$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa File: aab20ba5-5396-39a6-96e4-8f6604c8e135.roa (raw, json) Hash identifier: c3NKiYFGdXas/aaV4ozkRO3Iq1k/NHbImqL1JYIgY34= Subject key identifier: D1:BD:1A:05:DA:25:18:FC:45:AC:0E:28:FA:57:24:BB:53:51:B9:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA51823D8BBA5C22828880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 40647 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:51:82:3d:8b:ba:5c:22:82:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=6143689d-38b7-4be1-b181-609dc09235e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:c9:75:54:86:b1:b5:db:b3:45:64:62:e9: 1b:f5:6e:15:16:90:18:7b:04:80:03:c4:f0:ca:8e: 13:f6:75:eb:9c:c5:3a:af:a3:19:0f:2e:0a:6f:33: ee:f8:f8:9f:98:92:21:03:d8:e2:e2:d1:0b:cb:04: 6f:35:09:41:ff:84:f3:dc:c2:ad:65:3e:c4:55:33: 90:7e:d3:e7:ba:6b:61:8d:85:bd:54:78:6b:a7:05: 3f:f2:fc:31:4b:04:d7:3d:c2:c5:3a:0d:ab:a6:fc: 35:f1:f7:c3:44:ec:39:1a:2a:41:3c:f1:da:75:46: 4e:63:6c:14:68:be:d6:f5:58:05:43:79:4e:df:93: 97:ae:84:fb:bb:38:45:ec:88:ef:1f:e1:13:40:41: ba:3b:c0:3f:2a:38:ac:f3:99:bf:e5:b2:4c:cc:1f: ca:66:5a:27:05:c9:f9:74:b5:79:ad:8d:1c:49:0b: 4c:d6:56:d2:a6:a8:48:88:09:67:32:11:ee:fb:a2: 4d:ee:aa:ac:81:0e:02:8f:2f:8b:02:d1:1a:6a:a9: ef:1a:b2:c9:ec:42:17:a2:93:4e:ca:c2:82:9a:79: 0d:8c:c8:bb:92:c6:2a:10:c6:54:80:a2:e4:87:43: 8f:5c:b4:48:28:3d:43:d9:1f:11:3f:8e:da:da:2a: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BD:1A:05:DA:25:18:FC:45:AC:0E:28:FA:57:24:BB:53:51:B9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aab20ba5-5396-39a6-96e4-8f6604c8e135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bb:03:af:7a:d8:21:6c:ce:25:de:e6:ef:43:06:b2:7f:ee: 2f:45:16:0f:36:f7:d4:2d:50:9f:dd:71:ba:4d:6c:24:d7:48: 98:03:c1:37:a5:50:2a:26:a6:cb:5b:04:de:4d:94:3e:20:8d: 64:b2:ae:cd:ab:c3:9d:2a:d3:db:5e:06:3d:1a:58:54:7f:23: 66:29:2d:c9:92:94:4d:4d:db:28:f7:3e:c7:d9:15:0d:16:d1: 18:96:d8:41:1c:2b:3f:84:23:9d:45:3b:85:9d:25:0a:14:94: 5d:83:ab:87:e1:41:5e:fb:29:18:d8:15:67:e4:5d:8b:40:d6: e1:53:47:75:46:3f:88:72:b1:8e:9e:7a:11:ae:7f:af:b8:f4: 27:eb:ee:d4:c3:95:4d:5e:02:15:e4:ee:be:e7:81:e4:bc:6d: c5:ae:f0:8e:7a:a4:a9:ba:a7:6b:d8:b2:4c:75:e4:b5:18:9f: 87:e2:67:93:51:1c:00:22:0a:45:e8:ee:a0:9d:e0:dd:a7:4c: ba:cd:3f:1b:7c:65:29:52:d5:8a:88:38:4d:47:4f:7d:78:bd: 60:da:c1:ca:4f:49:f4:8d:3c:36:91:9a:a6:49:1e:07:a6:a0: 07:93:56:da:ff:ac:c8:a7:c8:c9:9e:25:41:0d:02:26:cc:ce: c7:3e:50:a0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lGCPYu6XCKCiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjE0MzY4OWQtMzhiNy00YmUxLWIxODEtNjA5ZGMwOTIzNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwATJdVSGsbXbs0VkYukb9W4VFpAYewSAA8Tw yo4T9nXrnMU6r6MZDy4KbzPu+PifmJIhA9ji4tELywRvNQlB/4Tz3MKtZT7EVTOQ ftPnumthjYW9VHhrpwU/8vwxSwTXPcLFOg2rpvw18ffDROw5GipBPPHadUZOY2wU aL7W9VgFQ3lO35OXroT7uzhF7IjvH+ETQEG6O8A/Kjis85m/5bJMzB/KZlonBcn5 dLV5rY0cSQtM1lbSpqhIiAlnMhHu+6JN7qqsgQ4Cjy+LAtEaaqnvGrLJ7EIXopNO ysKCmnkNjMi7ksYqEMZUgKLkh0OPXLRIKD1D2R8RP47a2ipWqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNG9GgXaJRj8RawOKPpXJLtTUbkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFiMjBiYTUtNTM5Ni0z OWE2LTk2ZTQtOGY2NjA0YzhlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzuwOvetghbM4l3ubvQwayf+4vRRYPNvfULVCf 3XG6TWwk10iYA8E3pVAqJqbLWwTeTZQ+II1ksq7Nq8OdKtPbXgY9GlhUfyNmKS3J kpRNTdso9z7H2RUNFtEYlthBHCs/hCOdRTuFnSUKFJRdg6uH4UFe+ykY2BVn5F2L QNbhU0d1Rj+IcrGOnnoRrn+vuPQn6+7Uw5VNXgIV5O6+54HkvG3FrvCOeqSpuqdr 2LJMdeS1GJ+H4meTURwAIgpF6O6gneDdp0y6zT8bfGUpUtWKiDhNR099eL1g2sHK T0n0jTw2kZqmSR4HpqAHk1ba/6zIp8jJniVBDQImzM7HPlCg -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:24 2026 by rpki-client