$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa File: 71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa (raw, json) Hash identifier: uu7Udq+KCcWsD6mhQUhtl1v4szGoQ6fMSWXEqzxaH/Q= Subject key identifier: 05:8D:C5:E9:58:08:39:73:20:D4:64:9B:33:4A:FF:B3:A9:DA:63:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A493268EB3D6152E6DE50 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36616 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:49:32:68:eb:3d:61:52:e6:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=42db39d4-bca1-4ef2-bda2-6ef992377845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:cf:30:97:54:66:3f:8f:a6:df:f5:60:e3: 9c:56:41:a3:89:ca:f1:bb:36:51:72:0a:42:a5:62: c9:cd:fd:74:f7:82:dc:4c:67:26:af:78:f4:7b:38: 82:61:78:5f:b7:17:5c:7c:77:1e:22:24:10:f7:11: 17:6c:a7:8a:0a:e4:08:b2:ca:6a:9b:68:2b:01:d9: 36:a4:c7:b4:79:10:c6:d6:3b:c6:4d:d8:e8:9e:b2: f9:e5:31:06:8a:12:49:1d:bc:a9:9c:03:07:19:73: cd:d2:e4:76:ae:26:21:29:98:41:75:2a:b3:6c:df: c6:95:90:e0:09:53:e5:da:1f:49:4e:42:67:66:ea: 0c:20:49:51:33:c6:44:f0:f6:ff:35:e4:04:05:62: 9e:7b:48:18:27:e0:a3:56:31:1a:f4:b8:60:92:f3: 55:fd:38:27:f5:b6:e1:2a:39:d8:69:79:c1:21:54: 6d:b0:86:77:45:92:28:8d:52:bb:c0:98:e5:76:51: ce:d3:50:2f:38:6c:07:f9:0a:2d:5f:bb:a8:fe:0e: ac:88:22:1b:af:a7:9e:45:0b:27:2c:10:a7:cb:a3: 0d:c2:43:19:60:1b:45:3b:8d:c8:a1:82:43:cd:a9: fa:e0:51:88:7e:a9:4e:d4:eb:bb:95:f8:a4:f4:ca: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8D:C5:E9:58:08:39:73:20:D4:64:9B:33:4A:FF:B3:A9:DA:63:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71ec4de7-2b41-310f-b7e8-c10cfac5a4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:75:11:23:14:8d:30:72:8e:d1:b2:89:83:94:2b:4b:b1:9f: 6a:56:17:7b:6b:28:76:03:bb:d9:1b:76:4b:7e:51:62:27:9e: a4:50:1f:b8:2a:52:c6:bd:d1:be:57:f8:b0:80:d7:7b:15:8a: 18:ab:fb:cc:7b:9e:74:aa:68:bc:35:71:bd:3b:7b:ec:f8:d1: 0b:05:96:52:60:48:9d:2c:2f:07:6e:92:03:a7:0a:eb:ca:26: b9:3a:c5:d8:f9:8e:42:02:62:b3:cf:23:4e:8b:7a:98:7e:16: 0e:85:e7:59:a9:ec:2c:42:b4:45:6e:15:18:8d:7d:0c:94:ad: c9:dc:a7:57:6c:5e:85:f7:a0:61:f6:4d:ee:d3:91:81:fc:5e: 98:5c:ba:cb:c4:99:c6:6f:50:62:3d:40:40:6e:39:b4:c2:3b: dd:02:e1:d1:83:b9:cb:d9:a5:8c:6a:12:de:05:5d:33:02:54: 08:a2:ee:be:17:76:d5:64:5c:59:02:10:80:26:2a:5a:28:27: 2d:5d:4b:19:ee:2f:cf:89:39:23:30:9e:12:4f:f7:df:8e:2f: 05:f6:32:1e:26:50:2b:49:4d:c7:67:4b:3a:b3:5e:04:7e:2e: a8:70:02:c7:84:2c:4e:7b:cd:31:54:83:d3:c9:43:60:8b:ba: b1:aa:33:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekkyaOs9YVLm3lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDJkYjM5ZDQtYmNhMS00ZWYyLWJkYTItNmVmOTkyMzc3ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaLPMJdUZj+Ppt/1YOOcVkGjicrxuzZRcgpC pWLJzf1094LcTGcmr3j0eziCYXhftxdcfHceIiQQ9xEXbKeKCuQIsspqm2grAdk2 pMe0eRDG1jvGTdjonrL55TEGihJJHbypnAMHGXPN0uR2riYhKZhBdSqzbN/GlZDg CVPl2h9JTkJnZuoMIElRM8ZE8Pb/NeQEBWKee0gYJ+CjVjEa9LhgkvNV/Tgn9bbh KjnYaXnBIVRtsIZ3RZIojVK7wJjldlHO01AvOGwH+QotX7uo/g6siCIbr6eeRQsn LBCny6MNwkMZYBtFO43IoYJDzan64FGIfqlO1Ou7lfik9MoMjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWNxelYCDlzINRkmzNK/7Op2mPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzFlYzRkZTctMmI0MS0z MTBmLWI3ZTgtYzEwY2ZhYzVhNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFd1ESMUjTByjtGyiYOUK0uxn2pWF3trKHYDu9kbdkt+UWInnqRQ H7gqUsa90b5X+LCA13sVihir+8x7nnSqaLw1cb07e+z40QsFllJgSJ0sLwdukgOn CuvKJrk6xdj5jkICYrPPI06Leph+Fg6F51mp7CxCtEVuFRiNfQyUrcncp1dsXoX3 oGH2Te7TkYH8XphcusvEmcZvUGI9QEBuObTCO90C4dGDucvZpYxqEt4FXTMCVAii 7r4XdtVkXFkCEIAmKlooJy1dSxnuL8+JOSMwnhJP99+OLwX2Mh4mUCtJTcdnSzqz XgR+LqhwAseELE57zTFUg9PJQ2CLurGqMwE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:35 2026 by rpki-client