$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa File: a29e971c-3fed-3379-ad50-027a14d1589b.roa (raw, json) Hash identifier: pD4KSbdVL35lf115gRPKIyYf/6GiLC2PDmRhYzl18HU= Subject key identifier: 9C:73:E4:73:89:EE:48:D5:46:2A:0C:FB:0F:04:66:51:9E:1A:A0:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D52434BFB353ADB906395EE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 2620:74:28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4b:fb:35:3a:db:90:63:95:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=12535702-4d22-432a-a0e1-4d4e5c3a0686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:34:ba:5d:dd:3a:1a:0e:16:04:58:cc:2e:8d: d8:34:9f:a0:f7:fc:e7:c6:e5:4e:c1:5c:63:f1:52: 68:9d:1e:9e:45:33:82:67:b6:b9:d8:47:de:d7:3a: 3c:d2:11:0c:42:a3:2c:52:8c:c6:1c:84:5c:3a:47: 39:68:2f:e4:fb:36:0f:35:e7:b6:16:78:18:8f:3b: 55:a5:75:1f:7a:06:a3:bd:f0:dc:c5:5a:59:85:6a: 23:7e:49:99:69:4c:86:65:0e:fe:e4:8f:0c:e8:ee: 4b:34:ba:c7:44:3c:76:ab:85:77:7d:8c:c0:34:f8: 54:f5:4c:84:cc:11:6f:68:4f:ad:5c:14:79:3c:a5: 09:75:9c:16:1e:ac:d8:39:86:58:89:9f:3d:bd:5e: 6a:b5:3f:59:83:f0:9b:73:42:5e:48:11:c1:22:76: 41:54:9f:d0:52:c7:7b:e7:c7:8d:f1:c7:44:bc:e1: 9c:a2:7a:0e:ba:b4:9e:0a:b5:67:15:22:90:4a:fb: 3d:54:20:46:6e:68:98:08:c3:b3:12:5a:42:76:c9: 8f:2f:d3:c6:3d:17:e4:b8:44:a4:fe:a4:2b:1f:fc: 37:94:54:0d:30:f0:c0:65:ff:bb:0a:d6:0b:bd:d3: 4a:de:2c:78:b8:47:12:dc:41:60:9e:1b:67:ac:93: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:73:E4:73:89:EE:48:D5:46:2A:0C:FB:0F:04:66:51:9E:1A:A0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ee:41:87:ae:7e:2f:ef:a9:85:06:24:45:c6:b5:63:c1:75: 26:5b:ff:51:f5:18:82:0b:9d:20:46:d4:41:4d:d3:20:39:a1: 44:71:5e:dc:da:1e:68:c3:0a:e3:94:84:99:d1:ea:be:70:27: 5a:3e:9e:a6:99:31:4c:43:e7:de:2c:8b:b4:9b:4f:be:db:84: 5a:bb:b9:65:60:5e:23:75:bf:1e:21:f2:4b:8e:c6:9f:a9:29: 0d:a6:74:7c:75:5b:02:02:94:e6:7e:38:7f:97:a5:f4:19:81: ea:7f:19:a4:fa:9d:d1:c0:8b:df:b3:4f:0c:b8:8b:21:90:16: 4b:6a:83:23:d1:a9:76:0b:aa:54:2d:c2:1c:66:cb:a9:10:4e: 4f:0f:16:db:62:b2:7e:2f:53:1d:16:11:88:51:a7:f7:aa:9a: 94:37:07:cc:d2:fa:d2:ba:d0:e9:31:b6:09:d9:39:3d:f6:27: 86:9b:8c:12:ff:00:d1:99:18:3a:b2:9f:1a:0e:f1:df:a2:97: 7b:01:a3:c3:89:6b:65:91:06:96:e5:ec:c5:e2:65:af:ff:5e: c6:d2:11:cf:1d:e2:ce:57:69:8b:70:d5:ea:ee:39:55:28:e3: ff:1d:38:48:5e:f0:48:04:70:aa:49:1e:2a:fb:33:93:c9:c4: ce:63:00:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SQ0v7NTrbkGOV7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MTI1MzU3MDItNGQyMi00MzJhLWEwZTEtNGQ0ZTVjM2EwNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zS6Xd06Gg4WBFjMLo3YNJ+g9/znxuVOwVxj 8VJonR6eRTOCZ7a52Efe1zo80hEMQqMsUozGHIRcOkc5aC/k+zYPNee2FngYjztV pXUfegajvfDcxVpZhWojfkmZaUyGZQ7+5I8M6O5LNLrHRDx2q4V3fYzANPhU9UyE zBFvaE+tXBR5PKUJdZwWHqzYOYZYiZ89vV5qtT9Zg/Cbc0JeSBHBInZBVJ/QUsd7 58eN8cdEvOGconoOurSeCrVnFSKQSvs9VCBGbmiYCMOzElpCdsmPL9PGPRfkuESk /qQrH/w3lFQNMPDAZf+7CtYLvdNK3ix4uEcS3EFgnhtnrJMExQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJxz5HOJ7kjVRioM+w8EZlGeGqC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI5ZTk3MWMtM2ZlZC0z Mzc5LWFkNTAtMDI3YTE0ZDE1ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3uQYeufi/vqYUGJEXGtWPBdSZb/1H1GIILnSBG1EFN0yA5oURx XtzaHmjDCuOUhJnR6r5wJ1o+nqaZMUxD594si7SbT77bhFq7uWVgXiN1vx4h8kuO xp+pKQ2mdHx1WwIClOZ+OH+XpfQZgep/GaT6ndHAi9+zTwy4iyGQFktqgyPRqXYL qlQtwhxmy6kQTk8PFttisn4vUx0WEYhRp/eqmpQ3B8zS+tK60OkxtgnZOT32J4ab jBL/ANGZGDqynxoO8d+il3sBo8OJa2WRBpbl7MXiZa//XsbSEc8d4s5XaYtw1eru OVUo4/8dOEhe8EgEcKpJHir7M5PJxM5jAEw= -----END CERTIFICATE-----Generated at Mon Mar 30 04:25:01 2026 by rpki-client