$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa File: 9fa7604e-6116-387d-b30a-5905d9aea60c.roa (raw, json) Hash identifier: JSZJM4oyidq5Vuw8rqXtmXgxBxCu39VLw2JPMY0aiFc= Subject key identifier: 34:DC:09:0C:C2:01:07:CB:B6:71:28:34:00:0A:4F:07:CB:2E:94:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA516EB972BF281F85E680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397197 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:51:6e:b9:72:bf:28:1f:85:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=c07b660d-32f0-47b4-9977-7dc0358495a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:cb:7c:61:2f:d3:0c:79:72:ca:4c:61:c8: 6e:0b:17:a5:9a:c3:ca:31:ea:1a:ae:c2:ad:91:7f: 96:b8:a3:30:35:a0:2e:89:31:a9:8b:ba:10:4a:87: 01:1c:6c:f8:e7:6c:b3:f6:e1:d9:19:36:2b:e1:07: ab:e6:b1:cc:0f:6c:c4:74:1a:8c:78:ee:e7:01:cf: 88:c3:40:27:d5:28:8d:0d:03:c8:7e:d5:96:2c:81: 1c:80:98:b5:ba:ff:4d:11:bc:14:3b:64:4e:ce:92: 7c:51:9c:a3:16:87:bf:b0:d6:66:01:ae:a7:9f:c9: 4f:7c:96:bf:53:9a:44:b8:84:77:8f:34:9f:03:4a: ce:0c:b9:33:de:dd:90:6e:d7:f3:3d:01:f7:e9:77: 8d:c5:ef:89:58:76:d7:64:c6:3f:be:7e:09:19:bd: c5:f0:33:38:d3:34:d2:5d:6b:1b:fa:0d:50:c5:0d: bc:fa:e2:37:29:73:de:63:33:6b:d6:5b:38:bd:4b: e7:33:7e:35:c8:e4:1d:08:47:ca:73:78:08:60:71: cc:37:09:eb:5a:90:f2:62:cd:d2:16:1e:d5:f5:22: 36:f4:c6:91:23:36:2a:93:91:e9:09:ec:0c:b3:26: a4:d4:01:99:90:53:1e:ec:6d:65:cc:05:57:2f:75: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:09:0C:C2:01:07:CB:B6:71:28:34:00:0A:4F:07:CB:2E:94:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9fa7604e-6116-387d-b30a-5905d9aea60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:76:f9:c1:36:41:d3:aa:d6:55:d0:b2:3c:a4:fe:9b:5c:47: c2:56:8a:a2:06:05:f7:4c:30:09:5d:6f:6f:28:c1:5a:f0:12: 23:44:ff:70:60:5f:cc:60:de:1f:64:20:56:30:1f:1a:fc:04: 28:44:97:e3:b3:c3:e8:62:6f:6e:51:69:86:05:e1:61:18:47: b0:70:d6:df:78:23:8d:a6:5f:77:ca:b8:18:8d:c1:45:c7:ae: 1b:57:01:61:a4:c3:fe:78:e4:47:35:d1:5a:1d:2c:23:b2:b1: 99:9e:b1:79:a1:7f:f9:08:e7:89:8b:14:3c:1a:19:ba:6b:aa: f0:eb:7c:0b:2e:b2:a1:5c:39:98:99:17:a6:c1:73:22:ab:86: 06:4b:6c:92:42:68:a2:87:7c:5b:d0:ac:44:d3:c2:0b:4e:b5: 72:64:07:39:05:2f:7d:a1:83:2f:06:1b:9f:e0:41:5b:b7:52: 16:f0:bb:4a:31:ed:a9:bd:0a:c1:9b:df:c7:9b:6e:56:35:3e: 28:45:1d:d8:07:4a:da:fd:6f:7d:5b:7a:16:85:f9:2f:b9:87: ac:0b:e2:a5:a9:43:91:de:d8:86:d2:a7:32:b0:db:d5:c4:c8: b2:1e:4d:f9:c0:fe:1a:72:80:24:ce:63:2d:8b:18:66:4c:04: 9a:e9:45:4e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lFuuXK/KB+F5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzA3YjY2MGQtMzJmMC00N2I0LTk5NzctN2RjMDM1ODQ5NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw/LfGEv0wx5cspMYchuCxelmsPKMeoarsKt kX+WuKMwNaAuiTGpi7oQSocBHGz452yz9uHZGTYr4Qer5rHMD2zEdBqMeO7nAc+I w0An1SiNDQPIftWWLIEcgJi1uv9NEbwUO2ROzpJ8UZyjFoe/sNZmAa6nn8lPfJa/ U5pEuIR3jzSfA0rODLkz3t2QbtfzPQH36XeNxe+JWHbXZMY/vn4JGb3F8DM40zTS XWsb+g1QxQ28+uI3KXPeYzNr1ls4vUvnM341yOQdCEfKc3gIYHHMNwnrWpDyYs3S Fh7V9SI29MaRIzYqk5HpCewMsyak1AGZkFMe7G1lzAVXL3XWSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDTcCQzCAQfLtnEoNAAKTwfLLpQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWZhNzYwNGUtNjExNi0z ODdkLWIzMGEtNTkwNWQ5YWVhNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzdvnBNkHTqtZV0LI8pP6bXEfCVoqiBgX3TDAJ XW9vKMFa8BIjRP9wYF/MYN4fZCBWMB8a/AQoRJfjs8PoYm9uUWmGBeFhGEewcNbf eCONpl93yrgYjcFFx64bVwFhpMP+eORHNdFaHSwjsrGZnrF5oX/5COeJixQ8Ghm6 a6rw63wLLrKhXDmYmRemwXMiq4YGS2ySQmiih3xb0KxE08ILTrVyZAc5BS99oYMv Bhuf4EFbt1IW8LtKMe2pvQrBm9/Hm25WNT4oRR3YB0ra/W99W3oWhfkvuYesC+Kl qUOR3tiG0qcysNvVxMiyHk35wP4acoAkzmMtixhmTASa6UVO -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:47 2026 by rpki-client