$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa File: c1cdff99-9c19-353c-afbc-d652d487ef5f.roa (raw, json) Hash identifier: BrUNzJaNSXKl0tOILaGk6bRxOWWmRhQn+AKG8aZH8Ok= Subject key identifier: 69:04:A8:BF:A2:E4:51:C7:66:B0:56:B7:F6:2F:3F:1B:AE:F7:4B:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912519DDC834E115F7EB900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396827 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:51:9d:dc:83:4e:11:5f:7e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=0dd75c3d-e26a-4d65-99df-0d6772acff7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:95:7c:42:9c:84:7d:24:41:bb:fb:0b:98:bf: 4f:0c:08:b6:67:af:00:b7:42:93:6c:ae:14:31:65: 47:27:07:2a:7b:fc:07:44:3f:cd:de:79:0f:25:cf: 03:71:3b:a4:62:0a:74:fc:de:91:5a:34:4f:da:11: 39:9c:af:0b:c2:89:ea:3a:68:b6:08:0c:80:48:1c: 76:72:5b:18:a1:d2:c7:e4:19:aa:e5:fe:7c:55:be: c7:ed:28:4a:b4:bc:39:1f:aa:97:be:83:a7:e5:60: 74:53:49:55:87:71:9c:13:3b:18:41:f4:24:8a:32: 10:9c:9d:bb:ee:f8:38:5e:71:8e:0d:a2:7e:27:c8: 95:4f:4c:e3:15:e0:7a:2b:d3:9b:fe:01:b3:d3:e8: 4b:d8:62:7f:a5:b1:77:6b:1e:33:ef:a7:4e:25:0b: 5f:ed:95:ef:17:0b:21:11:84:ae:a9:7a:6e:9b:3a: 96:53:13:04:3c:8b:b8:47:2e:27:9d:18:fe:ab:c5: 5f:aa:26:48:a8:65:cb:4e:3c:eb:f6:f0:a7:cd:e1: 1b:5a:4d:7f:f9:ee:da:be:b1:df:9f:ee:21:4c:ba: 59:d3:ac:78:e1:f3:17:4c:03:8c:5a:13:ed:5d:d6: c1:17:be:5e:b5:dd:10:ed:8d:9d:00:7c:ae:27:6a: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:A8:BF:A2:E4:51:C7:66:B0:56:B7:F6:2F:3F:1B:AE:F7:4B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d3:95:ab:f8:f5:9f:39:89:6a:46:17:56:e3:85:a5:9a:0a: d2:7f:4b:ce:17:c6:6f:de:be:f2:74:54:78:ce:e3:8d:e5:ed: 0d:1f:74:af:0c:75:00:14:d9:80:41:be:2e:1b:2d:bf:49:c4: 53:6f:8a:dc:01:3a:44:6d:f3:d4:a4:63:87:ab:92:11:f9:75: 4f:a9:eb:32:97:b8:92:c9:4d:9e:07:73:e9:ab:e8:16:98:94: 18:07:fc:49:de:62:29:13:d0:47:00:d4:41:2c:bc:ff:8d:21: 25:72:90:f8:86:b1:45:c3:b8:88:b2:16:61:84:2d:91:72:24: ea:48:a6:6a:5d:bf:7c:69:d8:3e:e6:1e:d8:99:3f:52:62:2b: e8:d5:81:ca:74:70:cf:b8:7b:ef:a6:e3:98:87:c0:ce:4f:b0: f6:9d:5a:7c:1f:cc:c5:2b:c1:6a:86:15:0d:f2:0b:38:ed:75: d9:ff:11:68:49:ae:6b:a0:87:cb:73:cf:6d:40:5a:3a:c5:95: c8:e1:fe:fd:d6:b5:67:ad:49:6b:f4:01:ce:ba:6d:db:3e:ce: 0a:08:50:8d:f2:a1:1a:4e:4f:45:99:83:4d:34:68:fa:17:45: 32:66:de:2d:1c:b4:8b:7b:f4:d5:aa:36:b4:c2:97:3d:06:4b: 98:24:9d:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JElGd3INOEV9+uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGRkNzVjM2QtZTI2YS00ZDY1LTk5ZGYtMGQ2NzcyYWNmZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZV8QpyEfSRBu/sLmL9PDAi2Z68At0KTbK4U MWVHJwcqe/wHRD/N3nkPJc8DcTukYgp0/N6RWjRP2hE5nK8LwonqOmi2CAyASBx2 clsYodLH5Bmq5f58Vb7H7ShKtLw5H6qXvoOn5WB0U0lVh3GcEzsYQfQkijIQnJ27 7vg4XnGODaJ+J8iVT0zjFeB6K9Ob/gGz0+hL2GJ/pbF3ax4z76dOJQtf7ZXvFwsh EYSuqXpumzqWUxMEPIu4Ry4nnRj+q8VfqiZIqGXLTjzr9vCnzeEbWk1/+e7avrHf n+4hTLpZ06x44fMXTAOMWhPtXdbBF75etd0Q7Y2dAHyuJ2rodQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGkEqL+i5FHHZrBWt/YvPxuu90tnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFjZGZmOTktOWMxOS0z NTNjLWFmYmMtZDY1MmQ0ODdlZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvTlav49Z85iWpGF1bjhaWaCtJ/S84Xxm/evvJ0VHjO443l7Q0f dK8MdQAU2YBBvi4bLb9JxFNvitwBOkRt89SkY4erkhH5dU+p6zKXuJLJTZ4Hc+mr 6BaYlBgH/EneYikT0EcA1EEsvP+NISVykPiGsUXDuIiyFmGELZFyJOpIpmpdv3xp 2D7mHtiZP1JiK+jVgcp0cM+4e++m45iHwM5PsPadWnwfzMUrwWqGFQ3yCzjtddn/ EWhJrmugh8tzz21AWjrFlcjh/v3WtWetSWv0Ac66bds+zgoIUI3yoRpOT0WZg000 aPoXRTJm3i0ctIt79NWqNrTClz0GS5gknR4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:58 2026 by rpki-client