$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa File: ce494fd5-da79-3b1c-b913-052e0f56147c.roa (raw, json) Hash identifier: hAC9XgWR79JN2hUqn/kfzVGNwOGmEiJnxH92iqAClLQ= Subject key identifier: 0D:17:DA:85:B1:6E:03:5A:7F:7C:A8:0B:83:19:CA:3B:55:D1:43:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA5880C45A71A1DA85CEE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396583 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:58:80:c4:5a:71:a1:da:85:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=542e8836-6d84-471e-8aa8-132da0d0ea85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:18:e9:f5:32:e8:3d:2c:71:c3:c7:35:a7: d6:2d:17:aa:8d:17:85:5b:a1:f0:8a:d2:7d:98:e1: ba:f1:df:e9:bb:0c:df:25:33:25:f6:3a:77:c7:89: a4:37:10:f3:60:eb:73:e1:64:b0:4f:0d:98:0c:70: f4:b8:63:2e:a5:98:84:a2:1e:76:38:ee:54:b4:1e: bf:21:62:fb:c5:07:31:6c:83:2c:65:41:ef:36:48: 73:b2:8f:22:5c:e8:c8:d1:fd:52:0e:4a:21:4c:e9: 47:7e:2f:5c:4e:7a:74:ff:4e:23:ff:d8:5e:22:36: 42:e2:af:67:b5:d8:86:c1:92:63:12:03:a4:c2:cd: d7:78:78:71:33:8a:f0:a1:63:ae:ef:a9:86:d2:1e: 36:af:10:0a:2d:49:bc:72:15:f4:41:a8:0f:f1:d2: 49:c3:87:1e:69:8b:82:10:3b:59:ab:0d:36:6a:2d: 54:fe:19:8d:33:ba:ae:8b:d4:71:2d:89:8f:fd:dc: 13:e1:b4:3e:59:f0:2f:5d:e9:74:14:d1:13:0f:97: 31:b5:8f:b2:2a:58:68:eb:99:b4:ab:b8:b5:6a:0d: 7a:75:27:66:de:ca:fa:e9:3b:e1:05:cb:6e:0d:d6: 52:b8:cb:09:4b:db:53:a0:89:ef:d6:96:f4:f8:d7: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:DA:85:B1:6E:03:5A:7F:7C:A8:0B:83:19:CA:3B:55:D1:43:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce494fd5-da79-3b1c-b913-052e0f56147c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:60:1e:a3:8f:39:9e:0c:61:30:cc:0d:13:93:4e:a5:7e:54: 17:7d:79:b6:6c:3f:1c:be:68:56:ca:c3:23:4d:c1:20:dc:20: a8:cc:91:9b:9a:71:8d:34:34:2e:d3:93:46:79:78:f2:6d:74: d9:6b:9f:ff:29:d2:cd:d0:bd:e3:90:ff:7f:3d:fd:a5:e9:eb: 61:b5:6a:ef:29:7c:ff:cd:42:c7:41:9e:5f:71:fb:2e:05:ab: a3:50:fa:fe:16:b0:9e:f7:42:8d:07:64:5a:cb:6d:d0:f9:83: ec:09:3c:94:6b:ab:2a:3d:ff:ea:bb:c5:f6:82:83:e4:2b:40: 2a:73:e7:c7:d3:96:07:b8:31:1b:03:0f:fd:7c:51:8a:a0:05: cf:4a:28:73:f6:bd:ad:c5:4c:e3:7d:8c:3e:e2:1b:49:2b:4a: 94:df:22:04:f9:22:76:6d:93:14:28:b7:56:56:0b:be:94:0b: 78:f5:8f:96:df:01:df:f7:5b:c1:be:ff:dc:94:68:c2:9a:91: cf:7f:fb:7e:63:af:79:20:d7:e3:fa:98:a6:f4:61:58:9b:72: f5:70:f7:b2:da:a7:a5:20:20:0f:8f:27:64:ef:be:9d:b0:58: 87:0c:d7:9a:e6:e6:21:8b:43:6a:ad:07:12:d4:aa:d9:e0:b4: 03:98:83:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+liAxFpxodqFzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTQyZTg4MzYtNmQ4NC00NzFlLThhYTgtMTMyZGEwZDBlYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dYY6fUy6D0sccPHNafWLReqjReFW6HwitJ9 mOG68d/puwzfJTMl9jp3x4mkNxDzYOtz4WSwTw2YDHD0uGMupZiEoh52OO5UtB6/ IWL7xQcxbIMsZUHvNkhzso8iXOjI0f1SDkohTOlHfi9cTnp0/04j/9heIjZC4q9n tdiGwZJjEgOkws3XeHhxM4rwoWOu76mG0h42rxAKLUm8chX0QagP8dJJw4ceaYuC EDtZqw02ai1U/hmNM7qui9RxLYmP/dwT4bQ+WfAvXel0FNETD5cxtY+yKlho65m0 q7i1ag16dSdm3sr66TvhBctuDdZSuMsJS9tToInv1pb0+NdC/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA0X2oWxbgNaf3yoC4MZyjtV0UMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U0OTRmZDUtZGE3OS0z YjFjLWI5MTMtMDUyZTBmNTYxNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5YB6jjzmeDGEwzA0Tk06lflQXfXm2bD8cvmhW ysMjTcEg3CCozJGbmnGNNDQu05NGeXjybXTZa5//KdLN0L3jkP9/Pf2l6ethtWrv KXz/zULHQZ5fcfsuBaujUPr+FrCe90KNB2Ray23Q+YPsCTyUa6sqPf/qu8X2goPk K0Aqc+fH05YHuDEbAw/9fFGKoAXPSihz9r2txUzjfYw+4htJK0qU3yIE+SJ2bZMU KLdWVgu+lAt49Y+W3wHf91vBvv/clGjCmpHPf/t+Y695INfj+pim9GFYm3L1cPey 2qelICAPjydk776dsFiHDNea5uYhi0NqrQcS1KrZ4LQDmIMT -----END CERTIFICATE-----Generated at Thu Mar 26 21:09:51 2026 by rpki-client