$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/554a8934-9905-3ec1-8548-5a99c378a5f2.roa File: 554a8934-9905-3ec1-8548-5a99c378a5f2.roa (raw, json) Hash identifier: tf+bbFY3x0cIjfqeQcK/OHTtSQoVdZwlecAffKIe9LU= Subject key identifier: F0:24:3B:34:21:AF:68:CF:5C:34:31:B1:A8:59:68:42:4E:21:B2:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B23622C9E61D8A0E4900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/554a8934-9905-3ec1-8548-5a99c378a5f2.roa Signing time: Tue 17 Mar 2026 14:07:02 +0000 ROA not before: Tue 17 Mar 2026 14:07:02 +0000 ROA not after: Mon 15 Jun 2026 14:07:02 +0000 asID: 211369 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:36:22:c9:e6:1d:8a:0e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:02 2026 GMT Not After : Jun 15 14:07:02 2026 GMT Subject: CN=149f7c04-d4c0-47f2-8b15-365803ff6a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:d2:32:f4:68:78:1f:e6:c2:98:33:17:c8: e2:a0:27:2b:2b:28:d6:9e:fb:09:db:5e:d4:60:59: 0a:57:5b:ac:e9:62:df:5d:81:04:5d:ad:a6:cf:0a: 4d:88:41:03:5b:5d:33:47:6f:da:be:80:11:93:7b: da:fe:82:47:6c:37:d3:2e:63:b1:bb:f3:09:22:1a: 6d:ac:ff:e4:2f:53:f7:59:6a:19:e9:2d:72:25:17: 82:db:df:44:90:4f:e9:33:4e:47:ae:e3:06:b0:ee: a7:7c:d5:db:3a:85:71:c8:b2:04:78:de:ae:a4:e1: d5:e1:55:0e:02:9f:6f:55:21:57:70:e3:d3:f6:d8: 57:e4:75:ec:36:3a:5b:f0:0d:85:a8:b8:08:c8:11: cd:0f:df:f3:45:ec:f3:4a:3c:9e:1b:29:29:71:c4: 93:1b:83:c0:66:bd:c7:c7:30:31:54:9d:2c:b7:2b: be:3b:45:58:91:c7:d1:3a:8e:ff:de:ab:ef:b1:94: 04:3c:fd:ef:58:f5:5b:e2:be:24:b5:89:2f:b9:96: 6d:9e:6c:2a:78:56:65:04:d7:ef:c8:70:88:03:97: 8d:59:6f:79:ee:a5:e9:9c:a1:1c:21:d0:99:e0:c9: 7e:0c:92:1c:74:79:a7:d8:8f:ec:a9:e5:d1:ef:02: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:24:3B:34:21:AF:68:CF:5C:34:31:B1:A8:59:68:42:4E:21:B2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/554a8934-9905-3ec1-8548-5a99c378a5f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:79:7e:2c:5c:c5:56:6f:eb:69:8b:e3:c6:9c:0a:36:63:28: d4:95:c1:af:03:d0:3f:84:6e:15:07:25:5d:af:87:bc:db:57: 26:bd:3d:33:e7:77:34:27:8a:60:97:34:fc:3b:10:13:64:f2: eb:de:2c:52:31:1b:46:72:26:dc:3c:2e:b1:ae:b1:e8:c0:22: 02:d3:76:0d:3d:2e:cc:2a:33:91:89:ce:92:72:13:e6:84:68: a5:07:f0:f7:0d:1c:10:86:8f:b0:bb:f8:1f:32:50:73:08:0b: 16:98:ec:bd:c2:18:f4:f3:57:65:91:52:b1:de:ca:c5:d7:6f: 16:27:c4:96:37:bb:d0:e7:48:e4:bf:d8:f2:37:22:52:ed:37: 7d:73:a0:30:47:f5:5e:10:95:8a:3e:8b:fa:44:40:d2:be:f9: ba:63:99:b8:9c:af:07:4a:7c:61:3c:9c:7d:8a:99:80:b7:a4: 8d:d7:d2:d0:73:f7:c9:60:30:58:b0:10:c0:52:84:0c:49:83: 18:fe:16:ea:89:15:62:d5:95:19:4e:f4:b0:9b:c9:50:ea:4c: 90:96:61:83:96:e0:4d:5e:6b:c9:ad:2d:6c:9b:8f:41:95:a1: b1:71:31:42:e7:e0:82:af:53:51:90:b5:25:b1:3f:81:82:4b: 6c:f2:db:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bI2IsnmHYoOSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMloXDTI2MDYxNTE0MDcwMlowLzEtMCsGA1UEAxMk MTQ5ZjdjMDQtZDRjMC00N2YyLThiMTUtMzY1ODAzZmY2YTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG/SMvRoeB/mwpgzF8jioCcrKyjWnvsJ217U YFkKV1us6WLfXYEEXa2mzwpNiEEDW10zR2/avoARk3va/oJHbDfTLmOxu/MJIhpt rP/kL1P3WWoZ6S1yJReC299EkE/pM05HruMGsO6nfNXbOoVxyLIEeN6upOHV4VUO Ap9vVSFXcOPT9thX5HXsNjpb8A2FqLgIyBHND9/zRezzSjyeGykpccSTG4PAZr3H xzAxVJ0styu+O0VYkcfROo7/3qvvsZQEPP3vWPVb4r4ktYkvuZZtnmwqeFZlBNfv yHCIA5eNWW957qXpnKEcIdCZ4Ml+DJIcdHmn2I/sqeXR7wLgTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPAkOzQhr2jPXDQxsahZaEJOIbI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTU0YTg5MzQtOTkwNS0z ZWMxLTg1NDgtNWE5OWMzNzhhNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEp5fixcxVZv62mL48acCjZjKNSVwa8D0D+EbhUHJV2vh7zbVya9 PTPndzQnimCXNPw7EBNk8uveLFIxG0ZyJtw8LrGusejAIgLTdg09LswqM5GJzpJy E+aEaKUH8PcNHBCGj7C7+B8yUHMICxaY7L3CGPTzV2WRUrHeysXXbxYnxJY3u9Dn SOS/2PI3IlLtN31zoDBH9V4QlYo+i/pEQNK++bpjmbicrwdKfGE8nH2KmYC3pI3X 0tBz98lgMFiwEMBShAxJgxj+FuqJFWLVlRlO9LCbyVDqTJCWYYOW4E1ea8mtLWyb j0GVobFxMULn4IKvU1GQtSWxP4GCS2zy2/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 10:41:43 2026 by rpki-client