$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa File: 6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa (raw, json) Hash identifier: SK1MwPEhbidADCv0AF6UliF5vAyiAbb7xAce+eXW4bs= Subject key identifier: D7:DD:93:C0:E6:7E:7E:6C:92:00:D9:19:E3:42:1D:75:9F:12:37:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA52CBD0BE722A56A803A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396549 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:52:cb:d0:be:72:2a:56:a8:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=850f616d-c813-4194-a916-49c8b5c3021b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:51:ef:45:41:dc:b6:3a:cb:23:d2:df:a7: b8:38:a1:ce:bb:64:54:3a:11:ef:0d:7d:b3:2c:86: 87:4f:e3:9d:23:55:9d:7b:2e:36:54:22:4a:2d:bd: f9:f6:2b:58:83:2d:64:80:b8:ff:7a:b6:00:71:ed: 37:d2:f5:88:c7:e5:46:61:a3:18:cc:31:1f:df:0c: b0:3d:5e:59:78:0b:68:60:53:e1:35:f5:22:c1:c7: 59:74:17:53:1c:68:7c:62:2f:4e:19:b7:7e:2b:bd: d7:6f:0f:b2:81:50:9a:34:c2:83:7f:50:3e:be:1a: 53:d1:14:42:7d:ef:0d:e0:3a:ca:64:81:41:8a:a8: 5b:60:51:9c:c8:96:6e:1d:9e:b3:92:d4:65:61:a5: fa:a4:c5:75:cb:68:a9:0f:f8:ed:f2:7d:26:b9:15: 7e:97:e1:83:ae:69:26:c3:b3:e0:2f:6e:47:07:b8: 72:50:5d:fb:9c:ef:2b:f5:d8:f3:4d:56:aa:ec:41: 48:6c:ac:47:27:d5:21:76:fc:f1:90:31:66:6e:60: 33:b1:5a:a3:09:0f:f2:88:34:94:8d:2e:0c:50:f6: ee:8a:fb:3c:62:f8:ed:c3:a2:53:97:0a:0a:d1:f5: 77:46:be:d9:50:65:69:3d:a7:87:b8:3c:67:5d:a5: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DD:93:C0:E6:7E:7E:6C:92:00:D9:19:E3:42:1D:75:9F:12:37:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f3:15:f6:5c:ee:42:ae:c1:8a:a0:93:12:bf:06:cc:82:1c: 07:5e:c1:c2:74:6a:2d:1b:82:2e:8f:9f:ac:5d:90:a3:f4:e5: b5:37:62:47:f1:50:3f:86:65:aa:ba:e1:e7:96:3b:f5:6d:dc: 7b:b3:b0:fb:c2:7b:17:91:45:c6:b1:7b:38:5b:97:42:9a:75: 26:f1:48:3f:17:d3:c4:a7:cf:a0:2f:a7:e5:ad:49:9a:0d:d4: b4:8a:b2:30:91:d2:15:f1:db:95:58:8e:d3:90:b9:fe:de:ef: 81:f7:99:b7:65:04:a1:3e:68:1f:a2:97:14:6b:0f:2e:90:4f: f8:e0:5a:bd:2c:59:ed:59:df:0c:87:30:77:17:cb:c5:a7:9c: 88:0c:6c:62:4c:9c:d2:b7:a4:8f:32:be:75:9f:3f:0c:50:b8: 50:16:49:cd:5f:30:65:c9:8b:88:d1:e6:f9:05:45:db:8e:12: fb:69:50:d7:05:22:1c:cd:43:aa:dd:66:0e:9a:85:df:2e:a4: 31:49:bc:c1:6b:0a:46:cf:4f:67:f3:34:10:34:ea:f2:97:4d: 61:a5:6a:ca:9a:a7:cc:33:94:c0:6a:fa:7f:4a:ab:74:d1:ee: 9f:c1:de:4e:8b:06:bf:24:23:31:31:ae:d7:fd:18:fd:c0:6e: f9:1d:eb:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lLL0L5yKlaoA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODUwZjYxNmQtYzgxMy00MTk0LWE5MTYtNDljOGI1YzMwMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxR70VB3LY6yyPS36e4OKHOu2RUOhHvDX2z LIaHT+OdI1Wdey42VCJKLb359itYgy1kgLj/erYAce030vWIx+VGYaMYzDEf3wyw PV5ZeAtoYFPhNfUiwcdZdBdTHGh8Yi9OGbd+K73Xbw+ygVCaNMKDf1A+vhpT0RRC fe8N4DrKZIFBiqhbYFGcyJZuHZ6zktRlYaX6pMV1y2ipD/jt8n0muRV+l+GDrmkm w7PgL25HB7hyUF37nO8r9djzTVaq7EFIbKxHJ9UhdvzxkDFmbmAzsVqjCQ/yiDSU jS4MUPbuivs8Yvjtw6JTlwoK0fV3Rr7ZUGVpPaeHuDxnXaXNXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNfdk8Dmfn5skgDZGeNCHXWfEjf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE5N2U0YzUtNGNlNC0z MTg0LTk1MTMtY2EzN2UwYTZmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBX8xX2XO5CrsGKoJMSvwbMghwHXsHCdGotG4Iu j5+sXZCj9OW1N2JH8VA/hmWquuHnljv1bdx7s7D7wnsXkUXGsXs4W5dCmnUm8Ug/ F9PEp8+gL6flrUmaDdS0irIwkdIV8duVWI7TkLn+3u+B95m3ZQShPmgfopcUaw8u kE/44Fq9LFntWd8MhzB3F8vFp5yIDGxiTJzSt6SPMr51nz8MULhQFknNXzBlyYuI 0eb5BUXbjhL7aVDXBSIczUOq3WYOmoXfLqQxSbzBawpGz09n8zQQNOryl01hpWrK mqfMM5TAavp/Sqt00e6fwd5Oiwa/JCMxMa7X/Rj9wG75HeuO -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:19 2026 by rpki-client