$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63c95501-cba7-3555-aa01-1744f07ddc03.roa File: 63c95501-cba7-3555-aa01-1744f07ddc03.roa (raw, json) Hash identifier: aW6Kqid1zBd6JSNhCS8Eaqc0J36RiaX1gnDEcp00oIs= Subject key identifier: 61:D9:7D:7C:53:A7:99:79:26:C7:81:28:A3:4A:86:66:EF:7D:65:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AF67E0AF13A0097E9800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63c95501-cba7-3555-aa01-1744f07ddc03.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 396826 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:af:67:e0:af:13:a0:09:7e:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=81d56772-a481-4d15-9cd0-88bd92c32e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:44:a6:66:80:11:41:5b:13:34:ff:c7:51: af:29:e0:93:e0:36:79:c0:9d:9a:21:2d:80:fb:3c: 0b:ea:81:db:f6:3c:7c:6a:fe:71:2d:a2:ad:75:71: 4b:88:c6:79:08:81:d8:9f:d1:b8:e5:61:4a:50:c1: 60:38:f4:c0:0a:d6:48:cb:50:0a:71:34:a1:cf:46: 97:68:ca:c4:52:d5:7f:c3:9b:40:63:7c:7e:fa:58: 3c:47:b7:ff:5c:56:50:96:eb:2a:27:75:3d:03:52: 42:b4:c5:1b:f7:40:6a:45:f3:08:6b:7b:66:e2:7e: ef:1f:1d:34:9e:e7:a7:ce:10:13:25:fd:29:80:28: 30:c5:84:ca:e6:1b:52:99:b6:6a:db:66:08:e1:cd: 2a:c6:7d:f7:2d:e7:2e:93:69:13:63:8f:18:b0:fb: 42:56:a8:73:da:88:cb:01:0e:c5:63:d6:92:c6:03: d8:f0:b9:eb:1f:a5:81:d8:e0:3f:18:b2:9d:7a:6f: b9:9b:16:1f:f3:55:00:64:72:17:b7:59:87:73:23: f8:3b:09:e5:6f:bc:7a:c0:bd:96:9d:be:9c:60:0a: 60:75:18:65:d6:44:6b:b9:81:04:d3:eb:bb:67:e7: 70:9c:e2:58:c2:0b:84:9d:5e:92:e9:fc:73:cc:2d: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:7D:7C:53:A7:99:79:26:C7:81:28:A3:4A:86:66:EF:7D:65:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63c95501-cba7-3555-aa01-1744f07ddc03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:05:fd:a9:d2:8d:85:b5:c1:de:82:d9:14:77:73:de:f6:6a: 70:c6:62:e8:2c:e1:a6:33:5f:8e:e0:e5:a7:8c:09:5a:77:0c: 79:b3:fa:7c:3e:d8:b5:86:42:05:9f:0a:2d:a7:37:af:32:d9: f0:47:87:76:5f:58:b2:3b:67:83:2b:80:96:55:07:fe:98:0f: 0e:16:85:fd:eb:97:d2:5c:b7:b9:0c:76:ed:fd:15:65:21:c3: ff:fc:7e:b4:1d:96:cb:f8:a3:52:45:29:3f:52:7d:6b:df:8b: f9:60:a8:4f:df:88:e8:7b:c6:2f:28:7f:18:06:02:d8:48:e3: 69:40:25:15:f0:ff:7e:1d:45:01:a7:00:6b:e8:a9:e9:4b:5f: f3:af:bb:93:9c:38:b9:df:14:fa:6d:37:d3:6d:b4:a8:ae:00: 0b:d0:d9:65:82:3e:60:dc:14:61:40:ef:55:6a:36:b7:e2:5c: d7:cd:da:fb:e4:52:68:fe:da:a8:4d:cb:f9:2a:36:c7:46:e1: cd:e6:2c:c8:95:60:59:21:aa:95:ad:71:d7:4d:8b:22:16:8f: 27:41:c3:b7:f9:cd:42:9e:ed:ac:0a:9e:43:42:b0:92:6b:8e: fa:e4:3b:f0:be:3f:58:85:bf:0f:a8:78:e3:eb:2e:b9:f4:7e: 77:b5:bb:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a9n4K8ToAl+mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk ODFkNTY3NzItYTQ4MS00ZDE1LTljZDAtODhiZDkyYzMyZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7tEpmaAEUFbEzT/x1GvKeCT4DZ5wJ2aIS2A +zwL6oHb9jx8av5xLaKtdXFLiMZ5CIHYn9G45WFKUMFgOPTACtZIy1AKcTShz0aX aMrEUtV/w5tAY3x++lg8R7f/XFZQlusqJ3U9A1JCtMUb90BqRfMIa3tm4n7vHx00 nuenzhATJf0pgCgwxYTK5htSmbZq22YI4c0qxn33Lecuk2kTY48YsPtCVqhz2ojL AQ7FY9aSxgPY8LnrH6WB2OA/GLKdem+5mxYf81UAZHIXt1mHcyP4Ownlb7x6wL2W nb6cYApgdRhl1kRruYEE0+u7Z+dwnOJYwguEnV6S6fxzzC0IswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGHZfXxTp5l5JseBKKNKhmbvfWXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjNjOTU1MDEtY2JhNy0z NTU1LWFhMDEtMTc0NGYwN2RkYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkF/anSjYW1wd6C2RR3c972anDGYugs4aYzX47g5aeMCVp3DHmz +nw+2LWGQgWfCi2nN68y2fBHh3ZfWLI7Z4MrgJZVB/6YDw4Whf3rl9Jct7kMdu39 FWUhw//8frQdlsv4o1JFKT9SfWvfi/lgqE/fiOh7xi8ofxgGAthI42lAJRXw/34d RQGnAGvoqelLX/Ovu5OcOLnfFPptN9NttKiuAAvQ2WWCPmDcFGFA71VqNrfiXNfN 2vvkUmj+2qhNy/kqNsdG4c3mLMiVYFkhqpWtcddNiyIWjydBw7f5zUKe7awKnkNC sJJrjvrkO/C+P1iFvw+oeOPrLrn0fne1u8Q= -----END CERTIFICATE-----Generated at Thu Mar 26 13:15:16 2026 by rpki-client