$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa File: b99dd4a8-503c-32d4-9964-02e419491b81.roa (raw, json) Hash identifier: Uu5/IrXi37c1MutqOEDVCYx6UZ5lOAEB916kbMJVoaA= Subject key identifier: D5:F6:BB:9D:BB:11:C2:3D:86:AA:77:FE:48:CD:2D:53:FA:89:0F:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5622323083BA3C47BE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396564 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:56:22:32:30:83:ba:3c:47:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1afa4c44-98fe-4095-96ef-6314e542636c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c7:6a:8d:7c:65:4c:39:78:2b:76:fd:07:b7: 81:5e:c7:3d:e2:b8:4b:78:d2:a0:5a:a4:7c:40:9b: 98:9a:bb:5f:32:e2:e7:72:63:8d:b3:ef:52:64:ad: 95:8c:5a:5a:90:d8:26:10:c7:32:13:df:87:ab:5b: ad:98:d0:c9:36:37:bc:61:5a:47:ea:84:00:c3:24: 93:5b:80:50:cc:db:1a:53:4f:68:c9:0e:ea:bb:18: d6:44:80:39:f5:ae:72:2e:21:c8:f9:8c:b4:d0:fa: d9:00:2a:0c:ec:65:9c:da:a9:a2:d5:3f:17:64:64: 29:db:fe:ab:b6:20:e2:91:1a:c6:5b:a9:6e:bf:8c: 8d:bb:36:cd:52:36:81:da:af:c2:10:86:e6:d4:1b: 6d:6b:08:1a:94:8e:ea:fa:6d:69:3b:3d:1f:b8:09: 13:bd:09:81:c3:36:ce:7d:1a:29:4b:dc:80:24:cd: 5f:6c:78:9d:63:bc:c5:39:d9:49:1a:bb:fa:cf:be: e8:9d:04:44:99:64:bf:63:00:f9:7c:2b:85:bf:a3: e1:ca:7d:47:7a:28:91:be:d4:49:98:0d:92:03:e5: fa:1f:8e:20:28:17:f3:be:ef:50:89:c7:2a:b2:e7: ef:68:1c:dc:65:8c:48:d5:72:be:6e:9b:e5:dd:2a: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:BB:9D:BB:11:C2:3D:86:AA:77:FE:48:CD:2D:53:FA:89:0F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:87:29:24:5c:d8:b8:00:29:ef:8a:2a:14:fd:c6:bc:6b: 94:59:3d:86:86:2a:4a:7b:e7:c8:80:e1:1f:09:36:03:45:89: 3c:1b:83:d1:38:54:ed:d0:4a:b8:61:d1:e6:48:1d:f8:34:2f: 49:8b:dd:ad:48:0a:63:1e:c5:e9:f8:c4:74:71:ea:cd:c2:9e: a6:ec:07:36:22:95:3a:65:b2:6d:45:6a:2f:1a:96:bb:b7:f7: 94:c3:5d:6c:cf:de:2d:5b:46:0d:a7:14:70:2f:66:14:d4:cc: 82:f2:b5:04:70:b2:d7:4a:da:50:16:18:cf:4a:73:bb:82:7d: 51:23:40:d2:d0:6e:c9:67:68:15:93:b1:cb:73:6d:19:2e:9d: ec:95:6f:71:86:be:28:ce:11:ee:c8:14:c6:e5:67:f8:4a:a9: 40:09:a0:6d:48:49:2e:f8:29:f3:23:cc:13:47:dc:a9:68:87: fd:80:d0:51:b4:de:a4:f3:2c:3c:2d:38:b9:b1:75:bc:4d:a2: 4b:16:24:62:68:7e:a9:96:f0:f0:8b:c3:45:c7:aa:8b:54:87: 48:50:18:d0:4e:9f:35:55:36:62:42:a6:7c:f6:d0:a6:eb:83: d6:b2:26:e9:07:22:95:b8:e5:f4:17:7a:f6:11:aa:f5:74:02: 6f:a5:ad:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lYiMjCDujxHvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MWFmYTRjNDQtOThmZS00MDk1LTk2ZWYtNjMxNGU1NDI2MzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicdqjXxlTDl4K3b9B7eBXsc94rhLeNKgWqR8 QJuYmrtfMuLncmONs+9SZK2VjFpakNgmEMcyE9+Hq1utmNDJNje8YVpH6oQAwyST W4BQzNsaU09oyQ7quxjWRIA59a5yLiHI+Yy00PrZACoM7GWc2qmi1T8XZGQp2/6r tiDikRrGW6luv4yNuzbNUjaB2q/CEIbm1BttawgalI7q+m1pOz0fuAkTvQmBwzbO fRopS9yAJM1fbHidY7zFOdlJGrv6z77onQREmWS/YwD5fCuFv6Phyn1HeiiRvtRJ mA2SA+X6H44gKBfzvu9QiccqsufvaBzcZYxI1XK+bpvl3SqtXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNX2u527EcI9hqp3/kjNLVP6iQ+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk5ZGQ0YTgtNTAzYy0z MmQ0LTk5NjQtMDJlNDE5NDkxYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDdIcpJFzYuAAp74oqFP3GvGuUWT2GhipKe+fI gOEfCTYDRYk8G4PROFTt0Eq4YdHmSB34NC9Ji92tSApjHsXp+MR0cerNwp6m7Ac2 IpU6ZbJtRWovGpa7t/eUw11sz94tW0YNpxRwL2YU1MyC8rUEcLLXStpQFhjPSnO7 gn1RI0DS0G7JZ2gVk7HLc20ZLp3slW9xhr4ozhHuyBTG5Wf4SqlACaBtSEku+Cnz I8wTR9ypaIf9gNBRtN6k8yw8LTi5sXW8TaJLFiRiaH6plvDwi8NFx6qLVIdIUBjQ Tp81VTZiQqZ89tCm64PWsibpByKVuOX0F3r2Ear1dAJvpa0B -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:57 2026 by rpki-client