$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5640277f-4ccc-3533-8a58-253bb26ed951.roa File: 5640277f-4ccc-3533-8a58-253bb26ed951.roa (raw, json) Hash identifier: 4a+XbTOH/E8ddccv0/waFOfRUN4wkzrhZ1/03YkYB/I= Subject key identifier: 21:DF:35:1A:2E:F1:D1:F7:CB:2D:28:8F:52:25:13:62:D3:B4:DB:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B340DD6732B5B610FF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5640277f-4ccc-3533-8a58-253bb26ed951.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 36623 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b3:40:dd:67:32:b5:b6:10:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=5999795b-678f-4add-a2f1-5f75f1cd6457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:6d:d7:63:92:fc:ce:be:52:c4:54:1e:f1: 21:e7:79:2e:e0:71:38:88:d9:a8:7f:09:bc:01:8c: 21:a4:69:8b:4e:73:89:00:fe:12:a8:81:c8:6d:90: b0:2c:d1:dd:37:a2:c3:39:c3:17:87:e4:42:d4:f1: 07:10:d5:f3:61:90:1f:27:94:a1:2f:98:c6:e5:ac: e6:8d:dc:72:91:42:e0:2a:44:25:70:8e:14:61:2b: 92:53:8f:21:b0:fb:e7:d6:cf:87:f0:79:c5:01:c4: 97:a6:10:f1:bf:1d:35:57:9f:5f:6e:53:7c:cb:5a: b3:92:b2:73:28:4a:1f:8c:ae:e1:ca:84:8a:2e:c2: ed:b8:a1:29:07:ea:3f:92:11:0f:ec:4b:61:85:5b: 35:69:23:99:ab:82:79:ec:05:15:cf:99:70:a7:ef: a4:19:90:90:64:76:9d:53:84:c2:c0:60:31:b1:cc: 48:fc:3f:c7:c1:91:97:d5:e7:f2:08:fe:3e:1d:fd: 9c:93:c5:fb:78:7e:2d:31:94:43:7a:95:22:a3:3a: 65:ce:92:86:61:87:ee:16:91:16:80:b2:de:58:22: 41:6c:33:9c:d3:57:da:ae:54:c1:f3:05:be:58:fd: 0b:32:53:4b:d2:58:46:f3:8b:5e:73:7b:9c:01:b5: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DF:35:1A:2E:F1:D1:F7:CB:2D:28:8F:52:25:13:62:D3:B4:DB:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5640277f-4ccc-3533-8a58-253bb26ed951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2c:64:c2:ac:1f:db:69:12:8f:5f:b6:eb:5b:9b:f0:79:81: 76:d2:8e:bf:23:ef:ac:51:26:3a:a9:4b:70:06:d9:0f:64:2b: 7c:f7:31:77:aa:b8:b8:b6:c8:18:c1:98:9b:1b:69:48:31:e3: 04:a4:12:9f:73:3d:a7:21:36:9e:e4:d5:c5:98:c2:65:3a:19: 09:97:e5:24:ac:bd:c2:60:95:2c:d8:02:1e:48:42:f7:a7:3f: 8b:e5:9b:e1:7c:93:1d:98:45:ca:48:f3:79:74:dc:18:19:7b: dd:0c:8a:1a:bb:9f:a2:99:66:1a:1d:91:f0:c9:37:59:39:ff: a8:47:48:55:5a:79:97:ea:59:bc:f6:27:23:87:74:09:96:f8: 49:6e:77:8a:49:4a:27:a2:f8:76:85:af:3a:2b:4b:42:da:5f: 8a:ee:f2:3b:e8:b4:4c:f0:3a:b9:0a:12:51:83:e8:b2:0a:4a: fd:09:62:15:67:a2:13:6c:18:4a:c4:04:77:24:1c:7b:4e:e0: 49:10:62:63:b8:de:12:bf:67:87:02:04:ce:e5:17:9c:0b:23: 77:c9:f6:10:ba:c5:9b:bc:71:42:bb:58:a6:ca:4e:db:18:63: 6a:7a:4c:32:a3:71:cf:68:ea:09:b7:26:19:08:83:32:6a:ca: c8:21:e4:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bNA3WcytbYQ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk NTk5OTc5NWItNjc4Zi00YWRkLWEyZjEtNWY3NWYxY2Q2NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf9t12OS/M6+UsRUHvEh53ku4HE4iNmofwm8 AYwhpGmLTnOJAP4SqIHIbZCwLNHdN6LDOcMXh+RC1PEHENXzYZAfJ5ShL5jG5azm jdxykULgKkQlcI4UYSuSU48hsPvn1s+H8HnFAcSXphDxvx01V59fblN8y1qzkrJz KEofjK7hyoSKLsLtuKEpB+o/khEP7EthhVs1aSOZq4J57AUVz5lwp++kGZCQZHad U4TCwGAxscxI/D/HwZGX1efyCP4+Hf2ck8X7eH4tMZRDepUiozplzpKGYYfuFpEW gLLeWCJBbDOc01farlTB8wW+WP0LMlNL0lhG84tec3ucAbWE3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCHfNRou8dH3yy0oj1IlE2LTtNt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTY0MDI3N2YtNGNjYy0z NTMzLThhNTgtMjUzYmIyNmVkOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYsZMKsH9tpEo9ftutbm/B5gXbSjr8j76xRJjqpS3AG2Q9kK3z3 MXequLi2yBjBmJsbaUgx4wSkEp9zPachNp7k1cWYwmU6GQmX5SSsvcJglSzYAh5I QvenP4vlm+F8kx2YRcpI83l03BgZe90Mihq7n6KZZhodkfDJN1k5/6hHSFVaeZfq Wbz2JyOHdAmW+Elud4pJSiei+HaFrzorS0LaX4ru8jvotEzwOrkKElGD6LIKSv0J YhVnohNsGErEBHckHHtO4EkQYmO43hK/Z4cCBM7lF5wLI3fJ9hC6xZu8cUK7WKbK TtsYY2p6TDKjcc9o6gm3JhkIgzJqysgh5Bk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:10:20 2026 by rpki-client