$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa File: 507b0811-c273-30ef-a628-dfc4f6e1715c.roa (raw, json) Hash identifier: /hwxAKa8YerLpOwsJh9YcHVIxGwpF+tsLwOBzbX9DJE= Subject key identifier: 6E:CB:57:9F:92:21:F0:39:14:40:67:15:98:38:AA:5D:6B:3C:88:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A80A959F0708F4C7FD680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7342 IP address blocks: 2620:74:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:80:a9:59:f0:70:8f:4c:7f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a0dc414b-e700-44aa-a01f-9e8dde4ebdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:e3:2b:9e:7e:aa:06:eb:0a:41:9b:05:96: e2:70:3a:be:e4:eb:a6:44:31:54:e1:b6:da:0d:01: a4:af:46:99:9c:0e:8e:3e:bc:18:cc:68:08:0b:6f: 02:29:55:d3:63:10:6b:d9:82:45:c7:96:76:03:c9: c6:4b:53:43:9b:c5:f0:69:a0:b5:1b:e8:4f:79:28: 4f:df:31:47:62:04:f8:90:a6:f9:cd:58:f9:b7:c9: 6c:ef:48:60:be:10:ac:32:e9:ee:b6:26:31:10:16: 66:18:ef:0a:af:bb:bb:17:50:38:87:0f:db:ba:e1: 83:ee:b9:8b:7f:4b:c5:63:9c:a4:0f:1b:2e:b6:c3: 94:a2:46:3f:70:14:94:c7:76:2c:2f:06:59:2e:a0: fd:57:02:7c:76:cf:c2:b1:43:37:66:7e:96:ec:d7: 87:24:99:e0:18:99:64:3c:58:a0:16:7e:de:4f:ee: 64:a5:aa:82:77:f1:12:45:24:04:f1:d1:f7:4e:37: 94:22:1f:bc:00:ca:a0:5f:74:d7:a8:94:fa:ff:81: 28:e0:1e:bb:28:2d:b4:5a:08:11:5a:5a:8e:6b:50: a2:61:17:0c:bf:dd:82:4d:3c:69:88:95:fb:8c:2f: 81:8d:b7:84:78:db:a8:ee:05:c3:b2:dd:63:fe:6c: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CB:57:9F:92:21:F0:39:14:40:67:15:98:38:AA:5D:6B:3C:88:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:53:b0:ef:66:89:a0:88:f7:9b:0d:f5:d3:d7:3a:9c:07:35: 60:fe:6d:a4:94:3b:4f:4d:14:39:97:0f:85:d5:32:6f:d7:ca: 23:9d:ad:f6:91:ce:54:a3:13:ad:5e:98:69:43:9a:c8:f3:86: ff:c8:28:e7:98:34:7e:00:a8:f3:76:b4:37:ba:8e:59:8d:8e: ae:2c:99:00:5a:a4:24:01:97:2f:34:99:ad:5b:00:f1:56:47: 0a:6e:98:a8:20:d9:fb:07:2d:3f:75:ac:82:05:7c:ac:5f:f8: 5a:7f:44:cc:66:68:e5:9a:e3:5e:a5:2d:77:70:03:e9:5d:ab: 39:83:28:a2:64:6b:03:1c:13:28:e2:0a:fc:26:1e:89:37:ef: 80:e9:7d:50:4d:47:ad:b5:01:7a:94:97:d3:92:0d:b3:54:0f: 33:98:65:4f:5f:d0:d4:62:66:81:a3:41:86:85:05:31:e3:6f: 7d:83:ba:4f:29:73:2b:be:e8:14:73:11:9f:20:90:5f:5e:38: 10:af:ce:d7:0e:d5:6e:95:e2:86:47:b1:70:a3:70:5d:43:8e: 91:84:88:90:61:9e:b3:06:88:73:b2:52:9f:52:a5:2d:14:48: c2:2b:b8:ba:a9:c6:58:b0:6d:f3:26:b4:11:38:bc:32:36:2b: 39:53:de:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWoCpWfBwj0x/1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTBkYzQxNGItZTcwMC00NGFhLWEwMWYtOWU4ZGRlNGViZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzHjK55+qgbrCkGbBZbicDq+5OumRDFU4bba DQGkr0aZnA6OPrwYzGgIC28CKVXTYxBr2YJFx5Z2A8nGS1NDm8XwaaC1G+hPeShP 3zFHYgT4kKb5zVj5t8ls70hgvhCsMunutiYxEBZmGO8Kr7u7F1A4hw/buuGD7rmL f0vFY5ykDxsutsOUokY/cBSUx3YsLwZZLqD9VwJ8ds/CsUM3Zn6W7NeHJJngGJlk PFigFn7eT+5kpaqCd/ESRSQE8dH3TjeUIh+8AMqgX3TXqJT6/4Eo4B67KC20WggR WlqOa1CiYRcMv92CTTxpiJX7jC+BjbeEeNuo7gXDst1j/mzCHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7LV5+SIfA5FEBnFZg4ql1rPIgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA3YjA4MTEtYzI3My0z MGVmLWE2MjgtZGZjNGY2ZTE3MTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlTsO9miaCI95sN9dPXOpwHNWD+baSUO09NFDmXD4XVMm/XyiOd rfaRzlSjE61emGlDmsjzhv/IKOeYNH4AqPN2tDe6jlmNjq4smQBapCQBly80ma1b APFWRwpumKgg2fsHLT91rIIFfKxf+Fp/RMxmaOWa416lLXdwA+ldqzmDKKJkawMc EyjiCvwmHok374DpfVBNR621AXqUl9OSDbNUDzOYZU9f0NRiZoGjQYaFBTHjb32D uk8pcyu+6BRzEZ8gkF9eOBCvztcO1W6V4oZHsXCjcF1DjpGEiJBhnrMGiHOyUp9S pS0USMIruLqpxliwbfMmtBE4vDI2KzlT3h8= -----END CERTIFICATE-----Generated at Sun Mar 29 23:53:56 2026 by rpki-client