$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfdba7-8e2e-3f40-ba30-e352dbc24d7f.roa File: c4dfdba7-8e2e-3f40-ba30-e352dbc24d7f.roa (raw, json) Hash identifier: EwsGhLwrnPJ8J/14dYCrnkf6Qz6XrBNjsdwWsGjryrM= Subject key identifier: A2:36:A8:20:F9:8B:0D:40:F3:F5:D9:DE:95:76:F0:3D:3B:82:A9:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D32F5B055D639E221F0C75DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfdba7-8e2e-3f40-ba30-e352dbc24d7f.roa Signing time: Tue 17 Mar 2026 14:07:01 +0000 ROA not before: Tue 17 Mar 2026 14:07:01 +0000 ROA not after: Mon 15 Jun 2026 14:07:01 +0000 asID: 21313 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:b0:55:d6:39:e2:21:f0:c7:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 17 14:07:01 2026 GMT Not After : Jun 15 14:07:01 2026 GMT Subject: CN=dcde87c5-13e0-4074-8249-f436fc8a306b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:a3:45:d0:0e:45:c8:69:7b:7f:7f:21:1e: 39:3f:76:a1:b1:3b:72:8d:40:82:a5:24:e0:a6:1d: a6:45:ca:d2:07:78:80:b2:2a:ae:19:03:d6:58:9b: d0:f8:ec:c6:5f:88:39:f7:57:d0:d0:62:20:3b:5b: 52:62:40:12:dd:06:46:bd:4a:d6:4e:94:9c:32:de: ae:4c:83:cf:8d:d6:32:b1:7d:64:46:d8:be:a6:b1: 1b:d0:d7:61:c5:e6:6c:20:ed:3b:50:2c:e3:3a:8b: 5d:c9:bf:11:3e:56:c1:3d:4c:39:dd:a4:22:15:0b: f1:45:83:7b:46:87:a7:67:3c:88:26:9b:82:e4:91: e2:ce:46:a7:05:d6:98:fe:36:38:ed:b3:56:f8:17: 07:7b:6c:78:37:98:22:e6:9d:d4:0c:ab:be:95:16: 7b:66:8d:47:61:2b:52:63:0c:da:b8:cb:a6:c5:b7: a8:0b:a1:5e:5d:cc:7f:e6:1c:a5:a2:55:10:31:e0: 67:75:8f:15:20:85:9d:11:e5:0b:46:f9:c5:f4:a8: 26:01:5a:9b:e8:b5:4b:bb:db:93:c6:9c:a6:ea:82: a8:bc:1f:85:e6:a0:73:df:62:e5:a9:3b:63:d9:1d: fa:52:19:2e:81:5b:f0:8b:2e:ea:b1:59:48:db:75: f4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:A8:20:F9:8B:0D:40:F3:F5:D9:DE:95:76:F0:3D:3B:82:A9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4dfdba7-8e2e-3f40-ba30-e352dbc24d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:30:18:d7:ba:89:fc:c8:7c:68:68:f0:15:d5:f6:07:65:2e: e6:02:a4:e1:a1:69:66:13:79:2a:a0:7c:d5:82:0f:e9:45:1a: a5:9a:7d:86:5b:e6:e9:8e:55:29:ba:8f:56:9a:c7:b7:ee:1d: 70:07:9f:23:b8:b7:99:02:36:27:af:dd:01:2f:fb:f7:75:66: 76:d0:27:4e:7f:0b:15:54:64:30:21:c4:83:20:2d:93:0f:9d: 9d:75:be:de:f1:04:f4:c3:cb:54:3a:53:e6:2f:1c:26:6a:9c: 93:22:be:41:d4:68:f9:a3:e5:8d:6e:b0:42:12:8b:bf:bd:2f: ae:1d:f5:d2:18:10:9b:fa:cd:14:60:78:6b:29:42:81:bb:22: 65:fc:32:ff:92:f4:fe:52:9c:45:2a:83:02:e8:d3:70:4a:cf: b9:a6:12:ec:c0:73:1c:8d:db:48:24:51:60:d0:7f:53:a1:cd: 92:3b:b7:6e:e4:e0:5f:75:7a:74:55:55:a6:5f:09:6e:45:81: 33:e4:d1:e7:82:4b:14:3d:31:af:78:dd:99:77:39:74:9f:37: 76:c2:d2:65:54:46:ab:44:a6:13:41:de:5c:d2:f2:46:9d:9c: 9d:5b:68:bc:2d:4c:91:7b:9e:4c:0f:b5:cf:09:46:02:33:0f: d7:57:43:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y9bBV1jniIfDHXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNzE0MDcwMVoXDTI2MDYxNTE0MDcwMVowLzEtMCsGA1UEAxMk ZGNkZTg3YzUtMTNlMC00MDc0LTgyNDktZjQzNmZjOGEzMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ajRdAORchpe39/IR45P3ahsTtyjUCCpSTg ph2mRcrSB3iAsiquGQPWWJvQ+OzGX4g591fQ0GIgO1tSYkAS3QZGvUrWTpScMt6u TIPPjdYysX1kRti+prEb0NdhxeZsIO07UCzjOotdyb8RPlbBPUw53aQiFQvxRYN7 RoenZzyIJpuC5JHizkanBdaY/jY47bNW+BcHe2x4N5gi5p3UDKu+lRZ7Zo1HYStS YwzauMumxbeoC6FeXcx/5hylolUQMeBndY8VIIWdEeULRvnF9KgmAVqb6LVLu9uT xpym6oKovB+F5qBz32LlqTtj2R36UhkugVvwiy7qsVlI23X0sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKI2qCD5iw1A8/XZ3pV28D07gqn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRkZmRiYTctOGUyZS0z ZjQwLWJhMzAtZTM1MmRiYzI0ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkwGNe6ifzIfGho8BXV9gdlLuYCpOGhaWYTeSqgfNWCD+lFGqWa fYZb5umOVSm6j1aax7fuHXAHnyO4t5kCNiev3QEv+/d1ZnbQJ05/CxVUZDAhxIMg LZMPnZ11vt7xBPTDy1Q6U+YvHCZqnJMivkHUaPmj5Y1usEISi7+9L64d9dIYEJv6 zRRgeGspQoG7ImX8Mv+S9P5SnEUqgwLo03BKz7mmEuzAcxyN20gkUWDQf1OhzZI7 t27k4F91enRVVaZfCW5FgTPk0eeCSxQ9Ma943Zl3OXSfN3bC0mVURqtEphNB3lzS 8kadnJ1baLwtTJF7nkwPtc8JRgIzD9dXQ3I= -----END CERTIFICATE-----Generated at Thu Mar 26 21:45:50 2026 by rpki-client