$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa File: 21a4ea39-0e65-3c46-9645-6a40d2e40110.roa (raw, json) Hash identifier: wm+10Bd3b/xnWkm+5NK972HGVa+cZYE8g17RR9qeDLY= Subject key identifier: D4:EF:33:9A:EF:BB:7C:FB:87:D3:00:0D:F5:E0:7B:53:FF:DD:14:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A55F85FBBF21EEDD09980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 397203 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:55:f8:5f:bb:f2:1e:ed:d0:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=56c99795-66a6-468e-b295-bc586f3f88a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:af:a2:38:bc:16:a0:f9:c0:7c:17:7b:a8: 20:89:5c:85:0c:00:2c:a7:f9:42:ef:42:29:c7:95: f2:5d:51:ae:3a:6f:63:07:3b:a5:16:6c:81:8c:cd: bd:d6:ff:86:bc:c2:a7:64:23:71:ce:23:e3:97:72: 02:cb:40:12:2d:4d:80:c2:5f:27:93:37:3c:88:bb: 52:fc:99:49:97:62:9b:42:48:54:cc:ba:ef:9b:65: a9:c3:10:88:86:5a:26:59:30:a3:ca:99:4d:5a:61: 07:c7:15:88:87:1c:dc:0d:c1:9d:ef:45:11:83:08: 52:b8:f2:0a:af:29:87:2e:2a:35:9a:02:5f:56:b4: 1e:a9:94:89:67:0f:68:f5:7f:5b:d8:73:21:4c:46: af:e3:a3:b7:cb:5f:62:b0:af:08:f9:bc:45:50:91: 39:61:6c:12:80:2b:d1:01:d9:18:7b:cc:15:24:41: 3e:d8:42:f3:b5:15:b3:56:76:b9:d6:6a:89:49:72: 4d:b0:5b:29:f0:45:90:33:e2:77:38:46:47:d1:21: 85:28:cf:5f:62:da:a9:e6:16:4c:ba:53:6a:d4:cb: c3:f2:c5:16:78:b3:63:d7:9e:22:fe:47:4a:2c:58: 01:15:ed:23:d4:f2:54:88:5c:37:b6:38:bd:54:02: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:33:9A:EF:BB:7C:FB:87:D3:00:0D:F5:E0:7B:53:FF:DD:14:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21a4ea39-0e65-3c46-9645-6a40d2e40110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c3:8e:09:7a:24:d0:50:c2:85:7b:d3:50:5c:f9:ee:32:0f: 4f:3d:7f:23:57:7f:8a:96:df:f4:fd:b2:ec:7e:df:f3:f1:3f: 8c:e0:f0:48:00:a3:4c:ca:b2:bd:7c:f4:ff:99:18:6a:cb:b4: 3c:ff:59:49:2c:09:87:c4:c7:d5:d4:79:4c:db:bc:17:e4:1c: e5:22:4c:98:f6:ed:fa:a0:2b:5d:9d:55:f4:a9:a2:6c:8e:e7: 61:31:99:a6:68:43:fc:55:be:a4:56:01:17:d7:ac:c2:41:8e: f4:f7:5e:d0:bf:b0:53:23:21:fc:e6:b9:16:91:1e:59:27:5e: d3:55:ca:25:79:19:aa:1c:2f:88:f6:08:83:a3:a3:a9:28:fd: 35:e2:61:12:64:54:cf:ca:bb:8c:39:74:02:70:4d:4c:2a:d0: aa:61:4c:32:80:ec:7b:19:40:57:ec:77:f9:c7:5d:52:7d:92: d0:f0:dc:df:3f:6d:06:bc:32:d7:7a:44:69:c5:7f:08:56:b2: 1a:ac:5f:47:68:54:67:04:2b:c4:d8:21:10:e1:57:ab:b5:8b: b6:a2:4c:17:e2:80:88:36:d5:9e:58:0d:d0:eb:27:a8:1c:1c: 1c:d9:a5:ca:e0:ca:b1:fb:dc:8c:11:3d:41:ad:b3:ce:a9:26: e8:2a:86:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jelX4X7vyHu3QmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTZjOTk3OTUtNjZhNi00NjhlLWIyOTUtYmM1ODZmM2Y4OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOqvoji8FqD5wHwXe6ggiVyFDAAsp/lC70Ip x5XyXVGuOm9jBzulFmyBjM291v+GvMKnZCNxziPjl3ICy0ASLU2Awl8nkzc8iLtS /JlJl2KbQkhUzLrvm2WpwxCIhlomWTCjyplNWmEHxxWIhxzcDcGd70URgwhSuPIK rymHLio1mgJfVrQeqZSJZw9o9X9b2HMhTEav46O3y19isK8I+bxFUJE5YWwSgCvR AdkYe8wVJEE+2ELztRWzVna51mqJSXJNsFsp8EWQM+J3OEZH0SGFKM9fYtqp5hZM ulNq1MvD8sUWeLNj154i/kdKLFgBFe0j1PJUiFw3tji9VAIJUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTvM5rvu3z7h9MADfXge1P/3RTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFhNGVhMzktMGU2NS0z YzQ2LTk2NDUtNmE0MGQyZTQwMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7Djgl6JNBQwoV701Bc+e4yD089fyNXf4qW3/T9sux+3/PxP4zg 8EgAo0zKsr189P+ZGGrLtDz/WUksCYfEx9XUeUzbvBfkHOUiTJj27fqgK12dVfSp omyO52ExmaZoQ/xVvqRWARfXrMJBjvT3XtC/sFMjIfzmuRaRHlknXtNVyiV5Gaoc L4j2CIOjo6ko/TXiYRJkVM/Ku4w5dAJwTUwq0KphTDKA7HsZQFfsd/nHXVJ9ktDw 3N8/bQa8Mtd6RGnFfwhWshqsX0doVGcEK8TYIRDhV6u1i7aiTBfigIg21Z5YDdDr J6gcHBzZpcrgyrH73IwRPUGts86pJugqhgo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:25 2026 by rpki-client