$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa File: cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa (raw, json) Hash identifier: FM3wEDnxReY4xIjLfnOQM3hHq+11LBs6rd/PQS97vf8= Subject key identifier: 55:70:F3:CA:14:21:10:B2:0B:52:8E:42:C9:FC:01:25:1A:8F:B0:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A198A731B7B6819F35380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19836 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:19:8a:73:1b:7b:68:19:f3:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=15ebfb12-f9c6-49a9-8f2c-832bf6a95116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:9a:69:eb:53:98:87:a4:cd:ad:5a:88:42: 85:cd:ce:44:a3:d2:96:22:a4:0a:46:f5:3d:10:03: 50:2e:89:c6:b9:e0:3a:3d:13:c5:35:84:b1:9d:9d: e2:88:d1:24:6a:df:70:c8:99:5d:9e:97:17:70:27: bb:3d:6b:09:ec:73:b6:18:e8:5a:d7:fd:af:3b:e4: 8b:84:7e:a1:ac:bd:ec:31:a9:fc:ae:b2:ec:76:ad: 71:f1:be:ab:ee:34:86:60:17:08:91:13:6c:f7:b2: 49:e1:89:73:dd:f0:21:db:9d:5a:d7:99:d3:e9:ad: 0d:cb:06:08:62:26:29:26:48:47:8a:34:0d:65:15: 97:7a:41:ba:d3:c3:e2:9d:64:af:51:d5:26:b8:0d: c9:25:58:44:6f:1c:b7:d2:68:29:4f:4c:f8:eb:ea: 1c:c1:2d:d6:7c:5e:12:eb:f1:e1:70:c2:1c:7d:cf: 74:06:df:23:63:21:51:66:c2:8e:5a:f5:9f:cb:23: 8b:28:50:45:8b:4c:01:60:36:a2:ca:74:c4:be:39: 9d:bf:b4:bd:05:38:2d:d0:b1:8a:87:9c:9d:ae:c5: 15:20:f9:36:85:df:46:19:eb:9f:e1:80:06:32:10: 78:25:ed:fe:33:cd:c5:39:92:c6:de:56:c5:a0:ca: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:70:F3:CA:14:21:10:B2:0B:52:8E:42:C9:FC:01:25:1A:8F:B0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7e:d4:5e:9d:0d:3c:d2:bf:ff:62:bf:88:72:6e:ab:3f:c5: b1:75:f3:4c:ac:91:b2:ff:21:ca:66:8e:73:3b:17:d5:54:0f: 98:95:93:32:26:e9:21:b3:e4:50:86:f9:bb:8b:51:2e:36:c3: a9:77:8f:e6:2b:6f:d5:4c:ab:41:3c:2c:e6:83:e7:c2:c2:31: a0:5e:42:6e:75:08:3b:27:3c:b9:2b:2f:76:96:ec:e5:9b:06: ca:6a:0f:74:f1:3e:bf:fd:92:b3:74:b1:9c:b7:90:01:88:d7: 33:71:97:eb:f5:18:ab:8e:25:17:57:73:76:54:9e:c5:a9:51: 07:88:c0:78:f6:8a:f4:b7:c2:48:8f:47:93:13:6a:49:76:db: d5:e7:b6:02:3f:b4:8f:85:50:a1:ba:9d:82:7f:52:21:6f:ec: 2f:97:be:1c:99:1f:c1:38:04:ed:67:e1:f6:e8:6c:68:94:d6: 72:bb:bc:74:90:29:36:f5:40:e2:74:69:1f:c3:cc:b3:0d:d6: d4:6d:da:50:d0:ce:b2:c1:0d:2c:16:a5:8d:f3:92:63:37:81: 0a:d8:f0:44:7a:de:60:65:1f:66:b1:8a:60:5b:8c:cd:ec:2f: 3e:18:0c:cb:db:d6:1c:d4:58:26:c0:62:c2:d8:0b:38:df:3b: 4d:bb:23:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jehmKcxt7aBnzU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTVlYmZiMTItZjljNi00OWE5LThmMmMtODMyYmY2YTk1MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidaaaetTmIekza1aiEKFzc5Eo9KWIqQKRvU9 EANQLonGueA6PRPFNYSxnZ3iiNEkat9wyJldnpcXcCe7PWsJ7HO2GOha1/2vO+SL hH6hrL3sMan8rrLsdq1x8b6r7jSGYBcIkRNs97JJ4Ylz3fAh251a15nT6a0NywYI YiYpJkhHijQNZRWXekG608PinWSvUdUmuA3JJVhEbxy30mgpT0z46+ocwS3WfF4S 6/HhcMIcfc90Bt8jYyFRZsKOWvWfyyOLKFBFi0wBYDaiynTEvjmdv7S9BTgt0LGK h5ydrsUVIPk2hd9GGeuf4YAGMhB4Je3+M83FOZLG3lbFoMqlGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVw88oUIRCyC1KOQsn8ASUaj7DnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2QwODZmMGUtNjcxZi0z OWJhLWI2Y2YtZTMzNjlhY2MzMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIp+1F6dDTzSv/9iv4hybqs/xbF180yskbL/IcpmjnM7F9VUD5iV kzIm6SGz5FCG+buLUS42w6l3j+Yrb9VMq0E8LOaD58LCMaBeQm51CDsnPLkrL3aW 7OWbBspqD3TxPr/9krN0sZy3kAGI1zNxl+v1GKuOJRdXc3ZUnsWpUQeIwHj2ivS3 wkiPR5MTakl229XntgI/tI+FUKG6nYJ/UiFv7C+XvhyZH8E4BO1n4fbobGiU1nK7 vHSQKTb1QOJ0aR/DzLMN1tRt2lDQzrLBDSwWpY3zkmM3gQrY8ER63mBlH2aximBb jM3sLz4YDMvb1hzUWCbAYsLYCzjfO027I6o= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:34 2026 by rpki-client