$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa File: f30990ec-db44-3f17-ad47-6a3df43a0baa.roa (raw, json) Hash identifier: Ycq7Sz/k+WiX2WHBiuEMf15WhTXa8/ceor9PxPyJON0= Subject key identifier: D5:01:29:3D:17:64:4B:EE:27:FB:19:DA:79:18:8C:9C:B8:13:E5:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A8075D734FF8C77482080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7342 IP address blocks: 2620:74:ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:80:75:d7:34:ff:8c:77:48:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f4a9d646-b128-4028-8bdf-943453ab27e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:53:df:b6:51:a5:a4:7b:37:a6:66:d0:20: 9f:13:9f:79:39:ec:b5:0e:47:f6:5c:eb:7f:43:3c: a5:63:b6:43:77:83:e2:54:38:b2:2f:5c:43:e4:d8: 9b:11:58:b1:81:63:f3:c1:ec:4e:eb:52:61:aa:aa: bb:dc:fe:21:c2:0c:91:4f:09:78:69:52:1e:72:b4: 8d:07:ec:bf:96:40:ab:2f:1e:fe:6f:dc:c2:89:1a: 1c:28:e4:58:16:35:77:a1:c9:1c:ca:1e:08:21:97: f0:27:b7:dc:1c:50:df:fd:9c:60:dd:0e:bd:10:bd: 72:99:c5:f7:20:75:67:41:37:42:f1:29:a3:a4:98: 75:f2:93:6a:01:f8:e2:b1:05:16:23:91:9c:9f:4f: 5e:38:82:eb:9e:9e:18:fc:2b:94:00:95:ff:bd:97: 47:d0:9a:65:39:a9:b3:67:ff:3b:b5:46:b9:87:bc: 5b:81:68:3c:73:f5:31:7c:a6:68:36:68:05:76:62: 7b:7c:a2:37:9a:ab:f4:ac:86:fc:c9:d1:b1:41:df: 33:49:c4:e4:37:85:99:07:e7:0f:78:2e:3c:52:cf: 0b:b3:31:52:a5:6c:5b:12:3c:d1:34:a3:e3:ef:99: 29:23:31:d6:9d:13:75:45:45:82:d5:26:8d:1e:4b: 2b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:01:29:3D:17:64:4B:EE:27:FB:19:DA:79:18:8C:9C:B8:13:E5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f30990ec-db44-3f17-ad47-6a3df43a0baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:77:e8:ba:c4:a8:26:68:a8:59:56:4b:00:0c:9b:46:65:22: 93:0a:b1:23:a0:fb:d2:cf:11:9a:19:d2:6a:5f:63:0e:46:1c: d3:c1:05:bd:d7:28:d8:57:51:72:58:b8:0c:47:70:62:9b:f0: c9:fe:bd:fb:34:95:7e:ee:25:ce:b4:a0:b3:b4:d2:ba:d6:14: ad:3c:6e:bc:61:97:3b:a7:68:fc:cc:a0:c5:0f:aa:d3:39:cc: a4:6b:ae:9f:58:12:ae:3f:f4:02:16:b6:82:f9:01:1e:a1:88: 39:c8:b0:13:0e:98:9c:1f:6f:35:e6:a9:b7:15:83:5e:74:6d: 7a:50:d0:88:55:91:89:bf:ea:b8:b7:b6:ba:f7:e4:34:0d:2f: 22:e2:eb:cb:3f:b3:d2:a1:6d:0f:f4:7d:37:f8:97:2b:a2:bb: 84:78:ab:98:b7:88:d8:0f:d0:91:58:15:60:7a:a8:1f:e1:4c: ab:2c:c4:72:78:04:ba:60:ae:8d:1e:9a:bb:e0:66:04:cd:05: b9:77:ad:09:64:22:4b:df:7b:d1:7a:3d:6e:64:e2:da:e1:3b: d6:53:ec:94:08:c1:48:8b:12:94:64:42:e9:ae:7c:ef:98:85: d9:ee:87:49:9f:fb:9e:1b:4d:18:e9:8c:5a:dd:4d:56:7d:3d: 9a:1f:06:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWoB11zT/jHdIIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjRhOWQ2NDYtYjEyOC00MDI4LThiZGYtOTQzNDUzYWIyN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19VT37ZRpaR7N6Zm0CCfE595Oey1Dkf2XOt/ QzylY7ZDd4PiVDiyL1xD5NibEVixgWPzwexO61Jhqqq73P4hwgyRTwl4aVIecrSN B+y/lkCrLx7+b9zCiRocKORYFjV3ockcyh4IIZfwJ7fcHFDf/Zxg3Q69EL1ymcX3 IHVnQTdC8SmjpJh18pNqAfjisQUWI5Gcn09eOILrnp4Y/CuUAJX/vZdH0JplOamz Z/87tUa5h7xbgWg8c/UxfKZoNmgFdmJ7fKI3mqv0rIb8ydGxQd8zScTkN4WZB+cP eC48Us8LszFSpWxbEjzRNKPj75kpIzHWnRN1RUWC1SaNHksrGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUBKT0XZEvuJ/sZ2nkYjJy4E+UNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMwOTkwZWMtZGI0NC0z ZjE3LWFkNDctNmEzZGY0M2EwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG536LrEqCZoqFlWSwAMm0ZlIpMKsSOg+9LPEZoZ0mpfYw5GHNPB Bb3XKNhXUXJYuAxHcGKb8Mn+vfs0lX7uJc60oLO00rrWFK08brxhlzunaPzMoMUP qtM5zKRrrp9YEq4/9AIWtoL5AR6hiDnIsBMOmJwfbzXmqbcVg150bXpQ0IhVkYm/ 6ri3trr35DQNLyLi68s/s9KhbQ/0fTf4lyuiu4R4q5i3iNgP0JFYFWB6qB/hTKss xHJ4BLpgro0emrvgZgTNBbl3rQlkIkvfe9F6PW5k4trhO9ZT7JQIwUiLEpRkQumu fO+Yhdnuh0mf+54bTRjpjFrdTVZ9PZofBpU= -----END CERTIFICATE-----Generated at Sun Mar 29 23:49:51 2026 by rpki-client