$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6de8eab9-392b-38a0-9575-7c3e1ffbc176.roa File: 6de8eab9-392b-38a0-9575-7c3e1ffbc176.roa (raw, json) Hash identifier: b+8clvuWT2+1UPLtxwltqWgsN9QNx0re1Yh/Fuv9vJA= Subject key identifier: F5:3D:3C:2E:2C:94:BA:26:5B:5E:4C:85:10:25:90:B8:98:6E:BE:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091252736E24B2EFA0A258C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6de8eab9-392b-38a0-9575-7c3e1ffbc176.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396600 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:52:73:6e:24:b2:ef:a0:a2:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f858b138-4af0-44f0-ba6b-6ade3eab890a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:02:e7:0b:fb:46:88:1a:f4:ca:a7:b8:8c: 6d:16:1b:21:65:5f:56:52:f7:cd:c6:84:34:88:1d: 53:59:d9:61:65:d7:1b:05:9a:21:db:83:47:e9:9e: 01:d2:ce:61:de:48:30:7b:c1:cc:3a:67:df:92:9e: a1:f9:21:00:67:a2:0b:25:c6:06:37:82:5c:2b:1b: cb:c1:c8:2b:47:06:23:d9:d9:25:d4:12:16:d9:71: 0c:39:f8:60:69:23:d7:df:cf:5a:53:1c:77:65:c7: ee:1f:91:0e:5a:ee:39:25:e0:49:95:d1:b2:76:ba: c3:4f:97:26:32:9c:cd:ed:7e:f0:51:db:05:b6:9d: 01:5e:ff:c1:71:f5:fc:94:e0:bc:b0:94:c4:0d:f9: cb:b8:5c:7f:8f:da:95:a4:cc:38:f0:cb:e7:b1:53: 50:60:2e:bc:62:ff:4b:80:61:69:5b:30:7b:0c:f5: 91:aa:2d:ee:5b:0e:64:a4:7c:33:fa:35:9d:80:25: 6c:89:e9:c8:c9:43:15:3c:f8:a8:79:61:a0:ec:64: 71:59:11:23:25:4e:28:34:ff:33:78:10:78:d4:46: 36:2f:50:83:3d:fb:e5:2c:15:be:2e:46:d9:c9:88: e2:f4:15:2d:bc:d6:27:fe:da:ed:24:51:e6:68:4e: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3D:3C:2E:2C:94:BA:26:5B:5E:4C:85:10:25:90:B8:98:6E:BE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6de8eab9-392b-38a0-9575-7c3e1ffbc176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3c:1a:77:a0:c2:b2:18:0b:de:d7:25:cd:bb:d8:52:78:8b: 8d:62:d8:59:f6:53:29:5a:00:80:59:c2:a5:05:40:8e:05:fa: 64:19:f7:36:58:e5:2c:41:06:a0:28:df:49:6c:88:df:58:0f: c1:bb:66:7e:fb:be:dc:99:8d:8b:0d:42:11:82:76:2a:b5:76: 91:a7:73:c4:ad:1b:9a:dd:7c:98:17:78:9a:a2:34:cd:42:93: 02:d4:c2:22:5b:8a:93:27:8d:3e:ad:f2:ad:e6:fb:42:36:54: e7:8a:40:37:3e:c8:6a:95:c2:60:55:7e:34:bc:58:88:2d:ee: 11:06:0b:a0:f9:7a:43:f0:f6:54:ff:b7:76:f2:e1:40:5f:0f: ee:1c:2e:9c:12:d9:5e:8e:5a:a5:da:b6:4d:b5:f7:26:83:53: a7:58:60:33:0b:b5:55:29:51:ff:ce:72:08:19:4e:11:67:10: fc:c9:be:29:bf:a8:c8:e9:a4:02:a2:56:6b:af:6f:08:15:ca: 09:6c:10:33:20:2b:65:44:e6:c3:fd:11:91:b8:43:d0:92:e1: 09:7a:ab:bd:fe:22:cd:8f:49:08:5b:48:a0:a8:bf:9d:16:74: 87:70:9e:f8:b6:d7:73:a9:27:26:e2:d9:bd:d1:db:4d:c9:2f: dc:5a:c5:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElJzbiSy76CiWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Zjg1OGIxMzgtNGFmMC00NGYwLWJhNmItNmFkZTNlYWI4OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYkC5wv7Roga9MqnuIxtFhshZV9WUvfNxoQ0 iB1TWdlhZdcbBZoh24NH6Z4B0s5h3kgwe8HMOmffkp6h+SEAZ6ILJcYGN4JcKxvL wcgrRwYj2dkl1BIW2XEMOfhgaSPX389aUxx3ZcfuH5EOWu45JeBJldGydrrDT5cm MpzN7X7wUdsFtp0BXv/BcfX8lOC8sJTEDfnLuFx/j9qVpMw48MvnsVNQYC68Yv9L gGFpWzB7DPWRqi3uWw5kpHwz+jWdgCVsienIyUMVPPioeWGg7GRxWREjJU4oNP8z eBB41EY2L1CDPfvlLBW+LkbZyYji9BUtvNYn/trtJFHmaE4OSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPU9PC4slLomW15MhRAlkLiYbr4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmRlOGVhYjktMzkyYi0z OGEwLTk1NzUtN2MzZTFmZmJjMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF88GnegwrIYC97XJc272FJ4i41i2Fn2UylaAIBZwqUFQI4F+mQZ 9zZY5SxBBqAo30lsiN9YD8G7Zn77vtyZjYsNQhGCdiq1dpGnc8StG5rdfJgXeJqi NM1CkwLUwiJbipMnjT6t8q3m+0I2VOeKQDc+yGqVwmBVfjS8WIgt7hEGC6D5ekPw 9lT/t3by4UBfD+4cLpwS2V6OWqXatk219yaDU6dYYDMLtVUpUf/OcggZThFnEPzJ vim/qMjppAKiVmuvbwgVyglsEDMgK2VE5sP9EZG4Q9CS4Ql6q73+Is2PSQhbSKCo v50WdIdwnvi213OpJybi2b3R203JL9xaxWo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:29 2026 by rpki-client