated at Mon Mar 30 01:26:13 2026 by rpki-client