$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa File: a8e0686a-540b-34d6-b6fd-6370a5743775.roa (raw, json) Hash identifier: ikmAn2EgVIo/zI4sBCoVr/xhfUMIlkBucflpI5GHc3o= Subject key identifier: 4D:8D:CA:41:25:8A:D5:04:C2:82:6B:5D:30:6A:E5:4D:71:7F:F1:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8129519E83ABCA814080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396590 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:81:29:51:9e:83:ab:ca:81:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=96438aac-5dca-46b6-91d8-ad760e3332c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:39:ba:34:f3:83:f8:48:36:6e:a3:05:50: f4:1e:d6:d3:f9:6f:44:82:fc:41:bb:cc:1b:1a:2d: d2:ad:c9:c4:8c:01:ec:41:3e:75:b3:f8:d8:5a:2f: 7f:65:d5:96:fe:af:5f:47:40:6e:70:50:0e:d7:1f: aa:83:94:39:9c:d5:88:a7:ac:ba:83:6a:14:b5:d1: 29:48:e1:ff:7b:f3:01:2e:e3:20:69:37:6e:be:b1: 3a:a7:6a:87:67:73:2e:60:f0:4c:9f:3f:19:db:38: 82:d8:3d:27:c7:5d:fb:78:8e:af:56:07:3d:05:3e: e3:28:5d:0b:b7:ed:0e:cf:7a:2a:8e:5c:ba:6d:42: e9:32:1e:94:ea:23:ac:b7:31:bc:a9:30:fe:30:5e: 2f:0d:f0:1e:f3:4b:0d:1e:98:7d:0a:3f:c4:3c:cf: cc:19:69:3f:4d:83:d7:09:b8:a2:46:9b:88:50:4b: 8e:55:c6:7a:7c:81:42:ab:86:36:ce:00:84:95:25: 63:fd:ce:1c:c3:c6:97:2a:a2:be:58:7c:3b:a9:7b: 07:41:66:e5:33:6e:d0:3b:d9:f8:a7:d3:31:cc:46: 21:53:b3:f4:76:a2:0f:29:5c:c5:7a:7d:2f:a4:63: 23:f5:86:51:92:61:47:53:dc:1f:9d:6c:d1:7a:35: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:CA:41:25:8A:D5:04:C2:82:6B:5D:30:6A:E5:4D:71:7F:F1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a8e0686a-540b-34d6-b6fd-6370a5743775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:eb:f6:4f:f7:02:b3:6c:90:ed:8b:f6:8f:7b:ec:51:5d:14: 1c:d2:46:5e:3d:70:a3:17:f5:fe:69:51:93:95:fe:57:a5:f7: c8:59:59:34:16:a1:03:b3:d2:98:e9:8d:5e:72:57:d6:17:30: bb:d4:ab:d5:fa:40:5b:e9:f6:d5:e9:9e:93:44:27:1f:02:10: fd:a9:ce:5b:6d:5d:40:1e:21:cb:5a:ba:16:01:d3:4e:f2:bd: 99:5d:c0:dc:d9:2c:97:80:4f:a9:0e:a2:31:3e:bf:1c:c4:82: 78:f7:2c:77:c4:c2:80:b1:93:a3:59:a3:83:08:a4:49:b2:d9: af:e2:a6:20:a9:17:8b:fb:0e:b0:d5:fc:e9:87:c8:d2:da:17: f7:0e:10:bc:c6:57:fb:f3:01:e9:27:eb:67:51:4a:0f:66:c6: e1:dc:78:cf:3a:37:ed:69:6a:e0:0a:f5:81:28:e8:ce:db:52: 0f:7a:d9:38:5a:e6:b7:b1:2a:87:c4:c7:4a:22:4f:a8:54:ca: 73:24:46:8d:04:64:29:f7:66:2b:c3:cc:24:bd:aa:b5:ea:34: 44:d2:be:c0:72:90:dc:92:86:a8:6d:40:93:12:d3:d8:b3:98: 79:08:f0:f9:73:b3:02:98:12:83:e8:36:f4:46:9a:0d:45:86: ab:13:84:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoEpUZ6Dq8qBQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTY0MzhhYWMtNWRjYS00NmI2LTkxZDgtYWQ3NjBlMzMzMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/g5ujTzg/hINm6jBVD0HtbT+W9EgvxBu8wb Gi3SrcnEjAHsQT51s/jYWi9/ZdWW/q9fR0BucFAO1x+qg5Q5nNWIp6y6g2oUtdEp SOH/e/MBLuMgaTduvrE6p2qHZ3MuYPBMnz8Z2ziC2D0nx137eI6vVgc9BT7jKF0L t+0Oz3oqjly6bULpMh6U6iOstzG8qTD+MF4vDfAe80sNHph9Cj/EPM/MGWk/TYPX CbiiRpuIUEuOVcZ6fIFCq4Y2zgCElSVj/c4cw8aXKqK+WHw7qXsHQWblM27QO9n4 p9MxzEYhU7P0dqIPKVzFen0vpGMj9YZRkmFHU9wfnWzRejUmKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE2NykElitUEwoJrXTBq5U1xf/H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYThlMDY4NmEtNTQwYi0z NGQ2LWI2ZmQtNjM3MGE1NzQzNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAK6/ZP9wKzbJDti/aPe+xRXRQc0kZePXCjF/X+ aVGTlf5XpffIWVk0FqEDs9KY6Y1eclfWFzC71KvV+kBb6fbV6Z6TRCcfAhD9qc5b bV1AHiHLWroWAdNO8r2ZXcDc2SyXgE+pDqIxPr8cxIJ49yx3xMKAsZOjWaODCKRJ stmv4qYgqReL+w6w1fzph8jS2hf3DhC8xlf78wHpJ+tnUUoPZsbh3HjPOjftaWrg CvWBKOjO21IPetk4Wua3sSqHxMdKIk+oVMpzJEaNBGQp92Yrw8wkvaq16jRE0r7A cpDckoaobUCTEtPYs5h5CPD5c7MCmBKD6Db0RpoNRYarE4Sv -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:17 2026 by rpki-client