$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa File: 2b829613-62cd-3ed2-8ad3-7b36febc6235.roa (raw, json) Hash identifier: GseTVdlEM6OT+pGfWh/yAmXsJcolkqV1tOK0gqf/L9g= Subject key identifier: F2:0B:80:A9:C0:0B:37:1B:BD:CA:47:84:6B:BD:F4:00:BF:9E:95:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2379FB71047B4F4E232296C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396565 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fb:71:04:7b:4f:4e:23:22:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d83c10ec-ddce-4a40-a3c4-4f3618beef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:f8:25:aa:d4:79:0a:10:77:1d:90:ca:10: b4:1f:88:60:c0:0e:9e:f7:63:65:fa:26:bf:28:83: 0c:44:5e:cb:3c:b2:93:76:fd:75:eb:3f:fb:e8:51: 02:18:47:0e:c4:81:5e:d2:16:fb:9e:27:57:66:86: 74:6b:22:38:7e:d2:a3:13:20:85:f9:b6:e3:88:e9: 93:c2:d8:25:6f:ad:34:ce:a8:3c:97:cf:1f:93:53: 96:41:15:c6:5d:41:4f:48:90:99:45:32:69:c4:4e: 05:15:c6:79:cd:f2:1d:ef:9a:ea:f7:ef:51:75:a7: eb:85:19:53:07:e5:fa:d4:e3:7a:c6:4c:ad:31:b9: 42:a0:fa:6b:db:27:75:39:46:5b:90:71:1e:84:f5: 66:ba:1e:95:0f:76:db:c6:8f:9b:06:e5:b7:93:c6: 5b:7a:b9:37:89:fb:cd:ef:3d:33:e8:19:80:f2:d0: d4:dc:cd:b1:7e:f6:9a:d6:95:08:1a:0e:97:c8:d3: c9:96:51:66:a3:c9:1a:1c:0b:5b:7f:6d:aa:04:78: 28:91:87:a2:04:07:19:df:08:9a:83:ff:5e:0e:bd: 20:41:52:3b:de:c3:e0:c3:9c:a8:e7:0e:c8:1d:48: 12:c6:7d:83:8c:a9:11:31:13:3f:95:c1:23:3d:e8: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:80:A9:C0:0B:37:1B:BD:CA:47:84:6B:BD:F4:00:BF:9E:95:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e0:9a:04:1b:8e:f4:0b:b7:7c:2d:f8:84:d8:c4:16:f4:15: 94:72:81:74:78:29:c9:2e:a5:94:fa:49:c2:c0:9b:3c:90:e4: 8c:e3:e8:13:7f:d8:d4:9a:ad:cd:eb:09:ae:87:22:9d:83:4a: ee:d2:46:91:e0:62:05:a5:65:d6:77:d7:e9:69:8a:d6:c1:e4: 1f:95:fe:62:28:a9:b7:fb:bf:70:44:ab:3d:5c:6d:a1:68:f6: f2:29:34:f1:ef:c1:ff:41:2d:12:c1:fd:fc:91:3d:f9:f0:e1: 22:79:1e:95:a8:65:e7:fb:23:1d:80:c1:8b:af:30:97:32:9f: ee:35:28:d1:46:47:98:09:aa:63:25:a3:72:f3:ad:bf:c3:f7: 75:ea:90:4d:99:21:5f:5f:4d:92:58:ae:e9:77:ed:7d:77:d3: fb:5f:a3:4b:f7:49:80:3a:76:7f:25:f3:02:8f:cb:f8:17:36: bb:e1:36:e7:56:a4:10:da:0d:2a:50:c4:16:55:2d:fc:c2:2b: ef:40:af:a1:c0:48:4c:a6:98:cb:f7:c1:f2:c0:33:d2:8b:54: f0:a5:e1:57:f8:91:95:d4:ef:3c:13:a3:e9:7c:47:a6:91:b6: d3:6a:6a:ec:e4:91:4e:ea:82:9f:09:b5:50:fa:36:81:f7:59: 1e:75:22:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeftxBHtPTiMilsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDgzYzEwZWMtZGRjZS00YTQwLWEzYzQtNGYzNjE4YmVlZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhD4JarUeQoQdx2QyhC0H4hgwA6e92Nl+ia/ KIMMRF7LPLKTdv116z/76FECGEcOxIFe0hb7nidXZoZ0ayI4ftKjEyCF+bbjiOmT wtglb600zqg8l88fk1OWQRXGXUFPSJCZRTJpxE4FFcZ5zfId75rq9+9RdafrhRlT B+X61ON6xkytMblCoPpr2yd1OUZbkHEehPVmuh6VD3bbxo+bBuW3k8Zberk3ifvN 7z0z6BmA8tDU3M2xfvaa1pUIGg6XyNPJllFmo8kaHAtbf22qBHgokYeiBAcZ3wia g/9eDr0gQVI73sPgw5yo5w7IHUgSxn2DjKkRMRM/lcEjPejMXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPILgKnACzcbvcpHhGu99AC/npVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4Mjk2MTMtNjJjZC0z ZWQyLThhZDMtN2IzNmZlYmM2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvgmgQbjvQLt3wt+ITYxBb0FZRygXR4KckupZT6ScLAmzyQ5Izj 6BN/2NSarc3rCa6HIp2DSu7SRpHgYgWlZdZ31+lpitbB5B+V/mIoqbf7v3BEqz1c baFo9vIpNPHvwf9BLRLB/fyRPfnw4SJ5HpWoZef7Ix2AwYuvMJcyn+41KNFGR5gJ qmMlo3Lzrb/D93XqkE2ZIV9fTZJYrul37X130/tfo0v3SYA6dn8l8wKPy/gXNrvh NudWpBDaDSpQxBZVLfzCK+9Ar6HASEymmMv3wfLAM9KLVPCl4Vf4kZXU7zwTo+l8 R6aRttNqauzkkU7qgp8JtVD6NoH3WR51Itk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:09 2026 by rpki-client