$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa File: b34e06af-905e-3aa4-a640-0b0ae99465a6.roa (raw, json) Hash identifier: mTa1T+PmgqgZR5QEkRx2zQF6BhrPtwHm+ptUVBO5954= Subject key identifier: 1B:2D:70:DB:CD:8B:22:AF:02:06:E1:30:28:39:67:39:F4:52:81:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B3C3B3493469BB9CD040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396595 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b3:c3:b3:49:34:69:bb:9c:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=5a557bd2-bb04-4808-9bf6-6d20f610a8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:68:04:bf:7d:34:64:97:d9:44:08:a4:1d: d1:6f:92:0a:30:e3:a8:88:87:6a:37:19:66:7a:a2: 03:3f:66:c2:84:1d:ef:b5:f4:1d:72:b0:eb:2e:d5: e3:4a:75:b3:db:10:a1:0d:62:90:f9:1b:78:3d:33: 99:74:0d:94:85:5d:36:0f:e8:73:0e:82:ec:7a:47: b6:37:2d:74:c9:cd:20:a1:d5:3e:1a:1f:40:3d:bc: 5d:b1:49:47:b3:6a:c8:d3:86:83:e0:73:c1:2b:f6: 08:0a:f6:5a:a3:64:8b:3b:e1:dd:bb:09:3b:d4:58: 4d:bc:49:c8:59:1e:e3:a0:00:4d:d3:d2:5a:7c:4b: 73:bd:8e:40:84:bc:f0:e6:08:ab:c5:64:fb:ec:a6: 9a:87:6c:93:f5:5c:d8:76:1a:b4:23:ba:0a:49:db: 96:f6:29:3a:85:dc:a6:04:21:27:87:36:89:ac:21: 7d:cc:c7:32:39:eb:1a:e2:c5:9b:a6:bf:b0:fd:91: 96:33:57:81:6d:ad:65:ae:1c:fb:39:92:ef:83:b3: 4c:5a:11:67:4d:7e:84:67:b1:8e:e1:25:df:1a:61: 92:ee:0e:f0:77:3d:d4:f0:48:d5:0e:c0:82:26:f9: c1:61:49:c2:ef:45:2c:68:14:cf:5f:3b:32:42:3e: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2D:70:DB:CD:8B:22:AF:02:06:E1:30:28:39:67:39:F4:52:81:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:99:c2:6a:a6:d4:b0:e2:d9:06:aa:43:17:d0:5c:f7:00:a0: ed:41:90:eb:a5:8d:0e:2c:01:8a:7f:66:46:6a:46:f6:f8:c5: c6:65:33:ed:c6:88:1f:d1:7c:b8:8a:91:f8:02:b4:4b:a0:4f: 28:df:88:5d:45:77:ea:11:99:33:67:b4:b6:b2:a8:8f:c7:b9: 4a:79:f9:b8:d1:94:7f:a7:77:33:80:f3:03:d0:71:fa:f8:95: 0b:b1:8b:86:32:11:ce:20:0e:5c:70:10:10:77:5c:9a:b0:b4: 7d:e0:ec:5e:25:c5:de:ab:08:5b:38:65:29:66:8e:36:80:f5: 3c:2e:d4:d5:40:ba:59:d9:3f:3a:4f:a5:01:0e:aa:20:f3:f3: f5:24:26:c9:18:ae:27:c9:bc:79:ed:6f:0a:86:79:74:14:05: 43:44:40:74:9f:58:c0:6d:2e:d4:ab:b7:b1:e9:ae:75:c0:80: 26:86:89:52:e3:54:4f:d2:bc:78:b9:c9:3e:51:e1:2f:a5:50: 72:67:f4:6d:00:97:5c:b6:94:dc:63:64:04:da:81:d9:e0:b5: 66:eb:2a:47:2f:cd:f9:54:63:f1:1e:09:d9:07:dc:a1:b7:81: 68:24:d6:76:0a:23:60:0f:07:c5:69:d1:78:23:f2:9e:a7:0b: bf:1e:c7:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErPDs0k0abuc0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWE1NTdiZDItYmIwNC00ODA4LTliZjYtNmQyMGY2MTBhOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gBoBL99NGSX2UQIpB3Rb5IKMOOoiIdqNxlm eqIDP2bChB3vtfQdcrDrLtXjSnWz2xChDWKQ+Rt4PTOZdA2UhV02D+hzDoLseke2 Ny10yc0godU+Gh9APbxdsUlHs2rI04aD4HPBK/YICvZao2SLO+Hduwk71FhNvEnI WR7joABN09JafEtzvY5AhLzw5girxWT77Kaah2yT9VzYdhq0I7oKSduW9ik6hdym BCEnhzaJrCF9zMcyOesa4sWbpr+w/ZGWM1eBba1lrhz7OZLvg7NMWhFnTX6EZ7GO 4SXfGmGS7g7wdz3U8EjVDsCCJvnBYUnC70UsaBTPXzsyQj6EmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBstcNvNiyKvAgbhMCg5Zzn0UoFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM0ZTA2YWYtOTA1ZS0z YWE0LWE2NDAtMGIwYWU5OTQ2NWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2Zwmqm1LDi2QaqQxfQXPcAoO1BkOuljQ4sAYp/ZkZqRvb4xcZl M+3GiB/RfLiKkfgCtEugTyjfiF1Fd+oRmTNntLayqI/HuUp5+bjRlH+ndzOA8wPQ cfr4lQuxi4YyEc4gDlxwEBB3XJqwtH3g7F4lxd6rCFs4ZSlmjjaA9Twu1NVAulnZ PzpPpQEOqiDz8/UkJskYrifJvHntbwqGeXQUBUNEQHSfWMBtLtSrt7HprnXAgCaG iVLjVE/SvHi5yT5R4S+lUHJn9G0Al1y2lNxjZATagdngtWbrKkcvzflUY/EeCdkH 3KG3gWgk1nYKI2APB8Vp0Xgj8p6nC78ex68= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:21 2026 by rpki-client