$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa File: 452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa (raw, json) Hash identifier: ORNz0js98oguhXuZ2MUbvy/f7fwRarg40GB0w/I+6+A= Subject key identifier: A0:3E:8D:5F:3D:DB:9F:A0:5E:F3:80:BB:2F:AC:8B:00:5C:49:41:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA4FD08AEEE356A4E40C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396561 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4f:d0:8a:ee:e3:56:a4:e4:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=cd27942f-cdbe-4048-bda3-732796189b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:ab:a7:29:1d:a0:2c:6b:e8:b7:6f:82:89: 19:01:5b:8c:8d:3e:63:73:73:7d:65:dd:c7:39:f9: 3b:3a:c3:b1:de:f8:36:7d:e9:ce:26:dc:93:12:db: 59:d1:91:35:d4:35:86:e1:b1:b1:75:d1:e1:c7:dd: 31:35:3f:11:c5:0a:b9:38:43:6b:8c:ea:98:43:5f: cf:50:d2:fc:6d:fa:45:b9:f3:1e:d0:b2:86:7e:ab: b7:85:d6:b0:83:3b:c0:93:02:d5:ef:98:77:ee:e3: 60:ad:e1:4f:ba:71:be:94:7e:60:ea:2d:fe:08:bc: dd:3d:3b:71:57:3e:1d:16:a2:7b:84:88:60:f5:3b: 04:9a:93:05:a8:99:b7:2e:83:79:65:a7:17:e1:16: d7:9a:09:e0:e3:c0:92:12:26:b2:da:68:f6:78:b9: 9c:84:5c:43:9f:91:30:82:5e:99:e8:eb:b0:bd:3d: 73:e3:dc:14:5a:d3:a3:c6:62:5a:b6:43:28:4c:a1: f7:47:91:f3:aa:c6:63:ae:da:26:04:0f:c0:1e:97: 60:cd:a7:b4:f3:47:f3:20:ca:31:cb:b5:ee:4d:b8: e8:dd:31:f8:e2:c3:59:13:5b:56:1d:52:86:ee:d9: 71:7f:e7:59:bc:ab:0c:0f:57:f1:aa:aa:1f:15:46: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:8D:5F:3D:DB:9F:A0:5E:F3:80:BB:2F:AC:8B:00:5C:49:41:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cd:23:db:a3:d4:e1:d2:a4:66:9e:98:28:74:0f:83:8e:75: 2a:d7:96:4d:f4:12:f1:56:55:6a:e9:bb:e2:81:98:7f:32:91: 3a:fc:e4:08:3b:50:90:4e:7a:8b:e0:43:c4:5b:eb:22:2a:f6: 65:79:8e:b1:05:70:54:4f:00:e4:60:0d:53:3a:84:8a:fe:0b: b7:65:57:ad:88:2c:aa:b4:09:a4:3c:49:dd:ea:cd:93:8c:e2: d5:0d:af:5d:65:b4:b5:90:b3:97:78:4a:08:fd:36:17:c5:e7: 40:d3:af:33:f2:bb:23:10:b8:c6:92:ec:1b:3e:0c:e9:45:1f: b2:06:76:cb:71:e8:94:d6:55:ae:83:d6:4a:0e:e7:a0:3a:c1: 85:64:40:d5:a3:5d:a5:4e:6f:7f:e3:73:db:12:d6:f8:7e:58: 75:c3:1f:53:2f:9c:b7:f1:66:55:05:5d:22:19:b7:86:4d:03: 7e:37:d0:82:9d:c7:ff:6c:2b:17:8c:88:3a:6c:60:b8:72:34: 32:8b:ac:74:1c:0f:6c:28:3b:1e:15:57:68:01:30:2b:8e:e9: b0:3a:77:a2:e6:5e:7d:fa:b8:9f:7b:a8:40:fd:eb:28:3c:bf: f3:08:ee:c7:34:f3:1a:96:f4:d6:9c:1c:35:b7:b5:7a:d2:3e: 84:2e:59:9e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+k/Qiu7jVqTkDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2QyNzk0MmYtY2RiZS00MDQ4LWJkYTMtNzMyNzk2MTg5Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq46rpykdoCxr6LdvgokZAVuMjT5jc3N9Zd3H Ofk7OsOx3vg2fenOJtyTEttZ0ZE11DWG4bGxddHhx90xNT8RxQq5OENrjOqYQ1/P UNL8bfpFufMe0LKGfqu3hdawgzvAkwLV75h37uNgreFPunG+lH5g6i3+CLzdPTtx Vz4dFqJ7hIhg9TsEmpMFqJm3LoN5ZacX4RbXmgng48CSEiay2mj2eLmchFxDn5Ew gl6Z6OuwvT1z49wUWtOjxmJatkMoTKH3R5HzqsZjrtomBA/AHpdgzae080fzIMox y7XuTbjo3TH44sNZE1tWHVKG7tlxf+dZvKsMD1fxqqofFUbOlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKA+jV8925+gXvOAuy+siwBcSUGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDUyZjljZjAtMmQ1NC0z ZTNjLWIzOWUtOTJlMDhjNTEzMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdzSPbo9Th0qRmnpgodA+DjnUq15ZN9BLxVlVq 6bvigZh/MpE6/OQIO1CQTnqL4EPEW+siKvZleY6xBXBUTwDkYA1TOoSK/gu3ZVet iCyqtAmkPEnd6s2TjOLVDa9dZbS1kLOXeEoI/TYXxedA068z8rsjELjGkuwbPgzp RR+yBnbLceiU1lWug9ZKDuegOsGFZEDVo12lTm9/43PbEtb4flh1wx9TL5y38WZV BV0iGbeGTQN+N9CCncf/bCsXjIg6bGC4cjQyi6x0HA9sKDseFVdoATArjumwOnei 5l59+rife6hA/esoPL/zCO7HNPMalvTWnBw1t7V60j6ELlme -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:05 2026 by rpki-client