$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2450ec45-93e3-310b-8543-e74a259f7d41.roa File: 2450ec45-93e3-310b-8543-e74a259f7d41.roa (raw, json) Hash identifier: pnEeanGptzPLpOwMa7oPHBNg5L9qZpVrg1gZUyPIi3g= Subject key identifier: C2:B2:F7:63:13:6F:55:B1:D5:6A:78:88:B2:92:BA:01:05:3E:9C:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8E6B6B5C53527C916D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2450ec45-93e3-310b-8543-e74a259f7d41.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396582 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8e:6b:6b:5c:53:52:7c:91:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5731c7bd-8534-41d3-b669-a2f538bf115d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:2a:34:c9:42:41:5b:31:bb:fd:56:d3:05: 21:82:a5:92:09:8c:4a:4e:a4:66:d5:3c:21:c6:ad: 0b:d4:57:5b:27:f5:29:cb:a8:2f:0f:2a:66:c5:83: e4:53:5b:7c:07:aa:d3:bb:31:a4:9c:73:02:11:08: e9:e3:d0:35:70:12:9b:3d:36:ce:38:98:c4:96:fe: 4a:06:27:10:65:90:86:5f:33:38:5b:e0:15:7e:d8: 10:c9:53:45:c0:ac:c4:63:53:50:76:c8:45:f2:77: 25:98:33:c8:04:16:ca:77:82:1f:86:7d:8c:cd:84: 06:b9:c4:98:d4:13:79:21:e0:3a:d1:24:08:26:fb: f6:02:7a:f7:ab:c5:60:50:f6:d6:33:28:be:26:f5: 9b:67:02:5a:37:88:f0:9f:a9:44:a1:9f:29:74:6c: e5:84:f8:e6:08:65:32:93:bd:ab:79:d0:12:e3:bf: d5:5d:99:2f:13:06:a2:9b:e2:e0:44:02:f9:6b:b6: 57:45:b1:05:71:62:fe:96:79:c8:3a:fe:7f:f4:99: c8:6c:9e:11:a7:b8:44:ac:39:00:b8:ee:cb:27:14: 49:11:23:10:4c:e5:de:31:c3:52:8a:78:7f:b5:ed: d2:95:10:2d:be:ea:7c:e4:be:a8:bd:74:ec:71:60: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:F7:63:13:6F:55:B1:D5:6A:78:88:B2:92:BA:01:05:3E:9C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2450ec45-93e3-310b-8543-e74a259f7d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:59:d3:51:f9:12:c3:ec:e1:f9:c9:23:fc:10:90:ce:fc:1f: 4f:b2:d6:db:6f:70:a3:99:a7:cc:92:08:f2:1b:cc:6a:8d:01: da:04:7b:d3:ef:da:4e:5f:66:eb:68:73:de:99:d5:78:00:de: b5:64:94:a2:8a:95:e2:c2:ca:6a:a4:e4:63:14:bd:39:06:13: 90:3a:33:5a:42:32:06:e5:3f:f8:a7:47:c1:79:3c:c3:71:83: e7:a5:89:7d:23:61:22:62:69:11:39:ec:e4:79:06:12:66:55: 8b:b8:6e:df:97:3e:85:eb:e8:8c:db:a7:eb:e1:c8:73:a1:1b: 26:1d:af:18:b6:db:d3:53:4b:4a:a8:43:7e:1b:51:5f:4b:34: af:4b:1e:95:55:78:87:73:b0:a3:96:9d:bb:2e:7f:36:ae:2b: b6:0f:98:ec:07:51:ff:67:ca:6e:0c:18:16:bb:ce:5c:9c:38: 02:a7:11:64:82:c7:b4:68:7e:cf:e0:e7:e0:82:ac:1f:77:1d: 9c:c5:ee:8e:ea:33:58:eb:0d:ba:f8:c1:2b:02:55:49:cb:6a: 7b:51:d6:06:fb:38:20:b0:4e:8b:36:90:af:a2:fe:a6:05:17: 7e:8b:af:12:09:7d:11:7e:93:84:e9:c0:38:09:47:88:b1:ae: 67:e4:e4:cd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo5ra1xTUnyRbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTczMWM3YmQtODUzNC00MWQzLWI2NjktYTJmNTM4YmYxMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyUqNMlCQVsxu/1W0wUhgqWSCYxKTqRm1Twh xq0L1FdbJ/Upy6gvDypmxYPkU1t8B6rTuzGknHMCEQjp49A1cBKbPTbOOJjElv5K BicQZZCGXzM4W+AVftgQyVNFwKzEY1NQdshF8nclmDPIBBbKd4Ifhn2MzYQGucSY 1BN5IeA60SQIJvv2Anr3q8VgUPbWMyi+JvWbZwJaN4jwn6lEoZ8pdGzlhPjmCGUy k72redAS47/VXZkvEwaim+LgRAL5a7ZXRbEFcWL+lnnIOv5/9JnIbJ4Rp7hErDkA uO7LJxRJESMQTOXeMcNSinh/te3SlRAtvup85L6ovXTscWBf5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMKy92MTb1Wx1Wp4iLKSugEFPpweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQ1MGVjNDUtOTNlMy0z MTBiLTg1NDMtZTc0YTI1OWY3ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA6WdNR+RLD7OH5ySP8EJDO/B9Pstbbb3CjmafM kgjyG8xqjQHaBHvT79pOX2braHPemdV4AN61ZJSiipXiwspqpORjFL05BhOQOjNa QjIG5T/4p0fBeTzDcYPnpYl9I2EiYmkROezkeQYSZlWLuG7flz6F6+iM26fr4chz oRsmHa8YttvTU0tKqEN+G1FfSzSvSx6VVXiHc7Cjlp27Ln82riu2D5jsB1H/Z8pu DBgWu85cnDgCpxFkgse0aH7P4Ofggqwfdx2cxe6O6jNY6w26+MErAlVJy2p7UdYG +zggsE6LNpCvov6mBRd+i68SCX0RfpOE6cA4CUeIsa5n5OTN -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:56 2026 by rpki-client