$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa File: cd792ac4-72c5-3479-867d-e3c0dceee16a.roa (raw, json) Hash identifier: GBxPOxSX5f1UCw4AgzN/wESpqV80bAcUl8MDiNsPb30= Subject key identifier: 51:0B:8E:1F:47:99:2F:76:70:40:8A:F0:D1:E3:21:1B:23:1E:5C:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A8DA24A30885D94F21F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40647 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:8d:a2:4a:30:88:5d:94:f2:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=320c64f0-cf76-4066-a324-e6459663c533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:85:4d:66:49:47:48:e4:8b:30:72:f4:09: 98:21:5d:eb:cf:3e:fd:c7:4f:ad:fc:8e:5c:37:fd: 5f:b5:7a:3c:db:3d:b5:0e:0b:3f:e2:0e:20:a9:fb: cd:32:2a:db:2d:6b:82:29:3a:bc:66:bf:85:35:a7: a2:b7:db:e5:07:38:7b:17:ac:c2:8c:60:9c:35:96: ae:95:09:c7:0a:98:20:00:a7:07:6e:ee:5c:70:5e: 21:a8:35:81:ef:d9:14:6a:ef:2b:ca:db:ca:52:92: 86:de:3f:55:47:b4:24:45:5c:49:ff:29:52:ea:c2: 76:f6:35:11:ee:25:da:88:32:46:7d:84:8b:7c:68: 70:ef:c4:0e:43:b3:38:ba:8f:a2:a7:b0:f3:46:88: 10:d1:20:f6:8a:a6:bb:0a:e1:e9:05:3d:7f:fd:dc: 7a:ce:e4:aa:37:bc:b6:e3:5d:08:36:f9:ee:fe:c6: 97:dd:57:98:68:68:f7:e9:9c:e7:fb:aa:74:26:88: 04:41:78:f0:6b:04:58:3b:21:b1:6d:42:ae:0f:83: d9:59:94:ba:db:e9:fc:28:60:13:e1:d7:02:49:d2: 1f:5f:eb:b7:5f:6b:37:30:8a:15:1a:64:1e:bb:6d: 7f:dd:31:25:4d:7e:92:a4:66:33:de:3c:8d:4e:4c: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:8E:1F:47:99:2F:76:70:40:8A:F0:D1:E3:21:1B:23:1E:5C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:87:12:c0:3b:89:59:21:5d:12:f4:f9:00:7d:14:91:b8:c2: 39:29:1c:98:c2:41:4a:2d:a9:55:f3:eb:95:5e:78:1d:74:69: c3:39:d3:41:e0:04:88:da:2e:7b:be:fb:3d:2a:c7:c1:fd:15: 46:48:52:dc:91:d3:36:b0:e5:30:f0:60:27:c6:95:24:af:dc: 9f:3c:2d:ad:e8:8c:a7:0b:15:33:4c:e0:de:dd:21:dc:25:42: 2c:ab:58:85:b0:39:0e:f3:b0:66:00:4f:60:6b:b9:d7:b9:6c: 09:e2:2f:95:90:15:ce:0e:92:ed:61:e9:7d:89:80:2e:91:72: 99:04:a7:4c:4d:5c:32:d3:51:a1:25:05:11:3c:d3:66:2b:59: 8e:52:7a:9e:e5:30:d9:7e:bb:68:8c:8c:cf:77:55:07:86:0c: 50:30:64:61:ef:ac:c1:5d:88:b3:2c:db:ab:63:03:f1:a3:64: 76:3a:e9:80:6d:c5:c7:28:dd:bf:41:05:22:1f:f7:84:d0:56: dc:e5:a4:fc:fa:ec:63:62:97:a2:54:f5:1c:d3:20:eb:fc:e8: 30:c3:e3:ab:34:a7:3a:f4:c7:0f:6b:41:29:4d:d6:fb:62:68: 39:99:54:c7:d0:60:c2:3a:94:fb:1b:27:af:b2:5b:f5:14:82: 77:65:c5:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCo2iSjCIXZTyH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzIwYzY0ZjAtY2Y3Ni00MDY2LWEzMjQtZTY0NTk2NjNjNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGeFTWZJR0jkizBy9AmYIV3rzz79x0+t/I5c N/1ftXo82z21Dgs/4g4gqfvNMirbLWuCKTq8Zr+FNaeit9vlBzh7F6zCjGCcNZau lQnHCpggAKcHbu5ccF4hqDWB79kUau8rytvKUpKG3j9VR7QkRVxJ/ylS6sJ29jUR 7iXaiDJGfYSLfGhw78QOQ7M4uo+ip7DzRogQ0SD2iqa7CuHpBT1//dx6zuSqN7y2 410INvnu/saX3VeYaGj36Zzn+6p0JogEQXjwawRYOyGxbUKuD4PZWZS62+n8KGAT 4dcCSdIfX+u3X2s3MIoVGmQeu21/3TElTX6SpGYz3jyNTkwqPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFELjh9HmS92cECK8NHjIRsjHlxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q3OTJhYzQtNzJjNS0z NDc5LTg2N2QtZTNjMGRjZWVlMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAShxLAO4lZIV0S9PkAfRSRuMI5KRyYwkFKLalV 8+uVXngddGnDOdNB4ASI2i57vvs9KsfB/RVGSFLckdM2sOUw8GAnxpUkr9yfPC2t 6IynCxUzTODe3SHcJUIsq1iFsDkO87BmAE9ga7nXuWwJ4i+VkBXODpLtYel9iYAu kXKZBKdMTVwy01GhJQURPNNmK1mOUnqe5TDZfrtojIzPd1UHhgxQMGRh76zBXYiz LNurYwPxo2R2OumAbcXHKN2/QQUiH/eE0Fbc5aT8+uxjYpeiVPUc0yDr/Ogww+Or NKc69McPa0EpTdb7Ymg5mVTH0GDCOpT7Gyevslv1FIJ3ZcUe -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:28 2026 by rpki-client