$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e298229-f6a9-3244-8e9d-b737ea26159b.roa File: 1e298229-f6a9-3244-8e9d-b737ea26159b.roa (raw, json) Hash identifier: 0VgK2bU4TjAHw6LNH3DtH05rMvlaqYTN+tvdygi/j4g= Subject key identifier: 0D:C0:3A:0C:3C:10:79:77:37:5E:A1:2F:51:03:21:F9:6D:19:FA:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A2277692246A69389AD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e298229-f6a9-3244-8e9d-b737ea26159b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396600 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:22:77:69:22:46:a6:93:89:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=03a7745a-fef5-4d51-abaa-50d0a0fac5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:0c:5f:80:ff:bc:e0:ec:7b:85:fd:d0:db: 3e:2c:09:a4:9c:98:ca:7e:e3:93:60:21:24:f8:01: 4c:5b:3d:0e:0c:88:fc:8d:12:51:7d:94:43:8e:4b: c1:76:fe:fb:f3:57:0b:e5:d3:30:fe:c0:82:5a:63: 7f:f1:0a:fc:45:e7:5f:81:62:fe:e9:ee:d2:54:04: 05:41:98:30:0b:98:4b:cc:34:18:76:d9:63:7d:b3: f2:b1:21:7e:53:1a:4d:6e:60:56:ed:7b:2f:14:3a: 07:57:4e:13:a9:b9:36:ab:0a:86:35:b8:c2:9c:06: 78:76:5f:39:09:30:f2:e8:dc:fa:ca:cb:b9:c8:f4: 57:48:ea:4b:5a:57:bc:f5:23:bd:0c:8a:ec:3f:4f: 04:3a:77:83:bf:72:ee:ec:41:80:bd:b9:d0:f4:7f: 12:27:1d:f3:67:9e:67:cb:18:c5:a0:52:dd:15:3c: 45:88:1b:83:46:13:f8:ce:5e:9f:ca:9d:1e:c6:8a: 24:38:1d:b5:61:69:ff:8f:bb:6c:cf:7b:33:5a:c7: 72:75:c7:65:f5:9f:ff:b8:ec:13:91:2f:d0:aa:4d: ab:32:c1:89:43:14:9d:7f:52:ee:8d:2e:f0:7d:54: a4:08:2c:54:16:db:3f:00:88:20:9d:db:08:31:3a: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C0:3A:0C:3C:10:79:77:37:5E:A1:2F:51:03:21:F9:6D:19:FA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e298229-f6a9-3244-8e9d-b737ea26159b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:58:72:f9:0b:40:37:ac:a3:6c:50:49:00:73:10:04:33:e2: 08:96:2f:ae:bc:3a:0e:7a:fd:44:4f:ee:12:57:d0:36:e0:bd: 82:24:8f:77:cc:0c:b5:6f:a7:a0:4c:4a:5b:65:5b:9c:73:49: f8:4f:df:3e:9a:c4:63:7b:5f:54:25:ba:dc:04:84:c2:9e:ec: b6:6e:55:12:91:d3:30:bb:55:b2:0b:ec:6c:fd:fe:89:95:45: fb:94:f2:31:c2:31:f6:7a:23:40:9f:a1:cf:48:41:76:fc:de: d8:de:60:9c:4b:fe:a3:bf:b2:2f:c4:f0:95:be:dd:2f:73:8b: 1c:ac:ef:78:1f:da:b5:14:e3:74:f1:5b:39:11:57:9d:5e:73: a2:bd:79:31:35:56:fe:d5:12:4a:5d:9d:c4:d4:16:ed:47:3d: b9:62:39:db:6f:a3:65:44:9f:4d:ec:dd:c3:ab:63:07:95:cc: bf:dc:45:b1:f9:a5:8b:1a:27:c3:96:1b:b9:86:ff:76:fe:01: 22:48:4d:73:d3:a6:c5:c1:4c:12:c9:c1:69:27:1f:1d:13:a5: 29:02:5d:68:ad:a3:5f:da:f1:f0:e4:36:df:14:1d:20:cc:d9: d2:d2:a0:1d:f1:8e:1b:4d:fb:83:95:d6:3f:4f:aa:76:79:f2: 3b:cf:cf:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiJ3aSJGppOJrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDNhNzc0NWEtZmVmNS00ZDUxLWFiYWEtNTBkMGEwZmFjNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QgMX4D/vODse4X90Ns+LAmknJjKfuOTYCEk +AFMWz0ODIj8jRJRfZRDjkvBdv7781cL5dMw/sCCWmN/8Qr8RedfgWL+6e7SVAQF QZgwC5hLzDQYdtljfbPysSF+UxpNbmBW7XsvFDoHV04Tqbk2qwqGNbjCnAZ4dl85 CTDy6Nz6ysu5yPRXSOpLWle89SO9DIrsP08EOneDv3Lu7EGAvbnQ9H8SJx3zZ55n yxjFoFLdFTxFiBuDRhP4zl6fyp0exookOB21YWn/j7tsz3szWsdydcdl9Z//uOwT kS/Qqk2rMsGJQxSdf1LujS7wfVSkCCxUFts/AIggndsIMTrtmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3AOgw8EHl3N16hL1EDIfltGfoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWUyOTgyMjktZjZhOS0z MjQ0LThlOWQtYjczN2VhMjYxNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpYcvkLQDeso2xQSQBzEAQz4giWL668Og56/URP7hJX0DbgvYIk j3fMDLVvp6BMSltlW5xzSfhP3z6axGN7X1QlutwEhMKe7LZuVRKR0zC7VbIL7Gz9 /omVRfuU8jHCMfZ6I0Cfoc9IQXb83tjeYJxL/qO/si/E8JW+3S9zixys73gf2rUU 43TxWzkRV51ec6K9eTE1Vv7VEkpdncTUFu1HPbliOdtvo2VEn03s3cOrYweVzL/c RbH5pYsaJ8OWG7mG/3b+ASJITXPTpsXBTBLJwWknHx0TpSkCXWito1/a8fDkNt8U HSDM2dLSoB3xjhtN+4OV1j9PqnZ58jvPzw8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:53 2026 by rpki-client