$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa File: 868a7808-3776-3950-9ff8-03f2405c5ff6.roa (raw, json) Hash identifier: 82zHNwsOGB5t51Tq3cSSkQaYr/2hhZw4GtfEvyze/8A= Subject key identifier: 45:5D:77:60:A3:96:03:D9:A6:BF:84:22:5C:F4:71:66:34:EB:AB:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA568ACB3F957E725FC380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396612 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:56:8a:cb:3f:95:7e:72:5f:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=03d5426e-79c0-4def-a185-cfa06ac60225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:e8:e0:a2:9c:64:46:7e:08:f7:d3:25:90: 5a:79:17:61:41:77:0c:34:bc:78:6c:b5:ef:08:49: 1f:7e:cc:1c:b4:7d:67:95:ec:82:fb:d7:8d:d4:43: 33:3e:de:b5:d2:3e:93:80:46:74:be:06:db:32:b3: 8f:b7:3b:c4:0f:be:b8:06:5f:f2:3f:3e:b1:fe:b5: 15:0b:67:5c:1c:52:41:74:1c:73:b5:59:1a:5d:b8: 66:5f:f4:99:67:69:fc:8a:85:0e:78:dc:f4:2f:04: 6c:4a:e6:09:16:8d:17:f2:6d:a3:f1:12:c1:2a:b0: 04:e7:bd:16:eb:01:f6:ca:d8:ab:e7:4d:1d:dd:11: a3:85:c9:ae:e3:fa:ee:48:f9:1c:5f:2a:0d:12:38: 2f:2b:7d:8d:cd:f7:02:67:3c:83:a4:97:33:e2:8b: 5a:8c:90:89:de:73:23:0b:9f:92:f3:fd:fa:65:9c: d5:f4:7f:90:e7:cf:a1:10:7f:53:e8:ac:8e:77:79: 1b:c1:b6:b5:b2:c5:a8:3c:fd:68:2e:b8:0e:89:08: 01:20:26:9a:df:36:a6:99:be:5c:ce:9f:2f:10:40: fd:38:3e:44:c3:4e:9f:6a:98:9d:c8:31:f2:ad:18: 13:b2:bc:ce:ff:12:7b:02:a5:62:e6:d5:2e:e7:58: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5D:77:60:A3:96:03:D9:A6:BF:84:22:5C:F4:71:66:34:EB:AB:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/868a7808-3776-3950-9ff8-03f2405c5ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:26:d2:95:8b:90:c6:85:89:de:bc:35:09:41:7d:bf:b9:9c: 1b:94:b2:80:6c:83:61:b2:c6:5e:63:11:11:2d:f3:7d:5d:4a: 0a:c6:d3:bd:ea:11:e0:f7:f9:69:da:28:21:89:51:30:69:cd: 68:1e:1e:a5:1f:8b:5e:51:bb:92:0f:5c:4b:2f:8d:4b:de:a8: e3:25:66:84:3d:65:29:94:8a:c6:fb:1e:8d:bd:2a:e8:eb:39: 9c:2a:48:6d:c4:7d:e4:c7:aa:01:ec:42:4d:52:c5:ad:43:44: e0:f3:7c:f1:cd:89:3f:68:34:08:f0:cc:45:bc:cc:1f:3e:21: 96:64:b3:8b:c2:d7:9e:ea:30:35:93:0f:6b:c0:c6:ec:30:6f: 74:e2:ea:68:35:f1:b3:06:81:49:85:10:9c:8a:1a:8c:36:25: 60:ff:69:94:f4:c2:d9:bd:4e:94:4d:71:82:f3:5f:38:19:9f: 75:64:c4:ec:e0:89:20:83:50:7d:f6:c6:13:c0:0e:33:7c:c2: 84:66:ab:a9:ef:e8:d8:74:28:0b:b1:e6:ca:39:71:3a:24:d0: f7:91:d0:db:3a:0f:f0:4e:c6:13:75:e8:d5:28:89:9b:87:82: 7c:d9:a2:05:88:a0:62:56:45:a4:99:7b:c9:98:af:51:bb:e7: 58:41:b0:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+laKyz+VfnJfw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MDNkNTQyNmUtNzljMC00ZGVmLWExODUtY2ZhMDZhYzYwMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkXo4KKcZEZ+CPfTJZBaeRdhQXcMNLx4bLXv CEkffswctH1nleyC+9eN1EMzPt610j6TgEZ0vgbbMrOPtzvED764Bl/yPz6x/rUV C2dcHFJBdBxztVkaXbhmX/SZZ2n8ioUOeNz0LwRsSuYJFo0X8m2j8RLBKrAE570W 6wH2ytir500d3RGjhcmu4/ruSPkcXyoNEjgvK32NzfcCZzyDpJcz4otajJCJ3nMj C5+S8/36ZZzV9H+Q58+hEH9T6KyOd3kbwba1ssWoPP1oLrgOiQgBICaa3zammb5c zp8vEED9OD5Ew06fapidyDHyrRgTsrzO/xJ7AqVi5tUu51gP9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEVdd2CjlgPZpr+EIlz0cWY066vgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY4YTc4MDgtMzc3Ni0z OTUwLTlmZjgtMDNmMjQwNWM1ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA0JtKVi5DGhYnevDUJQX2/uZwblLKAbINhssZe YxERLfN9XUoKxtO96hHg9/lp2ighiVEwac1oHh6lH4teUbuSD1xLL41L3qjjJWaE PWUplIrG+x6NvSro6zmcKkhtxH3kx6oB7EJNUsWtQ0Tg83zxzYk/aDQI8MxFvMwf PiGWZLOLwtee6jA1kw9rwMbsMG904upoNfGzBoFJhRCcihqMNiVg/2mU9MLZvU6U TXGC8184GZ91ZMTs4Ikgg1B99sYTwA4zfMKEZqup7+jYdCgLsebKOXE6JND3kdDb Og/wTsYTdejVKImbh4J82aIFiKBiVkWkmXvJmK9Ru+dYQbAP -----END CERTIFICATE-----Generated at Thu Mar 26 13:58:09 2026 by rpki-client