$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a208858b-7413-3bdc-bc26-8c46ddf62f9e.roa File: a208858b-7413-3bdc-bc26-8c46ddf62f9e.roa (raw, json) Hash identifier: eK7vYZZ/ZuMW0Y5sfhPo6c7EHxCkZX11Vi2upuMU8L8= Subject key identifier: A5:2A:75:F0:28:E7:8A:67:C1:0A:21:8F:B3:B7:D2:1A:E7:22:84:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A88EFE54FC597F1ED81C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a208858b-7413-3bdc-bc26-8c46ddf62f9e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396540 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:88:ef:e5:4f:c5:97:f1:ed:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ca54cec4-48d2-436e-9158-5dcd9cae9fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:9c:5b:de:11:35:42:b0:c7:64:bd:39:4b: c6:6e:98:c7:bf:f6:10:7e:f1:26:8b:3f:ad:f0:bc: 3e:b6:1f:28:c0:a5:57:08:b3:a7:a8:9c:82:3a:b8: 46:cf:92:38:df:1b:8a:9b:03:ca:df:e2:98:97:41: 72:39:4c:e9:40:99:be:92:4d:f3:37:bb:99:4d:21: fb:8b:aa:6f:00:ff:ee:99:d1:cf:26:21:85:20:1d: 90:89:d6:d8:fe:05:cf:1b:3b:bf:9b:d0:62:8c:2a: 62:cc:40:66:1a:19:cf:bf:bd:85:47:a6:2f:fb:c7: 20:80:14:f3:17:64:71:c0:22:3d:2a:74:1c:b5:16: 80:10:53:a8:16:b1:c7:a3:29:4d:65:5b:41:92:3d: a2:64:44:22:cf:73:c5:15:fa:8b:61:67:43:ea:e2: 1b:bc:3e:f1:c7:b1:10:0b:ee:a0:78:72:82:42:86: a3:c5:6a:92:64:7c:15:0b:c9:8a:a8:9b:d6:c1:e3: 6c:af:23:27:63:62:8b:e5:bc:8e:e8:93:c8:5b:a2: b2:08:89:ee:5d:cd:37:37:61:4e:fb:02:11:d5:de: 68:b6:76:bc:a0:45:81:2b:ef:16:c0:40:3f:f2:0b: c1:83:23:23:b2:3f:09:05:f9:2f:bd:46:7a:14:38: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:75:F0:28:E7:8A:67:C1:0A:21:8F:B3:B7:D2:1A:E7:22:84:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a208858b-7413-3bdc-bc26-8c46ddf62f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f2:2e:48:76:85:5b:90:81:e5:6d:54:06:48:ec:8c:36:2f: d2:29:97:2d:6c:eb:94:ce:96:03:91:30:bf:75:3c:2b:e3:e4: 1c:04:5d:77:22:09:2f:e0:a7:38:89:28:dd:c2:43:95:a4:d9: 84:4f:59:f5:69:15:c1:a3:71:20:99:88:4d:8e:4d:e3:5b:ae: e5:82:aa:9a:a1:b0:30:ee:61:c1:aa:c2:e7:17:e6:f0:09:c1: 95:88:80:c9:c5:38:e2:33:f6:5b:8a:6a:68:8a:19:ee:46:fb: 58:c2:49:16:89:a0:ca:66:88:ec:7d:1e:22:c5:b9:fd:20:bf: 54:c3:4d:4d:ff:a7:b7:fe:79:66:29:03:78:15:bd:cc:72:48: 50:a1:25:c6:39:07:98:e3:24:24:bb:65:a4:73:99:87:8e:c8: 2d:a8:cf:8a:10:8e:3a:0c:55:68:68:34:05:10:ba:62:7c:48: ae:fe:99:5e:3f:9d:c4:b5:55:8a:67:da:9f:3e:3b:22:0a:28: 14:d8:44:28:ee:52:f6:74:e0:50:c8:cf:9c:86:26:ce:38:6d: d0:bd:eb:50:64:64:51:bb:e2:b1:35:b0:06:09:ff:48:e3:02: d3:ae:42:ca:09:54:57:03:58:ac:41:65:c1:f2:3c:98:af:36: 54:2f:f9:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCojv5U/Fl/HtgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2E1NGNlYzQtNDhkMi00MzZlLTkxNTgtNWRjZDljYWU5ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs6cW94RNUKwx2S9OUvGbpjHv/YQfvEmiz+t 8Lw+th8owKVXCLOnqJyCOrhGz5I43xuKmwPK3+KYl0FyOUzpQJm+kk3zN7uZTSH7 i6pvAP/umdHPJiGFIB2QidbY/gXPGzu/m9BijCpizEBmGhnPv72FR6Yv+8cggBTz F2RxwCI9KnQctRaAEFOoFrHHoylNZVtBkj2iZEQiz3PFFfqLYWdD6uIbvD7xx7EQ C+6geHKCQoajxWqSZHwVC8mKqJvWweNsryMnY2KL5byO6JPIW6KyCInuXc03N2FO +wIR1d5otna8oEWBK+8WwEA/8gvBgyMjsj8JBfkvvUZ6FDjISwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKUqdfAo54pnwQohj7O30hrnIoSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwODg1OGItNzQxMy0z YmRjLWJjMjYtOGM0NmRkZjYyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBr8i5IdoVbkIHlbVQGSOyMNi/SKZctbOuUzpYD kTC/dTwr4+QcBF13Igkv4Kc4iSjdwkOVpNmET1n1aRXBo3EgmYhNjk3jW67lgqqa obAw7mHBqsLnF+bwCcGViIDJxTjiM/ZbimpoihnuRvtYwkkWiaDKZojsfR4ixbn9 IL9Uw01N/6e3/nlmKQN4Fb3MckhQoSXGOQeY4yQku2Wkc5mHjsgtqM+KEI46DFVo aDQFELpifEiu/pleP53EtVWKZ9qfPjsiCigU2EQo7lL2dOBQyM+chibOOG3QvetQ ZGRRu+KxNbAGCf9I4wLTrkLKCVRXA1isQWXB8jyYrzZUL/nh -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:26 2026 by rpki-client