$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a01d4686-8a13-333a-b5bf-cf9af2975096.roa File: a01d4686-8a13-333a-b5bf-cf9af2975096.roa (raw, json) Hash identifier: 05rrLrLZvGh89ecPK427v0FOSQTIih5Uo13LaBmNnug= Subject key identifier: 09:07:77:88:61:E3:61:F1:49:67:97:97:74:BC:F9:70:85:90:58:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A80D6E37F16496224F120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a01d4686-8a13-333a-b5bf-cf9af2975096.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 10515 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:80:d6:e3:7f:16:49:62:24:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8fd4c6c8-f321-44c0-8842-01c3205d36e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:41:7e:ef:bf:3b:79:d3:0b:2a:3f:0f:6d: d1:fb:74:30:87:39:2b:eb:95:38:5a:8c:21:a3:4b: 25:bc:dd:dc:2e:85:ea:27:70:76:3c:96:3a:86:d1: 3d:8d:8c:4c:a0:fb:b8:69:dc:02:0e:9c:f9:c2:9e: 7a:b4:da:e4:96:c7:bd:a3:b6:28:94:9c:35:f9:89: b7:ab:5f:c2:23:da:ca:4e:87:e6:41:7c:c2:1a:b4: e6:4d:b0:e3:0d:f1:01:71:eb:d4:85:e3:98:36:10: fa:19:2f:aa:a9:3f:38:e0:98:cb:48:63:3d:30:92: 73:c7:1f:0e:c4:31:d2:76:2e:bd:a9:82:f9:c6:7e: 19:aa:08:ab:86:fe:29:d8:ff:eb:04:b9:a4:f7:a2: d1:66:3e:44:14:10:30:9b:0e:2e:4a:a7:cb:7e:7a: 74:d8:a6:94:40:0e:3b:57:83:99:a3:88:26:9d:04: d6:09:ff:0d:59:44:59:a7:48:48:74:58:bc:23:dc: 36:98:f9:88:de:06:d2:90:07:eb:8d:b6:4b:27:4a: c9:71:13:09:85:ee:05:59:30:8d:a3:ea:da:e1:d5: cf:e5:7d:68:cb:b8:37:88:92:95:00:5d:27:d9:c2: 9a:47:79:84:fc:a7:4a:2c:c6:49:70:e4:b5:75:96: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:77:88:61:E3:61:F1:49:67:97:97:74:BC:F9:70:85:90:58:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a01d4686-8a13-333a-b5bf-cf9af2975096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8c:d1:90:c1:74:dc:b7:fc:e4:7e:71:f2:f2:b8:d5:93:67: 92:e3:56:d2:79:50:5b:9c:c3:51:66:44:3e:2e:0d:9c:79:19: f3:1c:6b:08:4f:96:6c:28:40:e7:f1:e9:0a:8e:36:8f:ac:3f: 8b:de:8e:36:63:b1:82:4f:9c:b1:ea:aa:9c:56:eb:e5:3f:80: f9:f9:cf:0e:7a:9c:c1:62:0b:4d:cd:55:cf:10:29:32:1c:c6: 04:3c:df:e3:d2:89:65:90:fa:a7:ce:3f:2f:1a:37:66:e7:37: c9:8e:03:c1:7b:6b:14:67:5e:f2:ae:fb:bb:17:0f:93:35:45: 4e:81:c6:be:cd:ab:69:27:fa:ec:31:78:38:bc:fb:5b:cb:43: 5c:88:e7:d1:ea:cb:cb:24:3d:1a:bc:43:e5:76:6c:0d:54:cf: 0c:8e:16:86:ef:61:6e:29:31:8d:47:c7:e5:e2:11:94:eb:7f: 79:43:01:ba:32:56:54:0d:10:55:fb:f1:d4:08:eb:b1:d7:fb: 62:e8:ad:49:ab:8b:d2:aa:42:fc:96:f8:9c:d0:bb:8c:ec:29: 9d:29:ed:52:d0:2c:5d:57:c4:0e:0d:6b:84:1a:9e:ae:25:22: de:1e:3f:9d:53:d7:56:a8:e0:0f:db:d7:8c:c7:84:67:3b:44: ca:0e:b5:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoDW438WSWIk8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGZkNGM2YzgtZjMyMS00NGMwLTg4NDItMDFjMzIwNWQzNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxBBfu+/O3nTCyo/D23R+3Qwhzkr65U4Wowh o0slvN3cLoXqJ3B2PJY6htE9jYxMoPu4adwCDpz5wp56tNrklse9o7YolJw1+Ym3 q1/CI9rKTofmQXzCGrTmTbDjDfEBcevUheOYNhD6GS+qqT844JjLSGM9MJJzxx8O xDHSdi69qYL5xn4Zqgirhv4p2P/rBLmk96LRZj5EFBAwmw4uSqfLfnp02KaUQA47 V4OZo4gmnQTWCf8NWURZp0hIdFi8I9w2mPmI3gbSkAfrjbZLJ0rJcRMJhe4FWTCN o+ra4dXP5X1oy7g3iJKVAF0n2cKaR3mE/KdKLMZJcOS1dZYTUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAkHd4hh42HxSWeXl3S8+XCFkFi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTAxZDQ2ODYtOGExMy0z MzNhLWI1YmYtY2Y5YWYyOTc1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7jNGQwXTct/zkfnHy8rjVk2eS41bSeVBbnMNR ZkQ+Lg2ceRnzHGsIT5ZsKEDn8ekKjjaPrD+L3o42Y7GCT5yx6qqcVuvlP4D5+c8O epzBYgtNzVXPECkyHMYEPN/j0ollkPqnzj8vGjdm5zfJjgPBe2sUZ17yrvu7Fw+T NUVOgca+zatpJ/rsMXg4vPtby0NciOfR6svLJD0avEPldmwNVM8MjhaG72FuKTGN R8fl4hGU6395QwG6MlZUDRBV+/HUCOux1/ti6K1Jq4vSqkL8lvic0LuM7CmdKe1S 0CxdV8QODWuEGp6uJSLeHj+dU9dWqOAP29eMx4RnO0TKDrUh -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:39 2026 by rpki-client