$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa File: af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa (raw, json) Hash identifier: wYiXY/PFfVaDVScm9pjXwAlJPPQBBwLkd5+/eiemQSQ= Subject key identifier: E8:BA:49:BD:57:64:E9:6A:4D:78:9A:21:5A:D1:D7:51:10:0F:C7:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AF26C6DC930F69A75978 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 396572 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:af:26:c6:dc:93:0f:69:a7:59:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=1da9eba1-e954-41ce-9784-c0ecf876efef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:91:46:fe:98:35:72:83:31:cb:79:23:ad: 14:3d:08:71:c3:d0:02:a5:4f:1e:21:d2:4e:9c:38: 76:ff:24:91:2d:6b:12:ed:dd:e0:d6:c5:c4:9a:2a: b7:0d:c4:54:34:f4:0b:4d:55:1c:4c:45:e2:94:d6: 32:ef:db:1e:29:2b:f5:d8:da:ab:42:79:93:bd:45: 0a:9b:a5:31:c9:13:6f:ba:0d:dd:9c:5f:da:9f:01: f4:3b:f3:9e:86:8d:a6:4d:2a:49:7a:c8:98:a9:93: da:4a:42:dc:92:f3:bf:7d:ae:77:28:69:b6:12:ee: 40:3c:ee:eb:5c:c7:32:c7:bf:44:15:23:97:e6:87: d9:ba:a0:69:9d:11:86:5b:4e:e9:5c:65:b6:09:40: 7d:b8:14:e4:5a:ec:3d:de:40:c3:3a:72:bb:78:9a: 85:67:3c:6f:ac:96:8d:6a:1f:1e:ba:8c:b9:5c:98: 65:ce:54:14:13:5e:98:93:7f:5a:98:eb:f5:e5:92: 61:6d:01:fd:97:49:58:86:1e:d4:7e:e9:4d:20:04: 05:5e:5b:31:80:02:56:4c:6c:50:88:2d:27:ce:ed: 17:70:69:d4:f3:8c:b5:e0:f5:5d:04:3c:50:66:b1: d6:1b:4d:92:2a:55:41:eb:ee:5d:d1:ca:c5:7e:93: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BA:49:BD:57:64:E9:6A:4D:78:9A:21:5A:D1:D7:51:10:0F:C7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:1c:1a:42:f6:f1:7d:2c:4e:55:9c:55:70:89:5a:d3:d1:c9: d5:cc:b0:d0:da:30:fa:4e:64:a2:e2:ba:8b:37:5c:f0:6b:bc: 90:ef:94:c4:32:a1:a3:a7:c1:87:b6:fa:55:72:6c:3d:ae:f2: 27:32:47:1f:9a:92:5a:79:36:8f:bb:4e:08:a1:9d:2e:8d:04: eb:84:d6:28:4f:73:4f:83:dc:82:29:56:43:29:48:22:57:9d: 60:f5:e7:7d:71:4a:7b:b3:3c:a9:ca:54:a4:e6:92:51:c4:af: f5:47:51:5e:fd:82:71:b9:93:a3:70:33:8a:8e:59:4a:cc:54: 71:0b:14:dd:be:c5:65:f3:f2:d1:f4:9d:48:0c:a7:c9:ac:66: d7:4f:47:3e:67:ed:4c:a4:bb:c9:23:34:74:a0:25:89:96:b4: a6:7b:df:ea:fd:97:48:a6:14:9e:c3:65:4e:29:42:e1:6e:4a: 16:41:75:e6:36:42:d6:f4:49:fb:4e:6d:a0:c8:71:2b:3e:c4: 17:9d:10:60:ca:95:78:f5:41:55:9e:ff:88:08:f0:99:16:66: f6:af:12:04:c7:c5:93:ca:33:7f:e5:e6:28:3a:a9:2b:6d:ed: ab:f0:c6:16:a9:02:0f:97:3c:46:c9:22:90:68:fd:e8:8d:c9: 73:08:6d:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a8mxtyTD2mnWXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk MWRhOWViYTEtZTk1NC00MWNlLTk3ODQtYzBlY2Y4NzZlZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmRRv6YNXKDMct5I60UPQhxw9ACpU8eIdJO nDh2/ySRLWsS7d3g1sXEmiq3DcRUNPQLTVUcTEXilNYy79seKSv12NqrQnmTvUUK m6UxyRNvug3dnF/anwH0O/Oeho2mTSpJesiYqZPaSkLckvO/fa53KGm2Eu5APO7r XMcyx79EFSOX5ofZuqBpnRGGW07pXGW2CUB9uBTkWuw93kDDOnK7eJqFZzxvrJaN ah8euoy5XJhlzlQUE16Yk39amOv15ZJhbQH9l0lYhh7UfulNIAQFXlsxgAJWTGxQ iC0nzu0XcGnU84y14PVdBDxQZrHWG02SKlVB6+5d0crFfpMcCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOi6Sb1XZOlqTXiaIVrR11EQD8csMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY5ZmM0OGMtNmIzYi0z M2I1LThiOWUtOTA4NzE1Y2JhMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUcGkL28X0sTlWcVXCJWtPRydXMsNDaMPpOZKLiuos3XPBrvJDv lMQyoaOnwYe2+lVybD2u8icyRx+aklp5No+7TgihnS6NBOuE1ihPc0+D3IIpVkMp SCJXnWD1531xSnuzPKnKVKTmklHEr/VHUV79gnG5k6NwM4qOWUrMVHELFN2+xWXz 8tH0nUgMp8msZtdPRz5n7Uyku8kjNHSgJYmWtKZ73+r9l0imFJ7DZU4pQuFuShZB deY2Qtb0SftObaDIcSs+xBedEGDKlXj1QVWe/4gI8JkWZvavEgTHxZPKM3/l5ig6 qStt7avwxhapAg+XPEbJIpBo/eiNyXMIbaE= -----END CERTIFICATE-----Generated at Thu Mar 26 21:31:32 2026 by rpki-client