$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa File: bf844c72-9e09-3fe8-92ad-235d85ea729b.roa (raw, json) Hash identifier: j2+VskVZwt9vvshWHX0JmiGCSZg7AZpsXagGLi47Arg= Subject key identifier: 96:68:13:F9:AA:2F:0D:C1:72:29:E5:75:74:0C:BF:BF:14:98:21:9F Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584D4A8F8D0CB5F3C9D506F24080 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 715 IP address blocks: 2620:171::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8d:0c:b5:f3:c9:d5:06:f2:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=b90f105f-5e7c-41dc-b2d3-3d2775db813d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:77:64:2c:9c:be:06:a5:22:ae:77:c9:45: a2:a2:9a:9a:b4:bb:53:ab:2a:fc:26:2e:6b:87:ac: 1a:39:12:2a:bd:3a:41:62:41:b1:d6:74:71:74:ce: cb:f2:f6:d2:35:28:6b:50:5f:f4:f0:96:4e:7f:bc: 3d:3f:f3:50:cb:63:fa:ec:55:c0:be:2c:43:b9:01: 65:21:2a:9f:c7:ab:56:18:fd:0c:50:ed:82:19:84: 94:df:ea:ab:af:96:9b:f8:24:9d:63:50:d0:88:14: 56:0b:5f:1c:79:e5:72:35:ae:9b:d0:b7:b4:73:7a: b6:e4:99:04:43:d4:b5:b8:d1:ff:ea:aa:bc:89:de: e8:ca:88:cd:28:8c:4b:55:c8:68:98:1d:34:50:15: 37:bc:e6:40:0e:61:57:cd:0b:e2:3c:ae:e7:11:e2: 56:95:be:8c:2f:38:b0:5c:67:28:9d:26:f9:9a:f7: 7b:a3:86:41:d3:3b:70:4d:60:7e:ad:25:df:a0:e0: 2f:58:d2:d0:55:98:ff:d6:d9:01:4e:5b:79:3a:19: 39:0a:91:91:aa:6d:03:90:7a:7e:8b:0c:c2:66:35: 2c:2a:23:1c:0c:fa:7d:5c:35:b9:0d:34:1e:13:af: 05:83:b1:b9:55:97:9a:34:e7:3c:eb:97:84:2b:81: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:68:13:F9:AA:2F:0D:C1:72:29:E5:75:74:0C:BF:BF:14:98:21:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/bf844c72-9e09-3fe8-92ad-235d85ea729b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1d:9c:c5:07:38:07:b0:04:e1:de:ec:ba:72:cb:49:02:5a: cc:6c:44:93:9c:ce:c0:8e:5d:d5:5a:bc:d4:4a:97:bc:a7:a3: 1e:bb:14:4a:3e:fa:f5:32:62:bb:f6:7f:52:16:17:3f:05:b3: 8a:ef:17:dc:59:13:da:4c:8b:b0:50:d5:e3:5b:52:94:b0:72: 79:57:01:29:27:7d:03:20:cf:4e:94:8b:37:c9:b2:14:dd:3a: d9:a0:7d:a3:03:ee:51:7f:36:7b:77:46:94:3b:61:ec:80:8c: 1b:2d:63:f0:b4:1e:62:1b:a3:34:52:ab:06:89:13:34:cd:32: 6c:39:1a:df:8e:10:07:80:60:aa:1b:3a:de:d5:9d:4b:9a:6c: ea:b1:ed:a9:d6:1a:11:27:48:5d:72:c7:a2:3c:bc:53:1a:b2: df:50:33:96:90:46:a5:d7:cd:97:2b:ff:b2:6f:62:74:f0:66: f8:e7:39:78:cc:65:ec:16:60:2a:5f:2f:2c:50:6e:14:a0:b2: 6c:7b:5f:b6:6f:eb:79:ba:29:cc:8b:70:17:12:57:6a:51:19: aa:f9:9b:e5:e7:04:51:0c:cd:9a:af:07:05:96:4b:23:26:00: 15:c5:36:d3:42:24:71:62:67:82:62:13:0f:fa:e9:de:b9:df: 78:c8:57:58 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Kj40MtfPJ1QbyQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YjkwZjEwNWYtNWU3Yy00MWRjLWIyZDMtM2QyNzc1ZGI4MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryJ3ZCycvgalIq53yUWiopqatLtTqyr8Ji5r h6waORIqvTpBYkGx1nRxdM7L8vbSNShrUF/08JZOf7w9P/NQy2P67FXAvixDuQFl ISqfx6tWGP0MUO2CGYSU3+qrr5ab+CSdY1DQiBRWC18ceeVyNa6b0Le0c3q25JkE Q9S1uNH/6qq8id7oyojNKIxLVchomB00UBU3vOZADmFXzQviPK7nEeJWlb6MLziw XGconSb5mvd7o4ZB0ztwTWB+rSXfoOAvWNLQVZj/1tkBTlt5Ohk5CpGRqm0DkHp+ iwzCZjUsKiMcDPp9XDW5DTQeE68Fg7G5VZeaNOc865eEK4HxUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJZoE/mqLw3BcinldXQMv78UmCGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYmY4NDRjNzItOWUwOS0z ZmU4LTkyYWQtMjM1ZDg1ZWE3MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABcQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmR2cxQc4B7AE4d7sunLLSQJazGxEk5zOwI5d1Vq81EqXvKejHrsU Sj769TJiu/Z/UhYXPwWziu8X3FkT2kyLsFDV41tSlLByeVcBKSd9AyDPTpSLN8my FN062aB9owPuUX82e3dGlDth7ICMGy1j8LQeYhujNFKrBokTNM0ybDka344QB4Bg qhs63tWdS5ps6rHtqdYaESdIXXLHojy8Uxqy31AzlpBGpdfNlyv/sm9idPBm+Oc5 eMxl7BZgKl8vLFBuFKCybHtftm/rebopzItwFxJXalEZqvmb5ecEUQzNmq8HBZZL IyYAFcU200IkcWJngmITD/rp3rnfeMhXWA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:48 2026 by rpki-client