$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa File: bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa (raw, json) Hash identifier: N239nQqkSDawSPUTT3KUC2fQQ75uAVPseqkPYMqsuNw= Subject key identifier: D9:49:70:CD:D5:62:D0:86:22:1E:98:48:63:80:3B:21:1F:DC:E9:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA54F328E4A28B3E9A6F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397212 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:54:f3:28:e4:a2:8b:3e:9a:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=059a0871-1004-491e-9b52-06ce152fb117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:14:10:2d:ac:68:09:c4:fa:5b:6b:16:47: 01:25:c5:f3:3f:a7:ce:a1:0c:4f:03:0b:7b:8e:3b: 5a:62:4d:09:1a:04:47:d9:50:28:c6:a8:1f:d5:11: 5b:64:94:de:ec:2f:7e:dc:88:46:c2:d1:fd:3c:5e: 7d:49:c7:ec:87:d2:a9:df:86:92:1c:bb:4c:40:0f: 20:ac:a6:6f:0d:88:57:3f:5d:cd:e9:8c:81:37:d1: 58:ef:b1:c5:8f:a9:25:f7:75:81:34:70:dd:42:e3: e7:f7:0b:53:c0:78:7a:a9:a6:de:2b:db:bf:8a:42: 5c:94:17:c6:e1:3a:05:e0:a1:09:df:19:25:a1:18: f8:1b:12:12:cc:55:1f:43:cd:10:a3:e1:8c:ad:aa: 8d:87:8b:4f:d3:91:2a:4d:48:a4:46:16:d7:c4:0f: b5:e7:f2:c3:85:80:dc:a4:c9:e2:dc:72:31:d1:5c: 92:db:36:79:c1:33:f1:79:e0:dc:13:5a:7f:11:ef: 11:8e:1a:75:70:fb:3c:17:a0:d6:b1:25:d3:5e:cd: 94:47:ce:43:88:74:fb:70:f0:66:f6:fb:fe:1d:0e: 73:68:0b:3f:b3:ff:e8:56:81:03:00:1f:fa:03:36: 51:2c:42:e7:b0:7b:17:6a:b0:63:ce:64:61:ed:6d: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:70:CD:D5:62:D0:86:22:1E:98:48:63:80:3B:21:1F:DC:E9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9991f1-5fbf-33f6-a6ab-40b60b97b971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:61:24:6f:ad:56:b6:cb:25:3f:3a:64:a6:64:8e:0b:f6:b1: 62:af:48:18:6d:98:bc:ff:56:94:c5:50:87:48:eb:58:73:f2: ad:85:f1:3d:33:11:53:ee:ab:83:75:01:b2:d8:b5:91:21:b4: 53:26:2c:75:83:62:5e:d2:d1:75:1b:e7:c4:e5:0d:b3:01:aa: 5f:5a:4a:1e:30:a9:f4:e9:ff:0e:2b:ca:7d:ee:7b:92:57:f1: bf:5d:25:be:73:7d:e7:db:26:ab:5d:00:bf:af:bf:cb:0c:b3: d1:6a:6f:3a:0f:84:d4:b7:36:ce:37:8a:3d:d6:25:1c:22:b2: fc:13:b1:d8:db:d8:a9:82:bb:53:ac:82:2a:03:ab:98:16:a8: ca:a5:e8:01:0a:42:4e:fd:cc:29:09:9f:7e:f3:bf:9d:14:90: fb:16:be:09:27:ac:e8:0b:d8:8a:3d:c5:0b:93:b3:b1:bf:2c: ef:83:e3:52:25:a1:65:63:8c:a4:89:f0:4f:3c:68:4b:4f:07: c4:01:aa:da:62:82:e6:1f:76:c6:51:5e:a7:59:bd:44:7b:c6: 37:9f:99:04:cf:5b:08:66:40:ce:c5:e5:b9:21:04:b2:42:e8: 48:83:f4:87:ba:eb:73:c6:9f:02:dd:14:76:5f:17:c5:07:51: ac:46:41:29 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lTzKOSiiz6abwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MDU5YTA4NzEtMTAwNC00OTFlLTliNTItMDZjZTE1MmZiMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oYUEC2saAnE+ltrFkcBJcXzP6fOoQxPAwt7 jjtaYk0JGgRH2VAoxqgf1RFbZJTe7C9+3IhGwtH9PF59Scfsh9Kp34aSHLtMQA8g rKZvDYhXP13N6YyBN9FY77HFj6kl93WBNHDdQuPn9wtTwHh6qabeK9u/ikJclBfG 4ToF4KEJ3xkloRj4GxISzFUfQ80Qo+GMraqNh4tP05EqTUikRhbXxA+15/LDhYDc pMni3HIx0VyS2zZ5wTPxeeDcE1p/Ee8Rjhp1cPs8F6DWsSXTXs2UR85DiHT7cPBm 9vv+HQ5zaAs/s//oVoEDAB/6AzZRLELnsHsXarBjzmRh7W3yvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNlJcM3VYtCGIh6YSGOAOyEf3OlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI5OTkxZjEtNWZiZi0z M2Y2LWE2YWItNDBiNjBiOTdiOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB0YSRvrVa2yyU/OmSmZI4L9rFir0gYbZi8/1aU xVCHSOtYc/KthfE9MxFT7quDdQGy2LWRIbRTJix1g2Je0tF1G+fE5Q2zAapfWkoe MKn06f8OK8p97nuSV/G/XSW+c33n2yarXQC/r7/LDLPRam86D4TUtzbON4o91iUc IrL8E7HY29ipgrtTrIIqA6uYFqjKpegBCkJO/cwpCZ9+87+dFJD7Fr4JJ6zoC9iK PcULk7Oxvyzvg+NSJaFlY4ykifBPPGhLTwfEAaraYoLmH3bGUV6nWb1Ee8Y3n5kE z1sIZkDOxeW5IQSyQuhIg/SHuutzxp8C3RR2XxfFB1GsRkEp -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:03 2026 by rpki-client