$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa File: ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa (raw, json) Hash identifier: 439VeNFrHs6B5u5Ynel5X5mH1h3D5wkYBzbKcY4IVN4= Subject key identifier: 88:53:10:C4:17:69:B3:4E:E4:5A:5D:F6:79:C9:CF:5C:19:9A:67:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5AE9EBDDF5F6FB5802600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 396542 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:ae:9e:bd:df:5f:6f:b5:80:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=f63bb019-52a2-4e06-b460-859dded1153c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:a1:a7:32:af:1c:43:6c:42:95:a4:24:c1: 86:bc:30:5d:e8:10:87:c6:d8:3e:3e:0b:7b:b7:ef: b0:d1:a3:cb:b2:1d:96:f6:8a:eb:1f:55:b7:51:b0: e8:b5:53:c6:87:f9:3d:3f:b6:87:2e:2e:c9:33:a1: 9e:09:57:72:b5:04:1b:2e:85:82:b7:1c:c5:7a:89: 00:f3:b4:7d:35:e2:98:4f:f4:d2:42:f8:a7:a7:98: de:2e:7e:f1:d2:71:79:52:81:0a:0d:3b:a8:1d:7a: 27:cd:66:94:16:59:21:00:7f:ec:2b:80:3a:83:b7: 2d:28:4c:0d:8e:0f:2c:aa:59:28:a8:3a:4d:0d:4e: 16:3f:44:e6:c4:72:a8:7c:90:f2:70:15:25:b4:bb: 01:b6:21:70:8e:2a:f3:b1:4b:f8:ca:00:12:cd:64: 06:99:42:1d:fb:57:ce:56:24:fa:d8:ca:ef:4b:83: 9f:94:f6:cc:bd:88:00:88:0b:c0:dc:9e:77:4d:28: 73:e2:b8:d9:a6:bf:ae:96:57:d8:97:65:c9:18:5f: 9d:1c:9b:1a:de:9b:ce:a3:33:c7:1b:96:27:fd:6b: 11:1e:93:fb:b5:0d:e6:c6:a9:2b:73:cd:98:da:1b: 98:de:81:ca:98:0c:f6:52:1c:34:e7:c3:34:fa:0a: a1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:10:C4:17:69:B3:4E:E4:5A:5D:F6:79:C9:CF:5C:19:9A:67:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e4:57:5b:44:43:61:7e:20:41:c1:e9:17:0c:e3:40:6e:72: f9:cd:cf:64:98:82:2e:fa:87:01:3f:c6:7c:2c:2f:1a:ff:2a: 07:71:74:6a:c3:09:d1:23:b7:b2:2c:24:9d:b0:8a:e4:45:a7: f4:4b:04:85:a8:cb:76:18:4d:7c:b9:b8:36:cd:c2:f9:15:01: 33:79:74:01:cf:21:4f:a0:38:05:07:d9:f0:87:fd:84:b9:37: f5:59:60:ed:67:01:69:88:ab:5d:6f:86:df:ba:e1:e0:24:c5: 49:a9:f6:98:3b:7f:98:ff:11:23:75:9f:5f:05:9b:e7:82:30: e4:c5:58:7a:7d:7c:31:86:25:2e:6c:9e:b7:e5:89:62:c3:ef: 17:58:89:e9:1a:48:81:07:cf:b5:ba:64:69:77:fe:87:3a:7b: 31:a9:fd:05:b0:5e:d4:f2:03:11:f9:d4:91:07:45:b0:c2:d0: 51:13:4e:d1:87:0d:1d:1d:3b:ca:87:bd:73:d9:19:9e:2e:7e: 37:b3:c6:45:1d:d1:83:31:11:ea:07:3e:8e:53:10:48:19:03: f4:9c:c3:8e:49:56:6f:dd:e7:33:ca:b2:cb:26:bb:ff:37:a2: 57:50:eb:ff:e3:9d:a9:35:1c:d8:04:6b:db:42:b0:f8:9f:1d: 03:34:a8:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9a6evd9fb7WAJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk ZjYzYmIwMTktNTJhMi00ZTA2LWI0NjAtODU5ZGRlZDExNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2hpzKvHENsQpWkJMGGvDBd6BCHxtg+Pgt7 t++w0aPLsh2W9orrH1W3UbDotVPGh/k9P7aHLi7JM6GeCVdytQQbLoWCtxzFeokA 87R9NeKYT/TSQvinp5jeLn7x0nF5UoEKDTuoHXonzWaUFlkhAH/sK4A6g7ctKEwN jg8sqlkoqDpNDU4WP0TmxHKofJDycBUltLsBtiFwjirzsUv4ygASzWQGmUId+1fO ViT62MrvS4OflPbMvYgAiAvA3J53TShz4rjZpr+ullfYl2XJGF+dHJsa3pvOozPH G5Yn/WsRHpP7tQ3mxqkrc82Y2huY3oHKmAz2Uhw058M0+gqhlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhTEMQXabNO5Fpd9nnJz1wZmmchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE2MDRlMzctMmNlNy0z ZjgzLThjZjUtMWNlMzVhNWM0OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzkV1tEQ2F+IEHB6RcM40BucvnNz2SYgi76hwE/xnwsLxr/Kgdx dGrDCdEjt7IsJJ2wiuRFp/RLBIWoy3YYTXy5uDbNwvkVATN5dAHPIU+gOAUH2fCH /YS5N/VZYO1nAWmIq11vht+64eAkxUmp9pg7f5j/ESN1n18Fm+eCMOTFWHp9fDGG JS5snrfliWLD7xdYiekaSIEHz7W6ZGl3/oc6ezGp/QWwXtTyAxH51JEHRbDC0FET TtGHDR0dO8qHvXPZGZ4ufjezxkUd0YMxEeoHPo5TEEgZA/Scw45JVm/d5zPKsssm u/83oldQ6//jnak1HNgEa9tCsPifHQM0qGE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:27:40 2026 by rpki-client