$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa File: b3eef609-149f-3bcf-b888-57b9229f7002.roa (raw, json) Hash identifier: O7WuGoLdKQE6a6n/CV5FOp1cNRBSWiTV+4jJ2yrHL7w= Subject key identifier: E6:76:09:77:78:96:91:B4:76:CB:E1:FE:4C:23:9F:2A:EB:9E:22:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D359FDFE23D5DA1D18C7C7F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 7342 IP address blocks: 2620:74:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:df:e2:3d:5d:a1:d1:8c:7c:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=afd24fc6-71fa-40b1-9034-d1cd70b5d20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:8f:0c:1b:70:5d:f2:03:4c:8b:1e:8a:29: 91:79:f8:ac:95:6d:ad:36:e7:2b:1f:f6:3b:d0:87: 6f:cb:01:64:c0:31:ac:53:9f:e7:09:66:54:5b:1b: bc:86:5a:c0:03:df:53:cb:9f:2f:c2:ff:c6:b5:08: b6:2f:2d:2c:cd:01:b0:57:c6:f6:3a:61:6e:6a:06: a9:de:67:a6:3c:c6:19:8f:06:bd:0d:31:61:28:9f: 48:76:1f:50:18:37:6e:77:a4:5b:45:4b:f6:d2:ff: b7:94:c8:25:64:64:bc:6e:96:2d:15:02:69:ca:b4: dc:2e:5c:79:f2:fe:5d:df:68:d5:8e:c5:fc:79:06: 40:77:a7:34:34:b8:4b:d1:59:de:50:a2:d9:07:96: 79:bc:ce:9c:2c:33:6f:82:21:dc:40:b2:1e:ec:01: e3:c1:27:da:38:c7:21:ed:91:d1:27:ec:02:a2:44: e9:60:c1:10:a9:a1:0d:4a:ab:91:b1:cc:ab:72:ee: 65:b6:61:12:a2:3f:9f:94:eb:fc:d2:3f:05:c8:e6: 43:d7:a9:15:a7:e9:9b:5e:37:43:f5:ef:30:59:07: 6e:e6:e9:a0:d1:a9:05:61:c9:15:5f:9a:c0:3e:b3: c4:23:5a:15:65:bf:b7:a6:38:4b:5c:40:c0:c3:20: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:09:77:78:96:91:B4:76:CB:E1:FE:4C:23:9F:2A:EB:9E:22:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f8:c0:ad:88:e2:25:a2:45:f7:a2:57:a5:d9:6c:0b:7a:23: 75:a3:a6:9d:f9:75:da:84:2b:34:d2:ff:d1:a0:b0:1c:6f:ab: fc:7e:14:a3:59:f7:f6:6f:30:73:96:9e:74:4f:f9:56:35:06: c6:83:23:47:e7:40:2b:a2:99:8d:68:bd:68:bd:4c:19:50:fc: 5a:da:3f:67:09:7d:96:e3:68:78:75:16:04:30:2a:ff:07:81: 4b:77:8e:4f:27:81:60:c5:86:41:b2:6d:72:8d:bd:8f:cb:c0: 2c:00:d3:29:5a:92:79:38:04:74:fe:0f:53:e6:e1:ee:0c:32: 7b:24:12:0a:5a:ea:2f:7d:16:a4:1f:cb:90:6e:c8:1f:89:be: bf:cf:5a:d4:9e:cc:c3:12:3b:fa:05:e4:e1:5b:83:22:5a:8f: 18:da:b8:1f:93:3b:23:d0:10:8f:0c:b7:8c:45:49:32:ca:e2: ed:22:ef:2f:06:2a:41:3c:06:11:db:9b:34:f5:85:15:67:0f: f5:38:b5:4c:1b:fe:b9:27:bc:aa:e8:11:04:9d:cb:02:c5:46: 28:99:6d:b3:58:a2:9a:64:10:e6:24:d5:9d:5b:e1:9f:a3:c1: 07:60:66:fd:c4:1a:57:ad:6e:82:d5:6d:9b:57:e3:6f:44:9f: 84:a9:47:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE01n9/iPV2h0Yx8fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YWZkMjRmYzYtNzFmYS00MGIxLTkwMzQtZDFjZDcwYjVkMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrePDBtwXfIDTIseiimRefislW2tNucrH/Y7 0IdvywFkwDGsU5/nCWZUWxu8hlrAA99Ty58vwv/GtQi2Ly0szQGwV8b2OmFuagap 3memPMYZjwa9DTFhKJ9Idh9QGDdud6RbRUv20v+3lMglZGS8bpYtFQJpyrTcLlx5 8v5d32jVjsX8eQZAd6c0NLhL0VneUKLZB5Z5vM6cLDNvgiHcQLIe7AHjwSfaOMch 7ZHRJ+wCokTpYMEQqaENSquRscyrcu5ltmESoj+flOv80j8FyOZD16kVp+mbXjdD 9e8wWQdu5umg0akFYckVX5rAPrPEI1oVZb+3pjhLXEDAwyANUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZ2CXd4lpG0dsvh/kwjnyrrniLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlZWY2MDktMTQ5Zi0z YmNmLWI4ODgtNTdiOTIyOWY3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADf4wK2I4iWiRfeiV6XZbAt6I3Wjpp35ddqEKzTS/9GgsBxvq/x+ FKNZ9/ZvMHOWnnRP+VY1BsaDI0fnQCuimY1ovWi9TBlQ/FraP2cJfZbjaHh1FgQw Kv8HgUt3jk8ngWDFhkGybXKNvY/LwCwA0ylaknk4BHT+D1Pm4e4MMnskEgpa6i99 FqQfy5BuyB+Jvr/PWtSezMMSO/oF5OFbgyJajxjauB+TOyPQEI8Mt4xFSTLK4u0i 7y8GKkE8BhHbmzT1hRVnD/U4tUwb/rknvKroEQSdywLFRiiZbbNYoppkEOYk1Z1b 4Z+jwQdgZv3EGletboLVbZtX429En4SpR/U= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:38 2026 by rpki-client