$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa File: c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa (raw, json) Hash identifier: 5IL0WgGPoBr7YhLhMdLXz7g14cHvWZL8fEzyiLVRddo= Subject key identifier: 0C:D5:32:93:34:86:BD:44:44:8B:84:A6:81:05:37:1F:3A:3C:F6:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5CAC2FE300B9E05722C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396566 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:5c:ac:2f:e3:00:b9:e0:57:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3908674e-a03f-4f1a-bb69-c74c1b8da64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:ed:44:6f:31:cb:04:89:ed:8d:f6:58:45: f0:e4:2d:3d:f8:24:13:64:5a:61:fb:1e:8a:98:a0: be:6b:e6:72:e2:f6:b9:6a:01:33:e3:73:9e:c9:a1: fa:24:2d:12:84:58:d2:6a:0d:e2:77:73:ee:c6:65: 9a:42:df:41:ea:3f:d0:5c:9f:eb:1e:a8:29:13:00: 12:31:62:47:44:98:78:bf:bb:46:d2:83:9c:c8:04: af:d1:5e:21:b7:8c:82:ea:dc:3e:32:e2:84:64:53: d1:c3:19:96:97:6e:5d:88:ba:8b:7a:15:2f:ad:04: ee:5d:4e:39:45:7e:74:70:11:37:82:7d:ae:c0:e4: 7b:a5:ee:39:32:ac:e9:be:47:b9:f6:e1:9a:9a:48: 66:c3:4c:87:a6:20:a1:a5:46:bd:ee:c0:ac:b3:bf: 3e:77:a3:0a:4c:79:81:22:c9:cc:88:3a:23:51:55: 6d:2e:da:81:d7:1b:4e:9b:83:68:d3:20:a2:1e:38: a7:4e:84:f4:d8:1b:d2:e8:75:62:06:8d:3f:57:00: e1:68:74:42:63:6f:64:c9:dc:e1:72:58:36:b6:57: 7e:69:bc:9d:04:be:b8:57:ad:ec:1b:cd:0c:d7:32: 46:2a:a0:c5:4e:db:0e:26:36:a6:fb:e8:33:0d:d4: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:32:93:34:86:BD:44:44:8B:84:A6:81:05:37:1F:3A:3C:F6:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1e:2f:3f:ae:f2:eb:3f:14:6a:ab:d7:43:9d:82:5c:3a:0a: 2a:f9:0a:c5:e2:c4:d8:04:91:95:f0:b2:27:e5:fb:08:72:c7: 6f:b3:8c:ab:31:bd:7f:d3:22:c4:36:ce:72:80:b1:d5:e2:4c: 0a:5a:57:53:0c:95:3b:6c:ec:72:3d:0e:78:cb:f8:42:ec:34: 86:7e:74:4e:82:12:5b:d7:d7:f2:2f:f1:10:76:39:47:34:3a: c5:66:d3:3a:4d:47:db:33:62:13:6c:57:0d:31:22:b4:28:ad: 75:ea:cc:d0:b3:72:43:3c:c4:7c:1c:02:3a:bd:c5:1b:aa:a8: 5e:aa:ca:e5:1d:91:f2:bb:5b:83:1b:58:90:55:c8:20:a8:67: f8:36:67:9e:38:95:bb:1d:91:ef:c9:fe:c3:d4:49:38:8e:9c: e4:74:51:6f:02:44:16:6d:80:49:b9:dd:e2:58:b6:d8:b4:3c: 26:af:bc:e6:b9:b9:ff:d0:7e:3b:f6:fe:9a:de:ed:18:eb:1b: c9:53:9e:ae:e2:e4:c1:70:25:d5:5e:cc:f8:ed:b3:3b:66:98: 18:60:d6:be:ba:11:75:88:b7:18:f7:2e:a8:04:be:5d:00:f3: e4:4b:a5:d7:c2:c5:0c:34:67:43:fb:a2:bd:4f:23:26:3f:2a: 4e:06:97:8a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lysL+MAueBXIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzkwODY3NGUtYTAzZi00ZjFhLWJiNjktYzc0YzFiOGRhNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16btRG8xywSJ7Y32WEXw5C09+CQTZFph+x6K mKC+a+Zy4va5agEz43OeyaH6JC0ShFjSag3id3PuxmWaQt9B6j/QXJ/rHqgpEwAS MWJHRJh4v7tG0oOcyASv0V4ht4yC6tw+MuKEZFPRwxmWl25diLqLehUvrQTuXU45 RX50cBE3gn2uwOR7pe45Mqzpvke59uGamkhmw0yHpiChpUa97sCss78+d6MKTHmB IsnMiDojUVVtLtqB1xtOm4No0yCiHjinToT02BvS6HViBo0/VwDhaHRCY29kydzh clg2tld+abydBL64V63sG80M1zJGKqDFTtsOJjam++gzDdTcCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAzVMpM0hr1ERIuEpoEFNx86PPZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdmMzNjNWEtYWFhNS0z MWIxLWFlZjUtOTg1MWVlMjkxYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFHi8/rvLrPxRqq9dDnYJcOgoq+QrF4sTYBJGV 8LIn5fsIcsdvs4yrMb1/0yLENs5ygLHV4kwKWldTDJU7bOxyPQ54y/hC7DSGfnRO ghJb19fyL/EQdjlHNDrFZtM6TUfbM2ITbFcNMSK0KK116szQs3JDPMR8HAI6vcUb qqheqsrlHZHyu1uDG1iQVcggqGf4NmeeOJW7HZHvyf7D1Ek4jpzkdFFvAkQWbYBJ ud3iWLbYtDwmr7zmubn/0H479v6a3u0Y6xvJU56u4uTBcCXVXsz47bM7ZpgYYNa+ uhF1iLcY9y6oBL5dAPPkS6XXwsUMNGdD+6K9TyMmPypOBpeK -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:42 2026 by rpki-client