$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa File: 5a651d8b-ecc8-3d63-90d2-6740419539c0.roa (raw, json) Hash identifier: Q2z8Qb6GxpTjpae2NJT/tegF4/CNQJYAqFEAjdjX6JI= Subject key identifier: 39:EA:26:F2:6D:9D:82:37:AD:1F:19:E1:61:DD:0B:1E:43:37:77:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8B6B40FA62E00C188A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 397198 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8b:6b:40:fa:62:e0:0c:18:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bdd15541-40dc-4c5d-a610-5602de15919a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:bc:29:24:c3:c4:df:1e:ab:61:4e:09:f1: b0:9d:1f:84:c1:64:be:2f:f5:e6:c6:cd:5c:c2:83: f5:15:b7:ac:f9:dc:d8:4d:be:c0:7c:d5:c2:84:95: ff:fc:42:53:13:7b:ba:7e:08:fd:f9:95:b1:e3:d8: d4:53:ec:1e:78:e5:3a:56:54:d0:2a:85:88:00:9a: d1:1d:a0:60:fa:85:5b:db:53:fb:a0:6b:b1:29:4c: d2:da:7e:41:16:75:f1:13:d0:7e:ac:45:e7:f5:85: 67:58:29:eb:01:03:e4:19:ee:9f:51:a5:3b:c9:7d: 98:3e:f4:33:4f:f2:18:12:b1:dd:b7:31:f6:69:54: 3d:92:45:35:3c:ac:e1:05:ec:98:9a:75:3a:2a:f4: 7b:69:00:8f:92:e7:17:ca:11:e9:4c:69:f9:54:e7: e1:7d:3e:dc:3b:3a:af:f6:31:98:92:bf:44:3d:96: d8:f6:45:a5:35:a4:53:a6:d8:b6:0b:bf:f0:a2:6b: fc:94:00:03:c4:78:f4:1b:92:f6:71:bb:2e:74:9c: ad:16:3d:4c:f4:a7:e5:b6:b2:f9:8c:a2:6c:ac:b4: 1f:80:80:f7:06:ff:2b:d3:d7:74:aa:12:3e:e5:25: c6:2d:bf:bb:2a:3e:df:b6:c3:56:3e:f3:9f:67:22: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:26:F2:6D:9D:82:37:AD:1F:19:E1:61:DD:0B:1E:43:37:77:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d2:38:21:0b:f1:9f:5f:ca:ef:c7:ae:a9:6e:69:a4:1f:83: 79:88:46:58:53:f5:43:5f:01:de:ba:29:b2:ca:5c:46:0d:6c: f1:97:d7:80:2f:32:a6:c9:1a:0d:b6:a0:79:fb:64:25:22:c9: 3f:43:dc:67:78:c9:a3:cd:34:b8:78:c9:c5:5f:99:7c:64:1b: c1:fb:96:da:d4:a2:14:a9:fc:1f:8e:f8:0b:34:09:4d:a4:5b: 29:15:25:c6:e8:31:3b:d4:3b:3b:31:dc:09:b7:24:d2:8c:9d: 74:79:f6:9f:17:e2:0b:9d:ba:72:78:cf:c7:30:0c:b8:f3:b0: 1d:de:c3:44:cb:c3:34:3a:02:f9:f4:58:31:4d:20:29:43:8a: a8:e4:e8:a7:2c:01:69:8b:b4:f3:70:91:33:1c:16:c4:0b:76: f7:e1:86:5f:76:a5:89:e1:bb:02:d8:dc:4f:21:55:a0:5c:c0: 13:07:67:1e:b5:44:b5:c5:7b:38:d3:aa:bf:5f:01:21:c4:08: b7:86:20:41:a5:5b:af:ef:f5:6a:8e:bb:da:61:47:96:b6:b4: 6f:fe:98:4f:d6:bb:70:1d:31:9e:83:e1:9c:55:f1:f4:b5:c9: e7:14:ee:5b:51:e7:0b:9c:b4:99:da:1f:26:a7:04:71:3a:2d: 15:0f:d3:a9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCotrQPpi4AwYioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmRkMTU1NDEtNDBkYy00YzVkLWE2MTAtNTYwMmRlMTU5MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonO8KSTDxN8eq2FOCfGwnR+EwWS+L/Xmxs1c woP1Fbes+dzYTb7AfNXChJX//EJTE3u6fgj9+ZWx49jUU+weeOU6VlTQKoWIAJrR HaBg+oVb21P7oGuxKUzS2n5BFnXxE9B+rEXn9YVnWCnrAQPkGe6fUaU7yX2YPvQz T/IYErHdtzH2aVQ9kkU1PKzhBeyYmnU6KvR7aQCPkucXyhHpTGn5VOfhfT7cOzqv 9jGYkr9EPZbY9kWlNaRTpti2C7/womv8lAADxHj0G5L2cbsudJytFj1M9KfltrL5 jKJsrLQfgID3Bv8r09d0qhI+5SXGLb+7Kj7ftsNWPvOfZyJELwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDnqJvJtnYI3rR8Z4WHdCx5DN3dLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWE2NTFkOGItZWNjOC0z ZDYzLTkwZDItNjc0MDQxOTUzOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAl0jghC/GfX8rvx66pbmmkH4N5iEZYU/VDXwHe uimyylxGDWzxl9eALzKmyRoNtqB5+2QlIsk/Q9xneMmjzTS4eMnFX5l8ZBvB+5ba 1KIUqfwfjvgLNAlNpFspFSXG6DE71Ds7MdwJtyTSjJ10efafF+ILnbpyeM/HMAy4 87Ad3sNEy8M0OgL59FgxTSApQ4qo5OinLAFpi7TzcJEzHBbEC3b34YZfdqWJ4bsC 2NxPIVWgXMATB2cetUS1xXs406q/XwEhxAi3hiBBpVuv7/VqjrvaYUeWtrRv/phP 1rtwHTGeg+GcVfH0tcnnFO5bUecLnLSZ2h8mpwRxOi0VD9Op -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:24 2026 by rpki-client