$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa File: 7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa (raw, json) Hash identifier: uRDP73+d2fyrS/qxaLP4u76wQVlJJfM4Z8kgJ0TxaaE= Subject key identifier: 77:D3:1D:5B:31:85:63:C5:A4:64:FD:29:BF:88:91:3D:5A:71:C9:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B27D2D2731EF4C3FD700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa Signing time: Tue 17 Mar 2026 14:07:03 +0000 ROA not before: Tue 17 Mar 2026 14:07:03 +0000 ROA not after: Mon 15 Jun 2026 14:07:03 +0000 asID: 396586 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b2:7d:2d:27:31:ef:4c:3f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:03 2026 GMT Not After : Jun 15 14:07:03 2026 GMT Subject: CN=fcdbc762-c6b5-4d73-9a25-8f722b8a4e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:4f:6a:f4:75:47:55:8c:9c:30:07:fc:f1: 34:f5:ad:25:54:14:81:9b:a9:5c:58:bb:1f:25:4b: 53:fe:da:7b:fa:bf:99:0f:47:98:36:bd:e7:84:1b: 0f:48:59:be:08:e1:53:4f:ee:7b:0e:8e:91:05:f0: c4:64:38:42:10:d4:0a:08:e8:4f:26:cc:b5:e8:bd: 39:a2:1c:75:50:98:2c:19:2a:8b:7c:73:2f:34:bf: 38:79:a2:87:8c:41:83:3c:80:e0:cc:50:af:13:c8: d2:ae:b5:8c:27:3c:15:c0:c8:dd:e5:f7:a4:1b:46: b7:5e:7f:61:5e:54:ee:b0:c9:d4:dd:dd:ea:a1:fb: 95:76:04:6c:8a:d8:ca:4e:35:6e:db:de:17:52:51: 8d:d3:c1:88:c5:17:24:1c:34:ae:99:7b:8e:25:26: 09:ac:78:41:1d:a8:a1:c9:bb:97:b4:06:33:77:50: 3c:0c:ff:54:ba:58:0a:b7:5d:9a:75:bd:bb:dc:07: bd:bb:81:2e:dd:f9:43:f1:05:c2:c6:21:d5:8a:3e: 04:54:41:b1:2f:b2:72:29:f5:6e:c6:6e:02:d1:ab: e7:3a:f5:19:49:4f:aa:89:eb:6a:11:49:e2:30:d5: 49:c0:40:5c:68:c1:2a:fa:44:fa:b5:26:e6:3b:2e: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:1D:5B:31:85:63:C5:A4:64:FD:29:BF:88:91:3D:5A:71:C9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7389d174-0f7d-3d33-977d-7d6fbf0ac73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ea:fb:99:54:3a:0b:f0:cd:20:bd:a1:e6:ea:a4:08:e8:dd: b1:b2:24:77:fa:23:60:a8:0e:10:67:11:69:93:5a:00:f3:ad: 67:98:f0:02:4d:6a:a1:91:5c:c9:dc:31:35:7d:08:4a:3f:ac: 8d:88:ae:33:4b:3d:d2:c3:6a:bd:e6:71:6a:d2:10:a7:f6:2b: 4b:0f:a6:b4:3c:4e:db:72:10:ff:9d:ed:79:32:a6:8e:b0:46: 13:30:d8:14:41:87:e1:42:ca:29:98:f5:2b:b6:c4:46:50:84: c3:97:55:a4:c8:e2:f1:9f:a9:af:f8:48:35:73:f3:cf:6a:9f: 0e:f2:35:a7:c7:36:fc:d4:17:a6:14:3e:58:d2:60:ae:bd:05: 59:b3:68:4c:81:c1:fe:84:86:d7:5a:96:0c:5b:cf:be:52:6c: ba:c5:58:24:f8:dd:cd:df:19:0f:bd:d4:bc:64:19:93:e1:3b: 02:93:a9:12:cd:6f:bf:85:83:25:cf:00:95:97:3e:78:39:61: 8c:0f:01:e9:08:39:f4:a5:d3:9e:a5:f0:f2:2a:a0:ba:c1:5f: 08:82:ad:09:4f:0c:b0:6f:c2:da:32:ee:38:ef:f4:6f:5c:77: ce:00:70:c9:3c:d3:bc:27:2a:4f:33:1a:73:f6:fd:45:5c:0a: 11:f8:eb:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bJ9LScx70w/1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwM1oXDTI2MDYxNTE0MDcwM1owLzEtMCsGA1UEAxMk ZmNkYmM3NjItYzZiNS00ZDczLTlhMjUtOGY3MjJiOGE0ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixdPavR1R1WMnDAH/PE09a0lVBSBm6lcWLsf JUtT/tp7+r+ZD0eYNr3nhBsPSFm+COFTT+57Do6RBfDEZDhCENQKCOhPJsy16L05 ohx1UJgsGSqLfHMvNL84eaKHjEGDPIDgzFCvE8jSrrWMJzwVwMjd5fekG0a3Xn9h XlTusMnU3d3qofuVdgRsitjKTjVu294XUlGN08GIxRckHDSumXuOJSYJrHhBHaih ybuXtAYzd1A8DP9UulgKt12adb273Ae9u4Eu3flD8QXCxiHVij4EVEGxL7JyKfVu xm4C0avnOvUZSU+qietqEUniMNVJwEBcaMEq+kT6tSbmOy4LWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfTHVsxhWPFpGT9Kb+IkT1accmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM4OWQxNzQtMGY3ZC0z ZDMzLTk3N2QtN2Q2ZmJmMGFjNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHq+5lUOgvwzSC9oebqpAjo3bGyJHf6I2CoDhBnEWmTWgDzrWeY 8AJNaqGRXMncMTV9CEo/rI2IrjNLPdLDar3mcWrSEKf2K0sPprQ8TttyEP+d7Xky po6wRhMw2BRBh+FCyimY9Su2xEZQhMOXVaTI4vGfqa/4SDVz889qnw7yNafHNvzU F6YUPljSYK69BVmzaEyBwf6Ehtdalgxbz75SbLrFWCT43c3fGQ+91LxkGZPhOwKT qRLNb7+FgyXPAJWXPng5YYwPAekIOfSl056l8PIqoLrBXwiCrQlPDLBvwtoy7jjv 9G9cd84AcMk807wnKk8zGnP2/UVcChH46wk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:03:06 2026 by rpki-client