$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa File: 836d6194-c8b4-30fb-a5d1-88439615aa2a.roa (raw, json) Hash identifier: Es32msRPVYGmx2T2JgcNbY2W1MFkGVj7UMYoMlS8nIM= Subject key identifier: 23:82:E5:CF:38:BB:0E:AE:71:22:8A:B4:8C:8C:44:A7:77:61:FB:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8BCC41C261D6445B66C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396573 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8b:cc:41:c2:61:d6:44:5b:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5e4a125f-20cd-42f6-881d-8bfb816282c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:74:5b:78:10:f2:c4:d4:46:7c:fc:7d:d1: 75:23:10:8f:63:91:ec:77:56:dd:b8:4e:a1:aa:d8: 6d:ae:b7:4b:74:f8:5b:23:6e:26:f9:fd:20:19:c9: a0:f6:86:99:de:8e:ff:5f:da:26:ad:4c:69:f7:8e: e2:df:df:b6:1f:9d:89:12:6e:53:1d:6a:3e:ce:fb: 1f:6a:22:65:ec:97:d4:e6:e1:9e:34:8e:b2:86:89: 2c:e7:60:0e:a0:92:66:63:9a:55:64:6e:5c:41:48: ad:94:6a:75:3e:02:61:52:f7:37:03:1c:f8:74:dc: 85:fd:48:b0:4a:e8:5a:90:8a:7a:e5:87:9d:c3:c8: 38:22:4d:45:c3:e2:8e:d3:9d:e2:df:77:db:93:af: c9:94:96:01:58:8f:8d:a2:cf:96:f6:72:28:5c:e3: 6b:05:b0:0b:4d:58:87:21:f3:5c:76:83:ac:46:89: c5:dd:b1:31:cb:c5:35:11:f8:20:ad:e0:88:80:c6: 63:9a:60:a1:e6:bc:60:e3:ea:48:e9:bb:e3:88:fd: 88:48:21:cb:d4:ba:7e:90:e0:dd:24:e5:50:c6:a0: 63:93:3a:95:fc:e3:93:38:be:f5:bf:8d:87:1c:0a: 78:34:e9:da:1e:92:47:2c:d8:6a:4c:a0:73:e8:92: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:82:E5:CF:38:BB:0E:AE:71:22:8A:B4:8C:8C:44:A7:77:61:FB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/836d6194-c8b4-30fb-a5d1-88439615aa2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:64:03:ad:d1:01:88:51:c2:7b:10:81:8d:b0:4d:67:e5:79: a9:f0:4e:e7:88:fa:73:7c:72:fb:e4:ef:7b:86:81:77:89:98: 49:7c:60:28:0a:e2:34:ec:06:99:74:eb:53:02:ff:27:f4:6e: 63:17:91:82:5f:cf:10:50:52:ee:c7:7c:dc:f5:be:89:30:1d: c7:1e:68:3e:8c:f3:30:77:ec:b7:ba:23:ac:50:5a:bd:29:0d: cc:a4:76:b2:4a:9e:9d:7b:f8:81:54:7c:62:6d:b8:b9:0d:d8: 5a:20:1d:62:ad:06:3e:04:db:45:95:42:33:8c:d2:06:be:95: 39:9c:76:ba:ea:11:20:16:b6:c0:4e:75:67:97:c6:41:97:eb: 7a:58:31:63:38:6f:54:f9:61:57:36:86:76:8b:ed:dd:16:02: 3b:fc:12:23:b1:07:ce:43:ef:42:be:ae:29:a6:c7:24:e0:1e: 0f:18:d8:83:96:1c:0b:e5:2a:fd:b8:be:27:46:b5:7e:c6:4d: 17:b9:35:dc:40:61:cb:22:84:25:1c:32:84:91:a2:0f:52:37: b8:72:4b:5c:6c:8c:7c:60:fc:6c:f9:ae:d7:3e:1d:24:d4:4c: 2a:a5:9c:93:f8:15:07:bd:d7:b2:74:d8:d9:33:92:8b:c4:77: 3c:b0:b7:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCovMQcJh1kRbZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWU0YTEyNWYtMjBjZC00MmY2LTg4MWQtOGJmYjgxNjI4MmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQd0W3gQ8sTURnz8fdF1IxCPY5Hsd1bduE6h qthtrrdLdPhbI24m+f0gGcmg9oaZ3o7/X9omrUxp947i39+2H52JEm5THWo+zvsf aiJl7JfU5uGeNI6yhoks52AOoJJmY5pVZG5cQUitlGp1PgJhUvc3Axz4dNyF/Uiw SuhakIp65Yedw8g4Ik1Fw+KO053i33fbk6/JlJYBWI+Nos+W9nIoXONrBbALTViH IfNcdoOsRonF3bExy8U1EfggreCIgMZjmmCh5rxg4+pI6bvjiP2ISCHL1Lp+kODd JOVQxqBjkzqV/OOTOL71v42HHAp4NOnaHpJHLNhqTKBz6JL9IQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCOC5c84uw6ucSKKtIyMRKd3YfujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODM2ZDYxOTQtYzhiNC0z MGZiLWE1ZDEtODg0Mzk2MTVhYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuZAOt0QGIUcJ7EIGNsE1n5Xmp8E7niPpzfHL7 5O97hoF3iZhJfGAoCuI07AaZdOtTAv8n9G5jF5GCX88QUFLux3zc9b6JMB3HHmg+ jPMwd+y3uiOsUFq9KQ3MpHaySp6de/iBVHxibbi5DdhaIB1irQY+BNtFlUIzjNIG vpU5nHa66hEgFrbATnVnl8ZBl+t6WDFjOG9U+WFXNoZ2i+3dFgI7/BIjsQfOQ+9C vq4ppsck4B4PGNiDlhwL5Sr9uL4nRrV+xk0XuTXcQGHLIoQlHDKEkaIPUje4cktc bIx8YPxs+a7XPh0k1EwqpZyT+BUHvdeydNjZM5KLxHc8sLcD -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:26 2026 by rpki-client