$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa File: 99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa (raw, json) Hash identifier: Jnpzv7xzOGq1aRCv261yKf9UCsRAMK04IXW6GNG3bm0= Subject key identifier: 4A:FC:95:29:E3:38:56:59:8C:0B:99:DC:52:CC:8A:5F:46:0D:3F:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A517387C69E129846DB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 36629 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:51:73:87:c6:9e:12:98:46:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8c35c9c1-3825-4dde-8f68-0f1e356a35db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:f3:2a:77:14:2c:d7:57:58:f6:e4:59:9f: cc:9f:9e:c9:28:9a:17:45:45:c0:00:1c:78:8a:5c: b9:5f:01:2f:0b:3a:62:a5:66:8d:e5:d0:17:5e:a6: 5b:66:54:b1:27:83:fc:10:c2:ac:08:15:61:a9:c2: 2f:e9:6f:eb:52:df:c6:10:53:9d:b5:ae:7c:ca:0b: 8c:b3:20:62:1b:60:1a:7d:28:a2:0a:5c:01:31:41: 6c:23:1c:93:32:b9:d5:b6:b9:bb:68:5c:bd:0a:29: 8e:65:e8:e0:ae:16:29:78:b8:fc:73:f9:25:b4:c2: 8a:e3:02:fb:55:15:3e:c1:51:39:94:24:81:44:88: 5b:03:86:46:be:2b:a9:c2:33:e9:b2:3f:6e:ad:3f: 2c:ed:c9:a5:ad:f5:2b:47:b5:a0:13:f2:c6:fa:e9: e1:f8:62:f0:61:22:24:52:ee:09:37:8a:f3:a2:aa: b8:ea:cb:55:0d:f1:17:1f:d6:a2:be:22:e3:4f:15: 8c:c8:0d:e0:d9:8e:ca:0e:ce:56:a8:fc:52:19:d7: d8:3c:00:3e:60:c8:67:75:90:d5:d6:3a:16:cf:5e: 2a:f4:e7:a5:bd:dc:c5:d3:8f:b3:8c:38:48:3a:ca: 1f:e1:63:df:7b:74:25:d3:93:37:25:a7:ad:38:6e: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:95:29:E3:38:56:59:8C:0B:99:DC:52:CC:8A:5F:46:0D:3F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:16:d0:92:50:ec:15:9e:02:da:e8:7b:92:ab:a4:fc:5c:a8: b9:c3:f6:d1:1b:6e:46:bc:7e:ce:25:c2:8c:41:40:d0:49:42: 08:f4:4c:7a:33:08:04:56:07:53:ef:f2:19:19:92:f2:b3:f1: 37:39:50:6d:0c:ce:a8:84:61:b6:ec:6e:cf:62:7a:cb:12:07: 8b:9a:af:75:92:31:42:6d:7c:07:ce:63:b4:80:ae:44:74:61: de:6c:01:7e:28:51:8a:b7:2d:d9:b6:67:95:cb:86:dc:cf:ab: 80:6c:5f:9f:6d:07:03:af:db:16:88:7f:1c:bd:3d:85:a7:5c: 5c:9f:a9:15:b8:94:df:4b:be:2c:d0:3d:88:46:84:ba:b4:90: cd:d9:79:7d:2b:c0:21:4a:47:55:3e:4a:54:c9:bc:6f:bd:89: dd:0f:bf:5f:1f:6b:1a:ea:12:f0:b0:b2:cd:19:6b:eb:20:b1: eb:3c:cd:23:a9:84:41:1a:6e:97:e5:27:71:75:bd:2b:5f:70: 07:28:1a:20:be:32:b6:46:4f:6c:82:69:4d:96:55:45:3c:b2: 9a:ec:27:41:fd:2c:38:9d:f0:e9:f9:48:44:43:d9:34:dd:36: d0:be:ee:ea:b6:50:49:f7:93:c5:61:55:93:e1:ac:96:1b:74: 3d:08:6e:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jelFzh8aeEphG2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGMzNWM5YzEtMzgyNS00ZGRlLThmNjgtMGYxZTM1NmEzNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YHzKncULNdXWPbkWZ/Mn57JKJoXRUXAABx4 ily5XwEvCzpipWaN5dAXXqZbZlSxJ4P8EMKsCBVhqcIv6W/rUt/GEFOdta58yguM syBiG2AafSiiClwBMUFsIxyTMrnVtrm7aFy9CimOZejgrhYpeLj8c/kltMKK4wL7 VRU+wVE5lCSBRIhbA4ZGviupwjPpsj9urT8s7cmlrfUrR7WgE/LG+unh+GLwYSIk Uu4JN4rzoqq46stVDfEXH9aiviLjTxWMyA3g2Y7KDs5WqPxSGdfYPAA+YMhndZDV 1joWz14q9OelvdzF04+zjDhIOsof4WPfe3Ql05M3JaetOG6XUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEr8lSnjOFZZjAuZ3FLMil9GDT81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTlhYTNkYjktODY1ZS0z NmY5LWIxZjItY2Y2Y2VmY2FlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAW0JJQ7BWeAtroe5KrpPxcqLnD9tEbbka8fs4lwoxBQNBJQgj0 THozCARWB1Pv8hkZkvKz8Tc5UG0MzqiEYbbsbs9iessSB4uar3WSMUJtfAfOY7SA rkR0Yd5sAX4oUYq3Ldm2Z5XLhtzPq4BsX59tBwOv2xaIfxy9PYWnXFyfqRW4lN9L vizQPYhGhLq0kM3ZeX0rwCFKR1U+SlTJvG+9id0Pv18faxrqEvCwss0Za+sgses8 zSOphEEabpflJ3F1vStfcAcoGiC+MrZGT2yCaU2WVUU8sprsJ0H9LDid8On5SERD 2TTdNtC+7uq2UEn3k8VhVZPhrJYbdD0IbjI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:52 2026 by rpki-client