$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08ac8dc-7c72-3321-b14e-571dacfe6c83.roa File: d08ac8dc-7c72-3321-b14e-571dacfe6c83.roa (raw, json) Hash identifier: DtUQUrNXOEUkiKszTYW9LFHJDKF7in43K8eeq1GqNIc= Subject key identifier: 7B:7B:BE:E1:B0:39:C2:10:0F:37:A9:14:08:6D:FC:28:49:AC:BE:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B2FE64FA91012650F580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08ac8dc-7c72-3321-b14e-571dacfe6c83.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 36629 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b2:fe:64:fa:91:01:26:50:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=6597e81b-470f-4a2b-b0d2-6ccbb10c228a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:dc:04:b8:1c:65:6d:be:82:d4:29:58:06: 85:a5:37:a5:e6:2b:71:47:15:c9:74:50:5a:36:b2: be:8b:e4:21:cc:89:8a:74:b0:46:f4:e1:f8:6a:b6: 65:6f:5d:17:73:56:2f:3f:18:7a:30:f5:40:03:54: 24:64:e4:62:bd:6e:06:6f:74:b6:df:a0:94:49:68: 26:85:51:43:06:5d:79:c1:96:3c:11:a6:bc:55:2a: 65:ed:4e:b9:36:40:d4:63:e3:02:d0:4e:87:a6:0a: 35:cd:43:55:cc:70:a4:f3:74:82:47:a4:62:23:d9: 13:1e:78:e8:8b:90:44:c0:2c:2c:dd:b8:63:62:9a: d3:9a:71:42:18:66:45:5d:47:e3:4e:18:ac:df:ba: 16:f3:8c:e9:7e:dc:a0:e0:f3:04:7c:b0:fc:d8:0f: 75:5b:d3:b8:1d:d9:57:02:4a:bd:fe:f9:a9:bd:82: a7:81:c2:a5:82:1d:11:eb:03:54:ea:83:2f:66:91: fe:6c:33:58:45:cf:a5:ac:ec:c1:fd:ca:e0:43:32: 63:86:56:28:79:3a:5e:4a:e6:61:3a:2b:4d:ec:0f: a8:81:d3:da:62:a2:59:03:39:2c:3a:9a:99:2e:a7: b2:d8:d5:e1:69:02:4f:ba:84:17:11:c1:a3:07:ed: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7B:BE:E1:B0:39:C2:10:0F:37:A9:14:08:6D:FC:28:49:AC:BE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08ac8dc-7c72-3321-b14e-571dacfe6c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4b:d0:4c:e0:36:fb:b8:0e:46:74:2e:a9:c2:96:0b:e4:09: b4:6f:3d:b5:51:41:b8:91:b5:f5:d6:65:38:7a:de:66:21:21: 4d:25:4a:7c:6b:fd:9d:29:0e:a7:97:2c:f5:09:28:a6:36:7d: c9:ef:43:09:24:6c:af:d6:1c:08:98:c3:c5:f7:b6:fb:36:df: 80:a4:b7:3e:7c:e0:4e:7e:ec:34:69:16:b9:c1:2e:b3:9e:2d: e9:8e:e6:1b:4f:10:33:e1:d7:bb:78:dd:cb:ff:62:4e:b7:a4: 4d:df:e4:98:d4:df:d1:2b:7a:ba:c0:32:ce:84:d8:66:82:e9: 17:26:7c:46:be:02:6a:3b:d4:30:e6:c0:f2:0d:f3:36:5a:a4: 71:5a:6e:57:ae:6e:05:6b:f1:c4:ee:62:98:f8:02:6f:8f:67: 06:cc:99:17:0b:08:e5:12:a5:80:70:f0:62:d8:80:1d:e1:8e: e1:dc:ee:1b:38:ba:fd:10:22:03:0d:89:74:d0:8f:21:0d:12: 9b:f4:67:71:fc:13:ff:04:d4:cb:dc:39:93:d9:e1:6e:00:62: 1f:31:63:77:82:0a:02:71:0e:8c:c3:6a:33:31:ba:2f:41:33: b0:b9:47:ac:87:31:2e:d2:b9:f3:f4:8e:9f:34:a2:69:e0:3c: af:23:69:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErL+ZPqRASZQ9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjU5N2U4MWItNDcwZi00YTJiLWIwZDItNmNjYmIxMGMyMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWTcBLgcZW2+gtQpWAaFpTel5itxRxXJdFBa NrK+i+QhzImKdLBG9OH4arZlb10Xc1YvPxh6MPVAA1QkZORivW4Gb3S236CUSWgm hVFDBl15wZY8Eaa8VSpl7U65NkDUY+MC0E6Hpgo1zUNVzHCk83SCR6RiI9kTHnjo i5BEwCws3bhjYprTmnFCGGZFXUfjThis37oW84zpftyg4PMEfLD82A91W9O4HdlX Akq9/vmpvYKngcKlgh0R6wNU6oMvZpH+bDNYRc+lrOzB/crgQzJjhlYoeTpeSuZh OitN7A+ogdPaYqJZAzksOpqZLqey2NXhaQJPuoQXEcGjB+0g9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHt7vuGwOcIQDzepFAht/ChJrL6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA4YWM4ZGMtN2M3Mi0z MzIxLWIxNGUtNTcxZGFjZmU2YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5L0EzgNvu4DkZ0LqnClgvkCbRvPbVRQbiRtfXWZTh63mYhIU0l Snxr/Z0pDqeXLPUJKKY2fcnvQwkkbK/WHAiYw8X3tvs234Cktz584E5+7DRpFrnB LrOeLemO5htPEDPh17t43cv/Yk63pE3f5JjU39ErerrAMs6E2GaC6RcmfEa+Amo7 1DDmwPIN8zZapHFableubgVr8cTuYpj4Am+PZwbMmRcLCOUSpYBw8GLYgB3hjuHc 7hs4uv0QIgMNiXTQjyENEpv0Z3H8E/8E1MvcOZPZ4W4AYh8xY3eCCgJxDozDajMx ui9BM7C5R6yHMS7SufP0jp80omngPK8jaQk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:14 2026 by rpki-client