$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa File: 1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa (raw, json) Hash identifier: BJTPpo4f5VWPBkjFNmHrRaLpGVnDrGLs2JLc4VioYvk= Subject key identifier: 06:0F:34:6D:69:82:E0:B6:39:B1:67:51:93:38:92:59:C6:4D:09:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5AA93758F65AC5BF4300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396576 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5a:a9:37:58:f6:5a:c5:bf:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f7d1f4a1-1581-4d70-bb91-22cc55cccbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:0e:e8:16:5b:07:1b:79:48:d9:2f:24:79: 3a:2c:22:ac:e8:d7:d0:5d:42:ae:cd:f8:d1:7c:d0: 89:7c:c1:25:c0:e2:7d:80:a2:7d:bd:39:58:c8:dd: 12:a5:7a:ab:f0:dc:cd:62:c3:0d:ec:2e:95:3d:29: 16:08:f7:ea:6b:f5:cc:47:e4:3e:67:ae:c7:f1:f0: 67:85:fd:b2:c0:26:28:5f:64:9e:3c:6c:55:db:b9: 6b:8d:ef:b6:aa:e4:d6:55:db:97:99:ba:fd:33:15: 38:bb:11:e4:26:a5:bc:e8:f6:dc:3d:21:93:ed:ee: 82:73:1e:95:cd:27:7b:20:1a:fe:af:c4:59:65:ae: 4c:3a:b3:25:27:75:9c:40:24:17:f5:b2:2f:4c:13: 2c:84:61:1a:91:f8:b3:96:fc:31:ed:8f:65:ea:b5: 2e:7c:0c:9d:39:59:72:f4:a3:89:22:08:5b:74:a4: 15:28:c2:ff:5e:20:ba:39:a0:39:d4:f1:3d:ca:9a: a5:73:d4:ef:8d:f3:be:a3:90:9b:98:a3:ab:5a:30: c7:dd:a9:48:7c:84:0d:eb:0a:c4:4a:b8:3b:a9:e3: 23:5f:19:64:82:d8:2e:28:0e:1b:2c:42:08:e0:8a: 90:c9:5e:81:0e:af:6d:62:10:01:8e:8e:d8:77:d1: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:34:6D:69:82:E0:B6:39:B1:67:51:93:38:92:59:C6:4D:09:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ac2a394-d64c-3bed-9517-56c35f8fc3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9e:ca:0c:73:c6:c9:05:ef:ce:ea:18:b2:81:3a:7b:a0:b5: 03:83:04:b9:63:61:91:f2:1a:50:7d:9d:51:b6:55:16:ac:a3: eb:1c:ff:9b:c2:99:fb:ba:71:01:79:6d:d9:14:f2:ed:48:11: fd:91:5d:51:c9:be:26:9f:18:4f:08:57:86:f7:f1:b2:8f:4c: b5:88:a0:55:8d:ac:77:34:65:8c:c1:a2:6e:9b:3f:13:a6:0a: de:0a:b4:f1:4f:3c:22:d8:21:fc:34:e2:f4:ec:77:9e:5f:5b: d2:36:1a:2e:50:96:7d:11:f7:83:c4:68:77:1f:62:6b:db:e1: 13:76:ec:20:09:fe:a9:14:f2:bc:9e:bf:1b:83:07:dd:3f:4c: 1b:22:0c:db:6a:c4:03:6b:c4:c6:a1:e8:06:7c:e4:15:dd:e4: 93:79:e7:34:9b:22:8a:96:11:b3:75:e8:73:60:55:2e:48:03: c1:7c:e9:c1:74:27:c9:11:47:77:0b:c0:cb:3e:6b:e2:ce:c8: c1:e6:57:a7:b2:dc:fb:b4:c3:25:73:56:97:ad:e8:cc:f2:08: 4c:b6:14:c6:b7:29:2b:29:c1:85:dc:23:e6:49:ec:c7:88:38: 50:92:5d:02:46:92:14:89:0c:d2:91:bd:2e:76:b5:f4:3e:d2: 76:f9:cd:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lqpN1j2WsW/QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjdkMWY0YTEtMTU4MS00ZDcwLWJiOTEtMjJjYzU1Y2NjYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2loO6BZbBxt5SNkvJHk6LCKs6NfQXUKuzfjR fNCJfMElwOJ9gKJ9vTlYyN0SpXqr8NzNYsMN7C6VPSkWCPfqa/XMR+Q+Z67H8fBn hf2ywCYoX2SePGxV27lrje+2quTWVduXmbr9MxU4uxHkJqW86PbcPSGT7e6Ccx6V zSd7IBr+r8RZZa5MOrMlJ3WcQCQX9bIvTBMshGEakfizlvwx7Y9l6rUufAydOVly 9KOJIghbdKQVKML/XiC6OaA51PE9ypqlc9TvjfO+o5CbmKOrWjDH3alIfIQN6wrE Srg7qeMjXxlkgtguKA4bLEII4IqQyV6BDq9tYhABjo7Yd9H2FwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAYPNG1pguC2ObFnUZM4klnGTQmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFjMmEzOTQtZDY0Yy0z YmVkLTk1MTctNTZjMzVmOGZjM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/nsoMc8bJBe/O6hiygTp7oLUDgwS5Y2GR8hpQ fZ1RtlUWrKPrHP+bwpn7unEBeW3ZFPLtSBH9kV1Ryb4mnxhPCFeG9/Gyj0y1iKBV jax3NGWMwaJumz8TpgreCrTxTzwi2CH8NOL07HeeX1vSNhouUJZ9EfeDxGh3H2Jr 2+ETduwgCf6pFPK8nr8bgwfdP0wbIgzbasQDa8TGoegGfOQV3eSTeec0myKKlhGz dehzYFUuSAPBfOnBdCfJEUd3C8DLPmvizsjB5lenstz7tMMlc1aXrejM8ghMthTG tykrKcGF3CPmSezHiDhQkl0CRpIUiQzSkb0udrX0PtJ2+c1y -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:52 2026 by rpki-client