$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa File: 0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa (raw, json) Hash identifier: wHIBEy4D39gtVpZvGoirQP7ZC/Fx+xzZehOxD9XZW4s= Subject key identifier: CE:53:4E:37:4C:55:33:E0:67:1E:6C:8E:7A:36:E4:62:A4:18:35:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA54BC6A957E70E1E17E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396549 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:54:bc:6a:95:7e:70:e1:e1:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=26f7ca4f-54da-42d5-bdc7-c3f32a8572ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:65:5b:54:77:3a:95:83:60:a8:f1:60:70:a3: 8a:79:80:43:ae:24:38:42:60:1b:bc:9b:56:14:5f: 8c:43:36:6f:24:b8:34:41:db:38:ab:c5:64:5c:0b: e6:3a:42:a8:3b:21:b8:84:ee:61:86:b0:1b:b6:2b: 69:c6:49:c4:67:ef:cf:c2:1a:54:44:59:31:43:52: 10:7a:e1:a6:f1:a1:ad:2e:5c:0c:3a:6a:09:ed:45: fd:99:12:f3:1d:51:03:3c:dd:6e:63:2d:f5:53:07: c0:23:55:62:08:3a:50:4f:da:67:e5:cf:c5:d1:ec: 7a:85:fd:4d:2d:90:ee:fc:f2:f1:69:a0:14:05:e0: 1b:c0:ca:13:09:72:68:90:b5:9b:06:e6:79:b5:a5: c7:49:af:2f:4f:19:14:47:cf:bb:8e:7b:0d:bb:b9: a8:84:e0:4a:8e:1a:9c:4c:63:d9:0a:4f:5d:16:6a: 62:94:e6:86:dc:6a:d3:5f:7c:20:f8:99:f6:4b:ac: 3a:68:6c:a3:5a:60:fd:93:32:ee:19:30:4d:b8:ee: 08:d4:56:45:60:ef:c7:8c:08:b7:ec:63:d3:6c:57: d3:cc:2f:de:94:0f:41:e7:0a:89:7b:a9:05:cb:3a: 23:3f:99:18:49:d8:fa:af:a5:a5:b0:32:36:9c:ee: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:4E:37:4C:55:33:E0:67:1E:6C:8E:7A:36:E4:62:A4:18:35:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0eb857-0e4e-395a-98f9-d3ec8ea03608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0a:16:4b:26:4d:67:fb:af:dc:78:b7:31:57:e7:ff:25:57: 86:91:1b:dc:1e:63:c8:7f:dd:35:ec:9a:c8:63:1e:b2:f1:c8: 09:26:b7:a7:11:fd:dd:12:59:0b:3b:ac:e2:00:57:d4:dd:c4: a7:aa:f1:cb:39:b6:ad:cb:43:05:ad:7b:df:89:d3:26:92:ec: b1:80:99:24:b1:e2:c4:36:e9:96:7b:22:26:a5:3d:e6:bd:a8: 59:f0:4c:97:55:69:21:33:53:02:13:f0:9f:88:54:da:19:6a: 71:11:25:35:93:f3:07:b7:64:ed:a1:72:a0:e3:a1:1e:1a:7a: 53:67:94:eb:43:23:4c:e6:bd:2a:5d:14:18:f4:65:d3:96:88: c1:34:6f:82:94:93:7c:b9:c8:18:7a:54:99:de:9a:a1:22:0c: 82:8d:f4:e7:0d:fb:4f:00:b1:1d:85:41:c8:7f:ae:c6:1a:fc: 23:b1:a0:29:fa:02:66:9f:dc:2b:4f:3d:5b:92:34:83:f8:b4: 3c:82:fc:e3:e1:a3:5c:e1:9f:dc:60:47:85:25:b5:61:3a:e9: 30:47:34:29:25:91:e6:2f:89:3f:fb:bc:bd:94:c3:6d:63:f2: 19:bf:c6:e1:5f:24:66:33:e8:f1:8a:a3:14:fe:7d:3d:90:da: 50:ed:ce:8a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lS8apV+cOHhfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MjZmN2NhNGYtNTRkYS00MmQ1LWJkYzctYzNmMzJhODU3MmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2VbVHc6lYNgqPFgcKOKeYBDriQ4QmAbvJtW FF+MQzZvJLg0Qds4q8VkXAvmOkKoOyG4hO5hhrAbtitpxknEZ+/PwhpURFkxQ1IQ euGm8aGtLlwMOmoJ7UX9mRLzHVEDPN1uYy31UwfAI1ViCDpQT9pn5c/F0ex6hf1N LZDu/PLxaaAUBeAbwMoTCXJokLWbBuZ5taXHSa8vTxkUR8+7jnsNu7mohOBKjhqc TGPZCk9dFmpilOaG3GrTX3wg+Jn2S6w6aGyjWmD9kzLuGTBNuO4I1FZFYO/HjAi3 7GPTbFfTzC/elA9B5wqJe6kFyzojP5kYSdj6r6WlsDI2nO7qZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM5TTjdMVTPgZx5sjno25GKkGDUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwZWI4NTctMGU0ZS0z OTVhLTk4ZjktZDNlYzhlYTAzNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBWChZLJk1n+6/ceLcxV+f/JVeGkRvcHmPIf901 7JrIYx6y8cgJJrenEf3dElkLO6ziAFfU3cSnqvHLObaty0MFrXvfidMmkuyxgJkk seLENumWeyImpT3mvahZ8EyXVWkhM1MCE/CfiFTaGWpxESU1k/MHt2TtoXKg46Ee GnpTZ5TrQyNM5r0qXRQY9GXTlojBNG+ClJN8ucgYelSZ3pqhIgyCjfTnDftPALEd hUHIf67GGvwjsaAp+gJmn9wrTz1bkjSD+LQ8gvzj4aNc4Z/cYEeFJbVhOukwRzQp JZHmL4k/+7y9lMNtY/IZv8bhXyRmM+jxiqMU/n09kNpQ7c6K -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:36 2026 by rpki-client