$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa File: bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa (raw, json) Hash identifier: itmTFZx70IPUhbuI9YbZi6FrRRVorl4nnIa/bEbYtmg= Subject key identifier: 35:9D:57:57:8C:D7:C2:47:90:A9:90:99:2D:4A:F0:D3:96:AC:43:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8AE78613739E3F4D0A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396574 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8a:e7:86:13:73:9e:3f:4d:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=61910509-934f-4efb-886f-69c5a6d8370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:ef:13:51:a3:d6:64:6b:1f:ff:c7:22:c2: 39:c9:48:b1:09:de:67:ed:b6:5d:e1:14:1f:cc:55: 9b:92:1b:b2:aa:84:bf:18:92:82:aa:37:7f:0b:80: 4e:69:e3:7b:7c:66:20:de:85:7a:27:c2:5e:60:ac: d4:40:17:61:1f:58:41:b2:21:4b:44:8b:02:2e:46: ee:d9:c0:56:5d:fa:6c:94:db:7d:e1:fd:d0:12:7e: 00:54:d3:b0:18:5c:59:ef:e8:12:2f:31:58:5b:0b: 18:c5:e2:68:94:ef:2c:9e:28:2a:9f:43:66:33:d0: f8:ab:fb:8e:8d:7a:23:85:c5:43:57:90:26:03:5e: dd:17:48:0c:dc:d5:a8:70:92:e6:79:15:38:ec:19: 9e:c6:c8:65:0e:10:c7:c9:fe:3a:30:f9:1d:c9:1f: 68:71:7b:63:7a:bb:7e:70:c2:e9:79:3f:bd:d5:5a: 3d:2f:8c:0c:3b:f4:b2:0c:e6:8d:eb:52:24:c5:18: 21:83:e7:5d:fc:6e:14:ce:86:88:d7:b9:fa:c4:81: 87:3e:bc:d2:a8:58:f8:8c:26:ad:bb:4e:54:66:32: bb:83:ca:d8:90:7d:a8:8b:b0:71:35:54:b7:55:de: 06:41:46:c6:d3:68:43:2e:65:51:24:93:aa:55:c6: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:57:57:8C:D7:C2:47:90:A9:90:99:2D:4A:F0:D3:96:AC:43:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc7f2566-5bc9-3712-af78-c0d2b94623fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c1:e2:1a:72:7b:0d:65:da:88:82:1b:db:0f:8f:84:b7:60: b3:61:e0:d7:3d:8e:54:bf:e6:e3:8f:f0:6d:e0:2f:cc:a2:d4: 11:00:75:9e:c9:4e:1c:29:25:db:35:0c:a3:0b:bf:3a:1a:6f: 24:44:85:0b:46:20:ae:71:0e:98:5e:49:62:0b:17:39:a9:6a: 19:17:d6:25:67:d4:7f:a9:84:dc:1c:26:c3:4c:20:a6:74:29: 81:ca:78:f5:10:e4:af:36:65:ac:2c:1f:db:cf:8b:60:2b:e3: 6e:d8:3a:ae:5f:04:5f:fc:62:27:7a:a2:6d:fb:d6:aa:3e:5e: 17:a6:97:a8:fc:a6:94:05:eb:dc:67:ce:1c:71:1f:14:dc:6e: 5d:29:63:83:b7:11:4f:17:84:10:69:61:b2:48:3e:53:a0:d8: 51:e8:3e:b8:13:72:8a:d1:cd:db:f8:39:8c:91:ab:ae:c0:2d: 83:cd:fd:6b:7a:73:45:66:84:c7:9c:0f:70:a3:f2:43:9f:79: 97:16:7d:1b:0b:6a:82:8b:8c:ee:04:03:67:f8:6c:9e:cf:47: 8f:6a:79:00:71:dc:27:71:fe:41:30:f1:da:09:f6:48:e8:28: b9:8f:e1:b9:80:b0:8a:18:10:fd:38:13:8f:06:c2:40:b9:b7: d4:d4:ca:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCornhhNznj9NCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjE5MTA1MDktOTM0Zi00ZWZiLTg4NmYtNjljNWE2ZDgzNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJTvE1Gj1mRrH//HIsI5yUixCd5n7bZd4RQf zFWbkhuyqoS/GJKCqjd/C4BOaeN7fGYg3oV6J8JeYKzUQBdhH1hBsiFLRIsCLkbu 2cBWXfpslNt94f3QEn4AVNOwGFxZ7+gSLzFYWwsYxeJolO8snigqn0NmM9D4q/uO jXojhcVDV5AmA17dF0gM3NWocJLmeRU47BmexshlDhDHyf46MPkdyR9ocXtjert+ cMLpeT+91Vo9L4wMO/SyDOaN61IkxRghg+dd/G4UzoaI17n6xIGHPrzSqFj4jCat u05UZjK7g8rYkH2oi7BxNVS3Vd4GQUbG02hDLmVRJJOqVcYAkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDWdV1eM18JHkKmQmS1K8NOWrEOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM3ZjI1NjYtNWJjOS0z NzEyLWFmNzgtYzBkMmI5NDYyM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAlweIacnsNZdqIghvbD4+Et2CzYeDXPY5Uv+bj j/Bt4C/MotQRAHWeyU4cKSXbNQyjC786Gm8kRIULRiCucQ6YXkliCxc5qWoZF9Yl Z9R/qYTcHCbDTCCmdCmBynj1EOSvNmWsLB/bz4tgK+Nu2DquXwRf/GIneqJt+9aq Pl4Xppeo/KaUBevcZ84ccR8U3G5dKWODtxFPF4QQaWGySD5ToNhR6D64E3KK0c3b +DmMkauuwC2Dzf1renNFZoTHnA9wo/JDn3mXFn0bC2qCi4zuBANn+Gyez0ePankA cdwncf5BMPHaCfZI6Ci5j+G5gLCKGBD9OBOPBsJAubfU1Moy -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:48 2026 by rpki-client