$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa File: 29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa (raw, json) Hash identifier: 2hDAWpDh5uPkjaGobL0e8fNz2sy3cC3uw1ExrJKNHSo= Subject key identifier: 9B:85:64:E9:F9:13:1C:82:3B:5C:40:20:DE:C9:B5:1B:AB:7C:1F:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B2029C6D90B2815351D4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396602 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:02:9c:6d:90:b2:81:53:51:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=7eef73eb-6c96-43e0-9a8c-510e4a172aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:fb:3e:21:29:1a:da:8d:e6:4b:69:5e:a3: 85:14:cb:de:45:86:fb:fd:51:5a:93:56:ac:64:21: f6:89:7f:b8:84:3d:86:3b:0a:cc:fb:9d:ba:af:16: 2a:24:a5:ea:05:e0:78:5e:33:f7:46:b5:34:07:26: 91:eb:a4:41:09:ea:ae:46:69:3b:a6:d2:72:69:a7: 8d:24:0d:33:41:3a:f3:56:bd:f5:48:81:b6:3b:6f: d2:af:ec:b4:1e:d3:c4:84:36:43:75:cc:5c:1f:b2: a7:d6:a3:c6:7f:ad:ee:7c:51:ff:a6:b6:41:b9:ea: ae:49:d6:8c:47:11:b8:85:24:ae:af:eb:9d:d5:45: f8:5b:7f:d2:a4:42:11:17:f6:36:92:34:e4:71:9b: 26:9b:93:29:0a:cc:a6:83:83:18:07:3e:93:ee:e1: 63:d3:e3:22:3e:cf:9a:91:61:b5:24:16:a5:c7:b6: d5:6f:8d:2c:3b:1f:ea:06:c5:a4:5f:be:64:dd:08: 0a:7f:af:9a:c2:2e:81:cc:dd:10:8f:a6:ec:79:8a: 60:2d:fc:31:b3:6c:f0:78:f3:d7:79:ff:11:21:e3: 8d:de:1c:fa:c6:62:7c:4d:8d:ff:a7:6c:0a:30:e1: bd:f4:1e:06:e4:cd:05:d3:1c:6e:45:25:0f:04:37: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:64:E9:F9:13:1C:82:3B:5C:40:20:DE:C9:B5:1B:AB:7C:1F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29eb6c09-6600-3649-b1e3-5f14c35f9df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:95:58:4c:98:bb:64:22:d5:2e:59:97:61:72:5e:e3:6c:6a: 09:d7:96:1d:f5:af:d5:09:a0:02:8e:c6:86:24:d7:5c:ee:4d: dc:53:1b:08:17:f0:27:44:e9:d2:3a:ce:77:6f:b8:c5:07:9c: f6:8a:49:9b:8d:7a:34:de:e4:ba:65:6c:12:c4:fc:39:01:da: fe:96:0a:dc:ab:90:cb:35:b1:96:66:e6:b0:02:d1:02:e8:ad: 7e:44:24:6e:34:5a:9e:4c:b1:de:c9:67:bf:e3:cf:d4:b1:d9: 10:e7:d2:f8:38:02:32:a4:81:2d:a5:49:5d:08:88:4e:22:a5: c0:c1:ec:b4:68:10:bd:55:65:07:bb:bc:6e:47:88:b8:2e:4f: fb:95:b7:03:2d:c6:1d:17:d9:1d:cc:9b:34:2b:f5:99:c1:f9: 43:71:0c:4d:f3:79:ea:74:34:66:72:53:20:41:49:3a:5d:b1: 4d:9a:35:52:bf:59:4b:03:64:16:26:2f:49:32:8f:85:d4:dc: 10:1e:c7:15:23:7a:86:f4:ba:df:d5:26:7a:4f:70:cc:20:52: 4b:f4:0f:68:79:ce:de:09:da:7e:7f:9c:3a:b9:f4:5b:8f:20: 01:9a:da:86:05:40:ff:9b:04:d9:4f:d4:74:54:75:2c:df:f8: ad:02:6a:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bICnG2QsoFTUdQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk N2VlZjczZWItNmM5Ni00M2UwLTlhOGMtNTEwZTRhMTcyYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TP7PiEpGtqN5ktpXqOFFMveRYb7/VFak1as ZCH2iX+4hD2GOwrM+526rxYqJKXqBeB4XjP3RrU0ByaR66RBCequRmk7ptJyaaeN JA0zQTrzVr31SIG2O2/Sr+y0HtPEhDZDdcxcH7Kn1qPGf63ufFH/prZBuequSdaM RxG4hSSur+ud1UX4W3/SpEIRF/Y2kjTkcZsmm5MpCsymg4MYBz6T7uFj0+MiPs+a kWG1JBalx7bVb40sOx/qBsWkX75k3QgKf6+awi6BzN0Qj6bseYpgLfwxs2zwePPX ef8RIeON3hz6xmJ8TY3/p2wKMOG99B4G5M0F0xxuRSUPBDcErQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJuFZOn5ExyCO1xAIN7JtRurfB+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjllYjZjMDktNjYwMC0z NjQ5LWIxZTMtNWYxNGMzNWY5ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABiVWEyYu2Qi1S5Zl2FyXuNsagnXlh31r9UJoAKOxoYk11zuTdxT GwgX8CdE6dI6zndvuMUHnPaKSZuNejTe5LplbBLE/DkB2v6WCtyrkMs1sZZm5rAC 0QLorX5EJG40Wp5Msd7JZ7/jz9Sx2RDn0vg4AjKkgS2lSV0IiE4ipcDB7LRoEL1V ZQe7vG5HiLguT/uVtwMtxh0X2R3MmzQr9ZnB+UNxDE3zeep0NGZyUyBBSTpdsU2a NVK/WUsDZBYmL0kyj4XU3BAexxUjeob0ut/VJnpPcMwgUkv0D2h5zt4J2n5/nDq5 9FuPIAGa2oYFQP+bBNlP1HRUdSzf+K0CahE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:06 2026 by rpki-client