$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa File: 53c4457a-8d70-366c-bc84-ccda67b517c9.roa (raw, json) Hash identifier: dJLA+f3dfcm+EZWu4UT7ebRFztot3NQFGsNgeiwCWzE= Subject key identifier: 86:B1:C2:D0:B3:1A:A9:E0:FA:16:0A:16:5B:90:5D:FB:0D:B5:71:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D359FDE955EA20CB287601980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 2620:74:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:de:95:5e:a2:0c:b2:87:60:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=bd780528-9800-4653-a236-3f0e16a7950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:16:8f:7e:a7:36:1c:ac:f9:da:32:d2:84: 14:ec:38:fb:31:69:cc:7c:d4:5c:a8:aa:23:95:a8: 8e:29:04:21:66:b0:4c:f7:96:6f:46:b8:84:b4:48: dc:b2:b6:18:49:de:73:4e:b8:4c:f0:ad:7a:5f:8e: cd:c4:f1:95:3c:0b:a5:90:1e:ce:23:bc:cc:ac:80: e6:5d:cc:25:0e:28:41:81:60:5e:13:fb:97:6d:38: 2a:e2:6d:71:18:b2:1a:29:4b:05:4f:62:69:31:b1: 5f:c0:d2:b7:03:1f:a4:ef:ee:bb:4a:91:f5:6b:10: b6:1d:5a:6d:5d:5e:19:f0:77:f0:c3:ae:0c:d5:ce: 3e:a5:38:af:2b:8e:73:ad:c8:bb:b8:c5:ba:55:c5: bb:7b:7c:19:51:28:c2:d7:b5:7e:14:a6:c7:ac:bd: 2d:ea:70:e7:e0:e8:bc:bd:a8:0d:52:45:60:ed:f2: 4e:a9:76:1c:dc:15:cc:ea:72:f5:6e:e5:87:c2:3a: 6d:af:5e:ba:e9:6d:d4:8c:55:b2:da:d9:ff:b0:d1: 72:63:f6:55:12:0c:c5:02:0b:78:b5:01:2f:7b:6b: 11:d1:5f:51:9b:ac:69:20:79:aa:dc:2f:44:68:83: f9:08:eb:74:9e:f1:3b:26:44:46:04:0e:33:83:be: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B1:C2:D0:B3:1A:A9:E0:FA:16:0A:16:5B:90:5D:FB:0D:B5:71:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5a:b8:57:f6:df:c7:19:cb:57:6e:01:52:57:0f:7c:72:c5: a1:e2:c3:1e:bf:49:cc:c0:1e:dd:85:86:35:dd:f6:3a:b9:60: fe:6d:77:2d:39:8e:ad:02:02:bc:cd:92:8d:ce:26:9c:b7:8b: b2:d0:e2:0b:40:65:de:36:6c:e5:13:85:97:98:ad:95:90:9d: ba:bc:9d:ba:ef:f1:fd:9f:8d:ae:3b:80:97:bf:5b:14:23:ef: 05:2a:cf:38:cd:36:36:03:28:28:47:3b:ba:5a:f0:c7:3d:87: d5:50:5d:95:50:4e:a9:87:ee:75:06:d3:57:f8:e0:f9:df:61: 18:46:e1:6e:85:a2:25:ab:12:f4:11:ec:ea:d4:c0:d4:70:ce: c7:f8:a9:98:63:ac:b3:0c:66:bc:2f:ee:31:ad:5c:60:cd:83: 2c:c0:7e:6c:e8:fb:bb:2b:01:73:13:f3:e8:c7:5d:f9:98:2d: 46:c1:55:50:c9:96:94:96:a7:09:ed:aa:e0:0b:0c:76:ef:28: a4:ec:6c:13:af:5a:70:ff:ad:85:e6:42:f8:a3:94:01:49:3d: b2:bf:18:a4:be:ac:d2:6f:36:f4:16:27:12:0a:1d:16:3a:00: d7:b5:f7:39:9a:db:3a:bc:7c:0a:58:eb:81:6a:0d:c5:20:51: 7f:c7:c8:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n96VXqIMsodgGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmQ3ODA1MjgtOTgwMC00NjUzLWEyMzYtM2YwZTE2YTc5NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMWj36nNhys+doy0oQU7Dj7MWnMfNRcqKoj laiOKQQhZrBM95ZvRriEtEjcsrYYSd5zTrhM8K16X47NxPGVPAulkB7OI7zMrIDm XcwlDihBgWBeE/uXbTgq4m1xGLIaKUsFT2JpMbFfwNK3Ax+k7+67SpH1axC2HVpt XV4Z8Hfww64M1c4+pTivK45zrci7uMW6VcW7e3wZUSjC17V+FKbHrL0t6nDn4Oi8 vagNUkVg7fJOqXYc3BXM6nL1buWHwjptr1666W3UjFWy2tn/sNFyY/ZVEgzFAgt4 tQEve2sR0V9Rm6xpIHmq3C9EaIP5COt0nvE7JkRGBA4zg766DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIaxwtCzGqng+hYKFluQXfsNtXFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTNjNDQ1N2EtOGQ3MC0z NjZjLWJjODQtY2NkYTY3YjUxN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJauFf238cZy1duAVJXD3xyxaHiwx6/SczAHt2FhjXd9jq5YP5t dy05jq0CArzNko3OJpy3i7LQ4gtAZd42bOUThZeYrZWQnbq8nbrv8f2fja47gJe/ WxQj7wUqzzjNNjYDKChHO7pa8Mc9h9VQXZVQTqmH7nUG01f44PnfYRhG4W6FoiWr EvQR7OrUwNRwzsf4qZhjrLMMZrwv7jGtXGDNgyzAfmzo+7srAXMT8+jHXfmYLUbB VVDJlpSWpwntquALDHbvKKTsbBOvWnD/rYXmQvijlAFJPbK/GKS+rNJvNvQWJxIK HRY6ANe19zma2zq8fApY64FqDcUgUX/HyAE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:50 2026 by rpki-client