$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa File: 21fab1d9-b947-3e30-860f-7dc7f120d34d.roa (raw, json) Hash identifier: gl/yrbQjSSv1zRnhPPwxchg1T41UiA4vRU8FOX7f+S4= Subject key identifier: 3E:49:C7:F5:DE:DC:09:3C:15:67:5E:34:C9:85:87:8C:1A:B9:C4:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8AA2A8344979E60947C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396596 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8a:a2:a8:34:49:79:e6:09:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9908b0a4-5d09-435d-9e61-9344b1a38ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:48:1d:07:79:69:c0:8d:c2:f7:d1:d1:fa: 91:38:29:9c:ab:35:63:f7:0d:ef:bd:8a:3f:54:a5: c2:3f:65:4f:44:e3:a3:1f:fd:fb:52:b2:17:bc:5e: 4f:35:f0:12:71:8d:18:1d:a4:5d:8a:0b:a4:58:b1: 9c:5c:f3:25:b8:60:37:39:d8:03:62:01:b6:5a:39: 45:8e:50:e6:4c:2d:32:31:23:14:02:2d:ee:0c:53: 7e:90:bb:e7:41:fe:c8:95:fb:14:77:9e:21:59:03: ed:f2:56:ca:8a:c2:ca:8d:ff:55:fb:8c:8d:5e:e4: d7:f1:58:9d:7d:71:0f:06:29:7b:49:0e:36:98:a6: 54:e0:46:90:2c:fa:e8:f9:77:4b:0e:c9:db:b7:d2: c5:9e:1a:08:00:4f:c1:e7:c3:b4:94:a4:d1:be:b2: 33:f9:6c:41:de:66:d4:90:17:ba:8b:08:b6:0c:a5: f5:00:cf:33:10:eb:b9:8d:b8:7a:6a:13:62:9c:9a: ac:5e:38:bf:c2:e0:31:59:c3:dc:35:fe:7f:5a:8e: c1:43:71:04:f1:e8:b0:54:d9:4e:ce:a5:34:12:88: aa:9f:91:53:2f:b9:e7:8e:97:3a:4f:eb:8c:2b:23: 67:0e:b5:4f:3f:a5:66:45:0b:4f:5f:52:fc:63:a0: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:49:C7:F5:DE:DC:09:3C:15:67:5E:34:C9:85:87:8C:1A:B9:C4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0e:d9:3f:4c:bd:46:84:cd:b4:8d:28:fd:eb:34:91:b7:eb: 8b:c5:a4:07:5e:fd:65:99:65:ba:46:30:9d:59:a2:40:a9:8a: 4b:76:24:58:71:e6:3c:75:a5:04:ba:f6:67:cc:64:64:2f:a0: 82:de:75:fb:fa:d4:67:d5:ab:ea:81:c3:c2:0a:04:97:f7:4b: f3:8c:df:b6:b0:de:6a:c3:5f:05:cf:00:c6:d5:ba:f4:e4:86: bc:87:d6:37:8a:d2:21:d9:bf:f5:57:7e:09:b1:ab:93:14:f8: c3:a9:d7:d7:47:72:db:f0:b4:03:58:6f:33:c9:2a:2a:11:00: 4b:72:23:83:25:ac:e8:9d:de:b6:87:2d:96:4d:1b:0f:a2:70: f3:d7:ce:d8:28:90:dd:fe:c7:14:a7:2b:1c:b4:05:a1:37:a6: e6:f9:de:c1:bb:9b:c2:97:ae:91:cc:46:d0:62:5e:bd:da:3d: ff:73:a2:e9:19:a2:8c:ba:91:73:76:6b:c0:d1:6b:65:d9:a5: d6:f0:06:cd:eb:7a:d9:04:7f:dd:f2:a7:47:c7:03:e4:1b:36: 75:eb:4f:92:d7:4b:bb:d6:7f:74:41:75:c3:8c:f7:41:f7:6a: b9:20:a9:52:71:ee:3c:93:92:ca:10:fa:9b:2c:a3:25:2d:a1: 1d:bd:49:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoqiqDRJeeYJR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTkwOGIwYTQtNWQwOS00MzVkLTllNjEtOTM0NGIxYTM4ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ZIHQd5acCNwvfR0fqROCmcqzVj9w3vvYo/ VKXCP2VPROOjH/37UrIXvF5PNfAScY0YHaRdigukWLGcXPMluGA3OdgDYgG2WjlF jlDmTC0yMSMUAi3uDFN+kLvnQf7IlfsUd54hWQPt8lbKisLKjf9V+4yNXuTX8Vid fXEPBil7SQ42mKZU4EaQLPro+XdLDsnbt9LFnhoIAE/B58O0lKTRvrIz+WxB3mbU kBe6iwi2DKX1AM8zEOu5jbh6ahNinJqsXji/wuAxWcPcNf5/Wo7BQ3EE8eiwVNlO zqU0Eoiqn5FTL7nnjpc6T+uMKyNnDrVPP6VmRQtPX1L8Y6DDvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD5Jx/Xe3Ak8FWdeNMmFh4waucTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFmYWIxZDktYjk0Ny0z ZTMwLTg2MGYtN2RjN2YxMjBkMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjDtk/TL1GhM20jSj96zSRt+uLxaQHXv1lmWW6 RjCdWaJAqYpLdiRYceY8daUEuvZnzGRkL6CC3nX7+tRn1avqgcPCCgSX90vzjN+2 sN5qw18FzwDG1br05Ia8h9Y3itIh2b/1V34JsauTFPjDqdfXR3Lb8LQDWG8zySoq EQBLciODJazond62hy2WTRsPonDz187YKJDd/scUpysctAWhN6bm+d7Bu5vCl66R zEbQYl692j3/c6LpGaKMupFzdmvA0Wtl2aXW8AbN63rZBH/d8qdHxwPkGzZ160+S 10u71n90QXXDjPdB92q5IKlSce48k5LKEPqbLKMlLaEdvUnT -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:02 2026 by rpki-client