$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa File: 37017879-1cd1-3a73-b030-37e4f4fed693.roa (raw, json) Hash identifier: alL0+5453Zd6GqNy9GsJWqejKFk/qjKbOD6xtJ9+Fgc= Subject key identifier: 67:54:BE:20:40:66:2E:09:0C:68:AF:A1:FF:51:87:9E:BB:CA:55:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091262D2F741059AFAA54940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 25485 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:62:d2:f7:41:05:9a:fa:a5:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=2b91e107-ac16-4a31-81ef-5d59207489f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:ae:55:d2:7c:63:28:72:d3:3b:78:29:b6: b1:87:3a:6a:af:84:b4:b8:32:6f:47:90:9b:91:10: 53:91:ee:a5:4b:fb:24:06:96:dd:bc:dc:9f:57:28: 26:6b:68:e4:56:13:49:5f:f7:de:06:cf:ea:7c:40: 0c:2c:17:89:ba:61:2a:13:1b:be:8f:c8:7a:26:a2: b3:54:2c:e0:40:f5:66:a2:da:fd:4f:09:98:8d:ef: 95:ef:78:ba:f7:9d:f7:04:9d:eb:99:94:e7:2c:c4: d8:ae:ab:2e:b9:09:9a:ed:6a:2a:50:58:7d:de:a6: 57:71:92:36:5a:81:df:61:d8:58:af:b8:85:54:40: 4e:93:03:15:93:66:79:64:9c:cd:90:4f:bc:70:1c: 51:12:75:23:85:97:f7:7c:1b:48:59:33:37:db:c1: 79:8c:e9:c6:27:b2:8d:4c:23:9f:bd:3f:b7:31:38: ba:cc:54:22:b7:d5:d8:cd:20:a3:df:e9:df:a5:46: e0:7d:9c:4c:19:45:d1:60:66:a8:57:a1:9e:f0:ab: 8e:d9:b3:af:e1:96:90:87:94:c8:a8:88:35:90:91: 29:ef:d4:7f:4b:bd:de:8b:18:4d:f6:c4:65:bc:4c: a1:ae:fe:62:a6:a5:37:50:9e:f7:dd:3d:6c:cd:8e: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:BE:20:40:66:2E:09:0C:68:AF:A1:FF:51:87:9E:BB:CA:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37017879-1cd1-3a73-b030-37e4f4fed693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6a:79:86:60:b3:42:26:4d:10:d6:1f:3f:20:91:1e:a2:e2: 84:05:c9:37:76:d1:9d:4f:4a:38:5d:35:3a:64:65:99:fa:0a: e7:4b:ec:8a:62:ef:5e:08:e8:c5:e5:da:b0:8e:cd:3a:34:10: f2:e6:ba:43:9e:48:a0:a4:ba:13:76:16:95:e4:c5:00:9e:0f: 5c:c9:12:df:60:b7:bf:cf:27:2c:79:f3:c6:88:1a:86:21:4b: 2d:4d:72:62:ee:5a:c7:47:3c:86:9a:6b:9a:e3:49:41:c5:13: b8:ed:6f:0e:cd:29:46:9c:d2:ca:49:46:e2:58:57:ef:59:66: 3f:67:44:c0:3c:0a:a7:ed:d0:1b:46:6e:d0:97:57:ed:2d:a1: c3:5d:63:bf:34:e4:05:14:3a:16:dc:77:c8:ea:a3:53:82:b8: 13:eb:28:03:cd:14:a4:d3:6f:27:7b:3b:20:7f:a6:88:a7:ca: 63:68:bf:fc:ad:4e:99:70:df:55:59:35:b4:e6:9f:41:21:42: ff:b9:ea:ba:79:9f:73:a4:3a:d5:4b:5a:68:ae:7a:94:ad:ce: 71:db:23:ed:c3:7a:33:15:e6:1f:da:59:c0:d8:30:9b:96:d2: 38:56:0d:77:01:1b:76:97:e5:62:9a:ad:f2:1b:6e:7f:7d:f1: ed:48:c0:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEmLS90EFmvqlSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmI5MWUxMDctYWMxNi00YTMxLTgxZWYtNWQ1OTIwNzQ4OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA+uVdJ8Yyhy0zt4Kbaxhzpqr4S0uDJvR5Cb kRBTke6lS/skBpbdvNyfVygma2jkVhNJX/feBs/qfEAMLBeJumEqExu+j8h6JqKz VCzgQPVmotr9TwmYje+V73i69533BJ3rmZTnLMTYrqsuuQma7WoqUFh93qZXcZI2 WoHfYdhYr7iFVEBOkwMVk2Z5ZJzNkE+8cBxREnUjhZf3fBtIWTM328F5jOnGJ7KN TCOfvT+3MTi6zFQit9XYzSCj3+nfpUbgfZxMGUXRYGaoV6Ge8KuO2bOv4ZaQh5TI qIg1kJEp79R/S73eixhN9sRlvEyhrv5ipqU3UJ733T1szY6nIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdUviBAZi4JDGivof9Rh567ylVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzcwMTc4NzktMWNkMS0z YTczLWIwMzAtMzdlNGY0ZmVkNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1qeYZgs0ImTRDWHz8gkR6i4oQFyTd20Z1PSjhdNTpkZZn6CudL 7Ipi714I6MXl2rCOzTo0EPLmukOeSKCkuhN2FpXkxQCeD1zJEt9gt7/PJyx588aI GoYhSy1NcmLuWsdHPIaaa5rjSUHFE7jtbw7NKUac0spJRuJYV+9ZZj9nRMA8Cqft 0BtGbtCXV+0tocNdY7805AUUOhbcd8jqo1OCuBPrKAPNFKTTbyd7OyB/poinymNo v/ytTplw31VZNbTmn0EhQv+56rp5n3OkOtVLWmiuepStznHbI+3DejMV5h/aWcDY MJuW0jhWDXcBG3aX5WKarfIbbn998e1IwEA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:00 2026 by rpki-client