$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa File: 48dbe947-a47b-3bd7-b077-398aa8b0af85.roa (raw, json) Hash identifier: p9AHyBBOaSH704a0PBQbJa8tHI5jK98Fd/KE96QdzI4= Subject key identifier: 12:A1:E7:57:BD:4E:B0:1E:C7:E5:DA:DF:71:D9:B8:54:E5:B8:CF:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A3BD9070544A09BA44D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20431 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:d9:07:05:44:a0:9b:a4:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=235d0a39-5b63-4d4f-8993-a4e61f27a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:11:ee:1f:ef:63:db:9c:ac:95:48:74:56: c9:58:ec:56:45:a5:b1:d8:cd:af:7f:51:cd:c1:29: 6e:70:0f:e0:76:3a:43:de:ff:ca:29:5b:5f:a3:3a: b3:d2:a8:ac:72:61:85:9c:0a:b0:84:c7:4d:3b:35: 62:8f:67:fc:e4:75:fd:98:5a:1d:58:0a:5e:c4:e7: c1:1d:d7:76:6b:6b:2c:27:5a:5d:fe:1e:7a:72:e7: 48:56:26:20:e5:1d:3a:15:4c:ba:8c:e7:92:32:17: 39:a6:78:a0:68:3e:fd:a8:45:0a:49:10:3b:20:ce: c7:c0:70:d8:2b:85:c9:cb:30:81:10:7e:f6:4a:72: 93:b1:39:97:13:59:1e:de:89:c2:41:11:78:c7:14: 19:83:74:d8:f7:5c:25:1d:0c:71:6d:05:f3:45:bf: 49:42:2d:22:22:ab:6a:ef:db:0d:c3:e3:e4:96:82: 7c:c6:57:e6:be:f3:c1:7e:1a:b7:d2:5d:fc:41:d0: 42:fd:4d:4a:2d:5f:4c:9b:7e:4c:27:c5:33:7d:4c: fe:21:b9:a5:53:a8:24:c5:d2:8c:67:ca:bb:84:da: 63:48:4a:18:be:f9:44:03:ff:06:a6:18:90:15:23: 68:b4:f5:04:21:5b:e7:df:e9:1d:06:85:19:15:c4: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:E7:57:BD:4E:B0:1E:C7:E5:DA:DF:71:D9:B8:54:E5:B8:CF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48dbe947-a47b-3bd7-b077-398aa8b0af85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:09:bc:c7:e9:c3:94:c6:da:8a:30:39:75:c7:64:04:c2:4b: a9:04:3e:ee:e6:8f:4a:98:2c:c5:ee:2a:dc:73:d1:59:f4:d8: d9:75:e9:0a:0c:dd:71:89:34:4f:34:b5:25:26:eb:a7:68:cf: be:e8:16:f2:3a:06:16:df:a0:c5:0c:1f:d7:34:a1:20:9f:bf: 4f:bc:2f:4e:c2:e6:b7:90:85:a4:c9:6e:68:4f:81:92:dd:58: 09:40:79:5b:85:c1:ce:cf:d1:0e:34:36:71:b2:2b:d6:50:d0: 0b:66:94:e0:48:d2:45:28:4e:15:54:81:82:6c:68:13:e0:23: 29:ca:47:23:af:fb:4f:56:10:e2:b2:b5:de:36:7e:9a:36:49: c4:d3:45:91:21:9f:17:6c:d1:56:58:2f:02:fc:55:4d:3c:eb: f6:6c:0a:41:40:2d:72:c7:1f:9f:be:f3:d2:2f:94:f0:7d:6d: 95:04:66:b9:86:de:f6:6d:eb:0e:e5:dd:a1:30:92:a4:f5:dc: ad:b1:90:3d:c3:c6:e4:33:08:21:b4:2e:2d:1d:e5:6d:bf:17: 43:f0:bf:6e:cc:99:97:78:54:72:c6:80:b6:b8:57:b9:bb:4c: d7:86:2b:14:68:55:a4:d8:7f:da:b0:9e:31:c8:40:b1:83:2e: a9:49:e7:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jejvZBwVEoJukTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjM1ZDBhMzktNWI2My00ZDRmLTg5OTMtYTRlNjFmMjdhMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSYR7h/vY9ucrJVIdFbJWOxWRaWx2M2vf1HN wSlucA/gdjpD3v/KKVtfozqz0qiscmGFnAqwhMdNOzVij2f85HX9mFodWApexOfB Hdd2a2ssJ1pd/h56cudIViYg5R06FUy6jOeSMhc5pnigaD79qEUKSRA7IM7HwHDY K4XJyzCBEH72SnKTsTmXE1ke3onCQRF4xxQZg3TY91wlHQxxbQXzRb9JQi0iIqtq 79sNw+PkloJ8xlfmvvPBfhq30l38QdBC/U1KLV9Mm35MJ8UzfUz+IbmlU6gkxdKM Z8q7hNpjSEoYvvlEA/8GphiQFSNotPUEIVvn3+kdBoUZFcSR9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKh51e9TrAex+Xa33HZuFTluM8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDhkYmU5NDctYTQ3Yi0z YmQ3LWIwNzctMzk4YWE4YjBhZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAAJvMfpw5TG2oowOXXHZATCS6kEPu7mj0qYLMXuKtxz0Vn02Nl1 6QoM3XGJNE80tSUm66doz77oFvI6BhbfoMUMH9c0oSCfv0+8L07C5reQhaTJbmhP gZLdWAlAeVuFwc7P0Q40NnGyK9ZQ0AtmlOBI0kUoThVUgYJsaBPgIynKRyOv+09W EOKytd42fpo2ScTTRZEhnxds0VZYLwL8VU086/ZsCkFALXLHH5++89IvlPB9bZUE ZrmG3vZt6w7l3aEwkqT13K2xkD3DxuQzCCG0Li0d5W2/F0Pwv27MmZd4VHLGgLa4 V7m7TNeGKxRoVaTYf9qwnjHIQLGDLqlJ57A= -----END CERTIFICATE-----Generated at Thu Mar 26 21:49:07 2026 by rpki-client