$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa File: a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa (raw, json) Hash identifier: KJci5MlXf9rqTraUghkF/F8LkPo9K/zk/I9bQXYyuUU= Subject key identifier: 4E:2A:63:58:5B:47:7A:00:5F:88:52:86:86:12:0F:E1:F5:8C:C4:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5DC3630977D065EF3280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396604 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5d:c3:63:09:77:d0:65:ef:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=6ee41c63-c65c-46d7-87f7-f91331d7719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:17:4a:49:99:b1:49:c7:2c:6b:e0:38:2f: 2b:6d:df:80:75:92:1e:c9:f0:da:83:e6:b4:67:9f: 1a:72:ad:ae:44:bf:73:a7:ac:45:12:d5:37:47:fa: b3:e1:12:5e:e3:fe:cf:8e:3b:e4:18:04:65:60:b5: 51:ad:33:19:fd:71:b7:8f:30:a9:1f:6c:b1:53:02: 62:70:15:f1:a8:2c:da:b2:7b:b5:f3:e7:a3:ec:93: 4a:c5:be:66:73:2f:72:b3:93:5b:3e:b7:27:a2:52: 61:e5:ca:ec:b7:c4:56:a2:07:1a:55:94:70:4a:68: 81:df:9f:bb:4e:28:a4:51:cd:51:21:da:10:c4:d3: 92:6b:94:a4:66:41:ba:3a:0f:73:28:9e:2f:2c:9f: c7:d0:a8:ae:7e:e0:9f:21:86:27:c4:82:56:ac:7f: fd:09:28:06:95:1c:34:ae:df:43:2b:79:11:ae:4d: 04:d8:99:28:9b:5f:48:69:17:a4:b1:88:3d:f4:88: 45:30:57:c6:af:f5:a5:f6:f0:ff:28:32:3b:6b:51: 29:e6:39:cc:9a:92:45:2e:41:43:22:1a:74:d1:25: 20:7b:ec:d3:2f:64:8a:dd:6b:65:be:71:28:de:7d: 6e:39:37:06:33:c9:f5:a3:89:a5:6e:e9:74:b3:93: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:63:58:5B:47:7A:00:5F:88:52:86:86:12:0F:E1:F5:8C:C4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9d:4a:fa:2c:a1:dc:63:e1:04:f6:d8:bc:23:90:f7:19:9d: 9b:20:27:17:15:2e:fc:aa:2f:20:a3:bb:8e:a9:9b:62:f7:fc: db:d0:43:2a:e5:5f:d2:1c:9c:ed:7b:c9:eb:df:08:5a:41:8d: 0e:cc:83:94:dd:2c:73:06:f0:ee:c4:17:01:1c:5a:df:b6:fc: 87:41:7f:48:6b:39:8b:c6:eb:17:14:89:bb:12:76:53:cd:e9: 1d:0e:d8:0c:5d:66:bf:e8:a8:54:52:7c:7e:fa:be:29:d9:ee: c0:a5:0d:86:8c:4f:d5:ee:80:6c:87:15:9b:69:ad:f4:12:8a: 05:2e:21:5d:83:4c:67:4f:0e:2c:7d:2a:2d:ee:dc:df:c4:11: 93:fa:c4:3b:ae:e4:de:c5:61:87:3e:4c:0e:5d:05:b1:ec:91: 8b:45:4e:4d:2a:a4:8f:ca:58:2b:a8:e6:a9:59:01:2b:d9:f1: 47:d6:c0:01:35:04:f4:5b:66:b2:92:7a:d6:80:97:d0:70:63: c6:68:18:17:f3:a5:35:84:a0:24:46:66:b0:9f:d8:a5:f2:b9: 74:35:a6:b3:fb:8a:03:f3:a8:df:bf:f6:d9:61:fc:66:57:61: d8:36:f5:de:d1:02:de:e2:59:9a:a6:15:60:4b:37:17:f3:57: 91:52:63:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+l3DYwl30GXvMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NmVlNDFjNjMtYzY1Yy00NmQ3LTg3ZjctZjkxMzMxZDc3MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvUXSkmZsUnHLGvgOC8rbd+AdZIeyfDag+a0 Z58acq2uRL9zp6xFEtU3R/qz4RJe4/7PjjvkGARlYLVRrTMZ/XG3jzCpH2yxUwJi cBXxqCzasnu18+ej7JNKxb5mcy9ys5NbPrcnolJh5crst8RWogcaVZRwSmiB35+7 TiikUc1RIdoQxNOSa5SkZkG6Og9zKJ4vLJ/H0KiufuCfIYYnxIJWrH/9CSgGlRw0 rt9DK3kRrk0E2Jkom19IaReksYg99IhFMFfGr/Wl9vD/KDI7a1Ep5jnMmpJFLkFD Ihp00SUge+zTL2SK3WtlvnEo3n1uOTcGM8n1o4mlbul0s5NZIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE4qY1hbR3oAX4hShoYSD+H1jMQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJkMjliNWEtNjFkYi0z YTRmLTk3ZGItODdlN2ZmOTI1YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/nUr6LKHcY+EE9ti8I5D3GZ2bICcXFS78qi8g o7uOqZti9/zb0EMq5V/SHJzte8nr3whaQY0OzIOU3SxzBvDuxBcBHFrftvyHQX9I azmLxusXFIm7EnZTzekdDtgMXWa/6KhUUnx++r4p2e7ApQ2GjE/V7oBshxWbaa30 EooFLiFdg0xnTw4sfSot7tzfxBGT+sQ7ruTexWGHPkwOXQWx7JGLRU5NKqSPylgr qOapWQEr2fFH1sABNQT0W2ayknrWgJfQcGPGaBgX86U1hKAkRmawn9il8rl0Naaz +4oD86jfv/bZYfxmV2HYNvXe0QLe4lmaphVgSzcX81eRUmNA -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:50 2026 by rpki-client