$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa File: af204db8-7a83-31ab-ab57-ce984a580492.roa (raw, json) Hash identifier: 0Dt3hY0ZLiNgd2k2txQGTELlk2EVPdDEKLeN70T6rCI= Subject key identifier: 20:30:37:96:87:D7:33:D2:C8:5D:40:17:78:BE:B2:4A:82:36:01:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D091251C456C91B23C66BCC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 36622 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:51:c4:56:c9:1b:23:c6:6b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=34812571-eaf6-4249-8659-5d66e4630db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:e7:43:af:b8:5a:bd:a8:f7:0a:60:b4:2c: 44:69:10:20:e9:c5:6f:79:68:6d:05:b7:55:6a:6c: 78:63:e1:7d:5e:d4:f1:e6:ed:37:3e:f5:5f:5e:f7: c2:0b:55:1c:d5:2c:46:95:46:da:3c:87:20:4c:1d: d2:bd:6a:2d:2f:20:f9:4a:e5:b3:b1:31:ee:8f:c4: ea:88:ca:77:69:64:76:f5:6d:7e:b1:f6:54:5d:17: a1:ca:94:cd:4e:64:8c:1a:a5:c1:a1:ae:35:a0:41: 86:ba:21:c2:ca:36:24:d4:6e:9b:0b:be:62:0e:27: 5e:d8:c5:34:b9:fb:29:b2:a5:78:f4:f5:db:63:f7: f5:4e:50:db:e5:13:13:03:9c:f0:8e:36:56:63:8c: d3:17:b2:d6:20:c3:ad:52:62:09:df:fc:2d:cf:e5: e5:63:62:52:47:33:dc:e9:fd:7b:21:8f:94:e9:a1: 3a:18:af:ba:48:68:b9:09:3b:25:a0:d7:8c:d5:f4: f0:48:26:cb:ab:f1:de:3a:41:48:7b:9d:a7:90:8c: e6:4a:c2:ea:de:9c:c5:f5:c5:db:8c:02:13:f2:cb: 23:c8:7a:2a:52:a6:92:20:f8:ca:6d:30:d1:94:0e: 26:55:b6:41:e6:2c:09:38:57:c7:e7:8c:47:d2:89: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:37:96:87:D7:33:D2:C8:5D:40:17:78:BE:B2:4A:82:36:01:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3e:28:d4:8b:0e:3f:84:17:38:fd:ce:0c:4b:48:dc:30:79: 0b:4f:ea:d0:74:51:5a:d8:d3:63:82:d5:bf:1a:d3:40:8b:7c: 66:61:f2:28:1b:8b:49:6b:58:0d:f6:04:96:fc:25:37:4e:60: 96:ac:8e:09:fe:1f:8f:e3:c4:89:57:44:93:3e:0e:08:39:62: 09:f4:34:1e:52:51:c6:08:1d:dc:18:da:45:37:e2:5d:68:35: 20:c2:eb:55:fe:91:a9:20:81:3c:e7:53:b2:17:e6:ec:aa:10: 0c:ef:5f:3b:69:6c:39:c5:df:bf:8f:b7:c1:28:66:cb:9e:6f: 0e:88:11:fd:02:c6:fd:21:5f:f5:7b:04:1f:ca:9a:7a:e6:60: d8:7e:65:54:a4:cd:43:c3:37:7c:76:8a:bf:c7:44:e6:07:b3: 44:68:3c:5d:d0:ad:57:96:2f:22:cb:12:11:1d:57:a0:4c:8e: cf:c7:c4:11:39:55:48:0b:50:55:0c:66:32:96:5d:ff:a5:03: d5:3e:3d:0b:7f:a9:4d:bd:b2:82:30:85:1f:5e:f6:9d:58:fd: 3a:19:5c:b3:9d:3a:46:bc:44:ac:a2:0c:1f:34:25:54:a4:eb: ef:39:43:ad:79:95:94:9b:60:cf:10:aa:bc:bd:80:78:f8:3c: 7e:c2:17:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElHEVskbI8ZrzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzQ4MTI1NzEtZWFmNi00MjQ5LTg2NTktNWQ2NmU0NjMwZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHjnQ6+4Wr2o9wpgtCxEaRAg6cVveWhtBbdV amx4Y+F9XtTx5u03PvVfXvfCC1Uc1SxGlUbaPIcgTB3SvWotLyD5SuWzsTHuj8Tq iMp3aWR29W1+sfZUXRehypTNTmSMGqXBoa41oEGGuiHCyjYk1G6bC75iDide2MU0 ufspsqV49PXbY/f1TlDb5RMTA5zwjjZWY4zTF7LWIMOtUmIJ3/wtz+XlY2JSRzPc 6f17IY+U6aE6GK+6SGi5CTsloNeM1fTwSCbLq/HeOkFIe52nkIzmSsLq3pzF9cXb jAIT8ssjyHoqUqaSIPjKbTDRlA4mVbZB5iwJOFfH54xH0ol1IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCAwN5aH1zPSyF1AF3i+skqCNgF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWYyMDRkYjgtN2E4My0z MWFiLWFiNTctY2U5ODRhNTgwNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADw+KNSLDj+EFzj9zgxLSNwweQtP6tB0UVrY02OC1b8a00CLfGZh 8igbi0lrWA32BJb8JTdOYJasjgn+H4/jxIlXRJM+Dgg5Ygn0NB5SUcYIHdwY2kU3 4l1oNSDC61X+kakggTznU7IX5uyqEAzvXztpbDnF37+Pt8EoZsuebw6IEf0Cxv0h X/V7BB/KmnrmYNh+ZVSkzUPDN3x2ir/HROYHs0RoPF3QrVeWLyLLEhEdV6BMjs/H xBE5VUgLUFUMZjKWXf+lA9U+PQt/qU29soIwhR9e9p1Y/ToZXLOdOka8RKyiDB80 JVSk6+85Q615lZSbYM8Qqry9gHj4PH7CFz0= -----END CERTIFICATE-----Generated at Fri Mar 27 00:43:36 2026 by rpki-client