$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa File: a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa (raw, json) Hash identifier: ypqEh1zQFeoF/hgrkGlBMX7D7X0f8tg1wP/COPemBuw= Subject key identifier: 54:93:9B:80:54:FE:97:C9:EE:42:F2:38:06:C9:6B:59:79:51:D3:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A267C4C905CAB57818400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 25485 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:26:7c:4c:90:5c:ab:57:81:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=01e15eff-7207-4773-ae6a-c81cf8672e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:97:e9:6e:b7:ad:13:1a:c5:de:31:df:fc: 13:27:e0:ad:97:ed:a4:65:c1:e7:92:53:cf:e6:53: 9a:ff:a8:82:69:eb:a4:dc:08:03:04:1d:15:6c:13: a8:75:85:6f:ee:46:2f:fa:bf:9d:8e:a3:88:ef:e5: e2:3a:9a:b5:fb:5d:8f:6f:d4:52:fa:10:35:96:83: 6c:12:d5:4e:fd:a7:a8:fc:e1:5b:1d:77:66:7a:e8: 91:d5:cf:8e:a6:bb:e3:6e:76:25:e9:5b:71:bf:52: d3:62:be:0b:0a:b3:b4:a3:be:b3:d4:9d:2b:71:7c: 41:1b:34:46:25:20:3b:39:97:21:c3:ea:79:73:38: 7e:3b:43:20:49:1d:bc:76:c5:37:36:83:f2:ca:73: f3:54:12:fd:f0:6e:86:be:93:19:7c:db:39:48:a7: 27:d1:33:95:2c:f2:0d:c5:23:e0:79:ec:97:89:16: 12:94:c1:e3:cd:f6:c0:2c:c4:27:98:4d:e0:c9:c2: 35:b6:c1:fd:2a:c3:00:62:44:1b:6e:1c:25:9f:1e: cd:b5:1b:2d:f2:5f:39:f4:5e:26:cc:ad:15:5d:10: 43:ee:5e:18:6b:b7:3d:4d:be:c8:e2:93:3c:63:9b: 4e:7f:67:73:ee:fb:51:0e:e0:80:36:be:cb:db:ea: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:9B:80:54:FE:97:C9:EE:42:F2:38:06:C9:6B:59:79:51:D3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b2:99:bf:ad:15:5b:37:73:ed:90:ed:26:31:fa:d8:8c:f0: a5:42:f6:2d:5a:25:17:99:65:46:f0:60:ff:1a:18:73:82:22: bc:bb:94:53:60:01:ac:40:3a:e8:f9:13:6f:4e:23:5e:7f:c3: 49:90:cf:02:3b:e3:86:74:cb:e2:27:38:ff:44:f8:96:f7:5c: a4:bd:5a:1a:5b:91:c9:fa:e5:f1:c9:62:44:56:04:3a:d7:e0: d2:02:47:53:8b:c1:88:4b:6e:b7:ad:07:ef:62:0b:9f:43:8a: 3d:cd:bd:47:72:a8:2d:9e:ea:88:29:0d:48:0f:1b:4e:55:da: 92:60:c6:ae:59:68:c1:b8:5a:32:8c:b3:6a:3c:4c:8f:31:35: ae:55:bd:11:c6:7d:af:da:40:ae:62:29:a8:e5:b6:91:2f:eb: ae:da:56:b4:c6:80:4a:30:13:90:fa:f9:4f:1c:b7:bf:49:db: ed:52:2f:66:93:02:2c:6c:79:c2:51:a7:43:89:c8:13:5a:df: 6a:20:a9:10:a9:54:9d:37:ba:ed:ec:76:76:34:50:ff:9f:42: 05:a8:61:19:53:f9:83:12:e9:c1:40:e8:84:29:6c:1c:16:fe: 2b:24:13:75:a5:d0:d7:04:ba:5c:5d:8e:b1:df:74:bd:74:17: 08:38:8e:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeiZ8TJBcq1eBhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDFlMTVlZmYtNzIwNy00NzczLWFlNmEtYzgxY2Y4NjcyZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZGX6W63rRMaxd4x3/wTJ+Ctl+2kZcHnklPP 5lOa/6iCaeuk3AgDBB0VbBOodYVv7kYv+r+djqOI7+XiOpq1+12Pb9RS+hA1loNs EtVO/aeo/OFbHXdmeuiR1c+OprvjbnYl6Vtxv1LTYr4LCrO0o76z1J0rcXxBGzRG JSA7OZchw+p5czh+O0MgSR28dsU3NoPyynPzVBL98G6GvpMZfNs5SKcn0TOVLPIN xSPgeeyXiRYSlMHjzfbALMQnmE3gycI1tsH9KsMAYkQbbhwlnx7NtRst8l859F4m zK0VXRBD7l4Ya7c9Tb7I4pM8Y5tOf2dz7vtRDuCANr7L2+p5twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSTm4BU/pfJ7kLyOAbJa1l5UdP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBlMzZiZGUtMWFlZS0z ZmIzLThjMDMtNWY0MTMxYTQ3MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGymb+tFVs3c+2Q7SYx+tiM8KVC9i1aJReZZUbwYP8aGHOCIry7 lFNgAaxAOuj5E29OI15/w0mQzwI744Z0y+InOP9E+Jb3XKS9Whpbkcn65fHJYkRW BDrX4NICR1OLwYhLbretB+9iC59Dij3NvUdyqC2e6ogpDUgPG05V2pJgxq5ZaMG4 WjKMs2o8TI8xNa5VvRHGfa/aQK5iKajltpEv667aVrTGgEowE5D6+U8ct79J2+1S L2aTAixsecJRp0OJyBNa32ogqRCpVJ03uu3sdnY0UP+fQgWoYRlT+YMS6cFA6IQp bBwW/iskE3Wl0NcEulxdjrHfdL10Fwg4jhI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:37 2026 by rpki-client