$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa File: 573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa (raw, json) Hash identifier: y1tfYo2t+bz0KtTlLwKYA/Fiwdjwkp5XHirQhtJiUFw= Subject key identifier: 2C:77:F5:20:D0:91:F1:54:FC:F2:B8:65:DA:27:93:6D:24:CE:AF:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A868C61FBEC8FACF45340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396617 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:86:8c:61:fb:ec:8f:ac:f4:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bec81d85-fe24-4edc-8e31-fd9fa08efebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:25:c2:44:d8:c3:3c:ee:2f:af:ca:9a:01: 01:71:e5:44:f7:0f:15:f8:23:6c:45:c2:47:14:ae: 3b:b7:aa:73:a5:ef:7d:8f:3f:ee:72:64:da:ad:94: 79:9c:38:f5:c1:2c:d5:1a:a9:a1:9e:7c:ba:3e:1f: 2b:84:2d:89:95:8b:41:e1:64:bb:51:12:19:dc:93: 94:f3:8c:7c:56:46:a1:3b:45:e6:39:32:5e:30:4c: b2:40:0b:45:1c:5f:05:2a:5c:06:58:3d:94:4c:33: 72:ff:4a:d0:83:75:c9:0f:44:00:40:4d:11:d5:1f: 43:21:5c:5e:0d:cc:58:0c:71:ad:55:dd:ec:1d:4a: 97:73:3a:2b:48:b9:4d:fd:7e:49:7b:d9:a0:d5:47: 27:ab:e6:9c:16:e8:9d:cd:e2:21:96:92:17:08:e7: 2c:4e:a5:1f:07:29:c6:5a:3e:0d:5b:ac:f2:ab:f3: 26:c7:b0:f9:54:45:20:ff:6e:50:f9:7f:d4:3a:8b: b5:8f:a4:e1:2d:fa:3d:06:0d:d9:d3:be:28:18:f8: 46:c3:90:a6:66:2f:b4:69:b9:bf:eb:c5:d2:55:b6: 54:f5:34:bf:7a:f3:46:e8:4b:57:30:bc:67:fa:00: 2a:f8:de:87:06:f8:0b:d2:8b:2f:e9:44:35:64:d6: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:77:F5:20:D0:91:F1:54:FC:F2:B8:65:DA:27:93:6D:24:CE:AF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573ec4e0-ae5d-3f5e-bf8f-d446713a3ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:12:b4:55:24:e3:d2:71:d3:a0:57:61:3a:e7:e7:06:98:59: 3a:c7:25:d0:7e:54:eb:bf:01:0a:fb:49:47:3a:42:3c:7c:04: ee:d9:0d:1a:00:6b:fb:50:db:cc:4c:71:89:ad:97:8e:1f:0e: 02:16:a4:20:3b:da:36:b5:e6:be:22:62:f8:58:12:ab:4a:f9: 64:9d:0a:1d:79:6d:37:46:f0:b1:9d:d6:73:7f:ce:2d:0c:bd: 88:32:9f:ac:ac:48:6a:f2:f3:cf:60:eb:30:e5:68:80:cf:69: 1a:75:a3:5c:6b:7a:0f:42:5b:79:49:cf:f0:6d:35:aa:27:b5: d7:ca:8d:9a:34:89:a8:f7:41:9e:c3:19:b8:c3:55:a6:b5:10: 20:2e:cd:e8:ee:f9:c4:27:fd:22:cc:91:58:73:e1:49:61:03: bc:5d:46:17:62:a6:b2:02:24:54:c2:a3:06:d7:40:b6:47:88: 9e:f5:41:fc:b8:de:b8:8e:d8:c9:0e:09:72:c6:90:80:52:c0: e7:52:9a:08:70:72:01:9d:67:b7:e5:2c:46:1e:ec:46:88:ef: d5:ed:0f:5d:1b:ad:2f:25:8c:b6:79:ba:d6:91:16:80:0f:ab: 5c:27:80:90:1e:eb:bf:c2:04:c1:25:2d:2c:1b:44:32:b6:ac: 92:2d:4a:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoaMYfvsj6z0U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmVjODFkODUtZmUyNC00ZWRjLThlMzEtZmQ5ZmEwOGVmZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B8lwkTYwzzuL6/KmgEBceVE9w8V+CNsRcJH FK47t6pzpe99jz/ucmTarZR5nDj1wSzVGqmhnny6Ph8rhC2JlYtB4WS7URIZ3JOU 84x8VkahO0XmOTJeMEyyQAtFHF8FKlwGWD2UTDNy/0rQg3XJD0QAQE0R1R9DIVxe DcxYDHGtVd3sHUqXczorSLlN/X5Je9mg1Ucnq+acFuidzeIhlpIXCOcsTqUfBynG Wj4NW6zyq/Mmx7D5VEUg/25Q+X/UOou1j6ThLfo9Bg3Z074oGPhGw5CmZi+0abm/ 68XSVbZU9TS/evNG6EtXMLxn+gAq+N6HBvgL0osv6UQ1ZNbmXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCx39SDQkfFU/PK4Zdonk20kzq8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTczZWM0ZTAtYWU1ZC0z ZjVlLWJmOGYtZDQ0NjcxM2EzYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsErRVJOPScdOgV2E65+cGmFk6xyXQflTrvwEK +0lHOkI8fATu2Q0aAGv7UNvMTHGJrZeOHw4CFqQgO9o2tea+ImL4WBKrSvlknQod eW03RvCxndZzf84tDL2IMp+srEhq8vPPYOsw5WiAz2kadaNca3oPQlt5Sc/wbTWq J7XXyo2aNImo90Gewxm4w1WmtRAgLs3o7vnEJ/0izJFYc+FJYQO8XUYXYqayAiRU wqMG10C2R4ie9UH8uN64jtjJDglyxpCAUsDnUpoIcHIBnWe35SxGHuxGiO/V7Q9d G60vJYy2ebrWkRaAD6tcJ4CQHuu/wgTBJS0sG0QytqySLUr0 -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:02 2026 by rpki-client