$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37dd2005-bb78-3477-97de-c0bc72d59b14.roa File: 37dd2005-bb78-3477-97de-c0bc72d59b14.roa (raw, json) Hash identifier: RBtZ80df8IlYGiFmaSjiXBm0k4HvVWPD7d/7Bm2wci8= Subject key identifier: 38:9B:44:30:B1:25:BC:A4:69:56:0A:FA:5A:E2:74:EA:DF:5B:0E:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A6C5D19ED8DFA493296C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37dd2005-bb78-3477-97de-c0bc72d59b14.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 7342 IP address blocks: 2620:74:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:6c:5d:19:ed:8d:fa:49:32:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=553d01ef-3be3-47c4-a85b-9fe4c2043e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:ab:f5:31:de:15:a0:b5:cb:0e:22:12:9e: 02:44:78:d3:c5:27:b5:d9:1e:c7:99:97:29:dd:b9: 5c:90:a8:1b:1a:0a:07:40:cf:e2:79:58:44:d3:14: c7:78:3f:66:0e:00:88:25:f7:7a:30:a3:58:6d:1d: 83:2a:ac:8b:d2:27:7d:40:e5:a5:14:a4:04:be:ff: 9a:aa:2c:d0:c9:50:37:27:c9:8b:d0:3b:5b:1d:67: 4a:b8:8a:c1:de:c1:ec:50:86:b4:4c:ac:60:7d:4b: bd:06:70:b0:0a:11:4e:f4:7e:4a:42:d9:b8:e9:73: a7:0e:c3:43:2d:1c:66:7a:da:a3:08:2a:cd:64:d9: e9:bb:6f:5c:1b:b8:41:4f:82:22:44:5a:14:a9:14: 6b:2d:18:34:40:9d:a5:f4:f4:1c:32:ef:8f:96:46: bc:b6:6f:ea:63:26:ef:42:bb:79:a1:3c:ef:d1:c0: 48:77:9e:3f:23:7c:cb:46:c1:55:ac:18:c9:cb:0b: 52:c9:a3:b5:e4:62:f6:e5:50:e7:12:ae:33:94:1f: bc:06:cd:4b:b7:84:04:7c:a1:63:31:e7:4c:b3:15: 8b:3d:1b:54:5c:5b:f0:a6:74:85:50:30:8c:e8:12: 23:b5:a6:cb:38:57:0b:97:d9:61:48:99:8c:5d:38: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9B:44:30:B1:25:BC:A4:69:56:0A:FA:5A:E2:74:EA:DF:5B:0E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37dd2005-bb78-3477-97de-c0bc72d59b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:91:02:6a:54:ac:a2:24:3e:fc:56:fb:48:77:77:76:37: f1:cb:13:44:3e:8b:96:ea:73:0d:22:ee:42:a7:3f:2c:a4:c7: b0:2f:f6:87:7f:5e:e2:71:b1:4a:bd:27:27:ec:e8:7d:41:c6: 19:f4:ec:77:57:a0:c6:7a:d1:c7:de:dc:d4:f9:9c:54:02:91: 36:3d:93:09:f1:9f:75:e6:df:51:79:6e:ba:2a:59:76:f6:29: 89:5d:45:b2:ea:dd:1a:c7:8c:5b:90:53:0e:c5:d5:b7:37:fb: 8b:58:72:85:9b:ba:d3:98:3b:a8:4f:81:b1:7c:17:d7:df:95: f0:e6:2c:65:61:42:2c:37:b9:90:be:ff:e5:bd:15:1e:69:f1: ab:da:7d:2f:fd:f7:c4:1b:53:d2:aa:04:f7:93:60:ec:c3:a8: 2f:bf:3e:c0:76:22:37:2f:92:e1:cb:16:c2:ba:91:e2:e7:01: 50:c5:cf:3a:25:e1:72:b9:d2:a2:fa:b5:40:26:37:90:82:09: 03:f1:ef:7b:6a:fa:b6:29:b0:1b:54:41:72:93:a9:7b:49:c1: c2:3d:91:2a:77:a7:1a:20:5d:8f:79:a8:a7:b1:cf:5b:a7:0c: 15:f9:7a:02:b5:9a:3e:f3:13:95:e4:84:77:38:8a:4a:b6:94: 85:42:3d:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jemxdGe2N+kkylsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTUzZDAxZWYtM2JlMy00N2M0LWE4NWItOWZlNGMyMDQzZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnur9THeFaC1yw4iEp4CRHjTxSe12R7HmZcp 3blckKgbGgoHQM/ieVhE0xTHeD9mDgCIJfd6MKNYbR2DKqyL0id9QOWlFKQEvv+a qizQyVA3J8mL0DtbHWdKuIrB3sHsUIa0TKxgfUu9BnCwChFO9H5KQtm46XOnDsND LRxmetqjCCrNZNnpu29cG7hBT4IiRFoUqRRrLRg0QJ2l9PQcMu+Plka8tm/qYybv Qrt5oTzv0cBId54/I3zLRsFVrBjJywtSyaO15GL25VDnEq4zlB+8Bs1Lt4QEfKFj MedMsxWLPRtUXFvwpnSFUDCM6BIjtabLOFcLl9lhSJmMXTiJeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDibRDCxJbykaVYK+lridOrfWw5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzdkZDIwMDUtYmI3OC0z NDc3LTk3ZGUtYzBiYzcyZDU5YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABT2kQJqVKyiJD78VvtId3d2N/HLE0Q+i5bqcw0i7kKnPyykx7Av 9od/XuJxsUq9Jyfs6H1Bxhn07HdXoMZ60cfe3NT5nFQCkTY9kwnxn3Xm31F5broq WXb2KYldRbLq3RrHjFuQUw7F1bc3+4tYcoWbutOYO6hPgbF8F9fflfDmLGVhQiw3 uZC+/+W9FR5p8avafS/998QbU9KqBPeTYOzDqC+/PsB2IjcvkuHLFsK6keLnAVDF zzol4XK50qL6tUAmN5CCCQPx73tq+rYpsBtUQXKTqXtJwcI9kSp3pxogXY95qKex z1unDBX5egK1mj7zE5XkhHc4ikq2lIVCPdI= -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:31 2026 by rpki-client