$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49215e88-8f7e-3403-8ea1-891f3299b982.roa File: 49215e88-8f7e-3403-8ea1-891f3299b982.roa (raw, json) Hash identifier: F+a/znX5J9MbVvkr3GNkqJU8kD8rjs5cUUIXzjFOtkw= Subject key identifier: 45:0A:FC:DB:A9:39:A5:79:C7:7C:5C:5E:14:03:49:C5:99:A2:FE:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B08841376E990A54B200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49215e88-8f7e-3403-8ea1-891f3299b982.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 396604 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:88:41:37:6e:99:0a:54:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=63136d47-3c8f-4ceb-8924-1bfec5e5e9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:4d:b4:35:a1:64:67:38:a6:fd:07:56:d2: e7:10:3c:41:89:c3:cd:86:0d:9c:c7:43:f5:d7:47: e3:25:0f:2b:77:50:c1:92:a9:11:00:b4:8e:30:dc: fb:d1:7d:70:86:c1:0b:f0:ff:80:d2:40:28:57:2a: 84:b4:07:66:a7:fa:b8:ba:eb:24:44:90:0d:81:38: 3c:5d:5e:63:4c:0c:0f:48:76:d7:8e:fb:07:c8:66: ef:85:22:b9:87:8f:64:0a:43:af:32:ce:b6:7b:3b: 12:ed:3f:25:21:5c:66:bd:c1:3f:cc:be:de:7d:38: f0:59:0b:d7:46:91:a5:aa:3f:ce:fc:8e:dc:d8:2d: 50:23:e7:20:ae:6c:23:8f:bc:8a:dc:ac:fa:64:d4: cb:bc:d6:c8:fc:48:10:ad:d7:3d:63:04:e7:77:2e: e2:57:40:34:18:1a:fb:51:65:4f:49:9b:f2:85:e7: 74:54:9e:ae:12:b8:1b:47:4c:f4:f2:e4:c4:25:30: 63:c9:c9:ef:31:e5:8d:bc:61:99:fb:a0:19:9d:7a: 55:84:4b:5e:ed:e0:b9:71:6e:76:7d:b7:2c:d6:88: 5f:70:05:99:5a:db:98:ee:84:3a:6f:fb:4a:2f:9b: 3e:ba:75:6d:df:c9:91:4d:01:cc:31:dc:37:6f:39: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:FC:DB:A9:39:A5:79:C7:7C:5C:5E:14:03:49:C5:99:A2:FE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49215e88-8f7e-3403-8ea1-891f3299b982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8c:ce:31:fd:1e:47:b8:ab:1a:e5:90:f0:fa:04:00:9e:18: c8:bf:43:fe:32:6a:3e:52:f4:0a:cc:13:ae:2a:ce:55:9f:8f: 7f:77:05:fa:bd:88:02:09:f4:50:bd:41:c9:f8:94:65:ab:84: 75:6b:84:fa:89:d1:bc:06:c7:24:58:ee:65:c3:77:d3:b4:0e: 6a:89:a0:71:ee:2a:ef:cd:b4:3c:8e:00:39:18:01:a3:9c:da: 7d:40:30:07:60:a2:db:ec:73:75:48:bb:92:ec:86:ac:ae:38: 73:f3:a6:ef:07:ae:a3:25:49:cb:f4:82:94:f3:54:32:76:71: 09:d7:7a:5a:88:35:f7:bd:98:18:f7:d6:60:45:98:73:be:8e: d6:67:e8:3b:22:3f:2e:4b:64:68:a7:89:49:cf:db:98:85:89: 0c:82:57:40:ba:56:05:10:07:04:67:03:76:bf:f2:28:74:8e: 4e:dd:57:cd:bc:83:c4:b8:ce:04:93:77:a4:37:8e:fa:87:08: 1c:74:90:5e:b2:a4:69:3c:56:bb:f6:44:2b:2f:70:8d:1a:de: d6:d0:d7:3c:43:b0:d6:c2:6f:e9:4b:00:97:b6:cd:75:5b:39: 3b:62:2e:db:b0:47:f9:e6:a8:b3:cb:f5:c1:cb:fc:78:0e:2f: e9:e5:e6:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bCIQTdumQpUsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk NjMxMzZkNDctM2M4Zi00Y2ViLTg5MjQtMWJmZWM1ZTVlOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK5NtDWhZGc4pv0HVtLnEDxBicPNhg2cx0P1 10fjJQ8rd1DBkqkRALSOMNz70X1whsEL8P+A0kAoVyqEtAdmp/q4uuskRJANgTg8 XV5jTAwPSHbXjvsHyGbvhSK5h49kCkOvMs62ezsS7T8lIVxmvcE/zL7efTjwWQvX RpGlqj/O/I7c2C1QI+cgrmwjj7yK3Kz6ZNTLvNbI/EgQrdc9YwTndy7iV0A0GBr7 UWVPSZvyhed0VJ6uErgbR0z08uTEJTBjycnvMeWNvGGZ+6AZnXpVhEte7eC5cW52 fbcs1ohfcAWZWtuY7oQ6b/tKL5s+unVt38mRTQHMMdw3bzmxmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUK/NupOaV5x3xcXhQDScWZov7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDkyMTVlODgtOGY3ZS0z NDAzLThlYTEtODkxZjMyOTliOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2MzjH9Hke4qxrlkPD6BACeGMi/Q/4yaj5S9ArME64qzlWfj393 Bfq9iAIJ9FC9Qcn4lGWrhHVrhPqJ0bwGxyRY7mXDd9O0DmqJoHHuKu/NtDyOADkY AaOc2n1AMAdgotvsc3VIu5LshqyuOHPzpu8HrqMlScv0gpTzVDJ2cQnXelqINfe9 mBj31mBFmHO+jtZn6DsiPy5LZGiniUnP25iFiQyCV0C6VgUQBwRnA3a/8ih0jk7d V828g8S4zgSTd6Q3jvqHCBx0kF6ypGk8Vrv2RCsvcI0a3tbQ1zxDsNbCb+lLAJe2 zXVbOTtiLtuwR/nmqLPL9cHL/HgOL+nl5gY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:18 2026 by rpki-client