$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa File: d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa (raw, json) Hash identifier: lW/3kCuK4H4Np7ylUvRXskMf54Es3UU+RCZzVuy3a7Q= Subject key identifier: 74:BC:2C:1D:1E:EC:40:03:BA:F7:DE:55:9D:3D:90:86:C7:CA:D3:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D237A46ED51C90356A6A03F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 396597 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:46:ed:51:c9:03:56:a6:a0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=00c1cce2-2988-47b0-a06d-bc09f63124b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:89:46:95:0b:59:68:c6:b2:06:2a:ca:f6: 55:c3:39:1a:73:87:15:1e:48:70:30:2d:93:85:90: f3:e2:3f:20:1a:68:8d:fa:15:7a:e4:c8:6a:87:cb: 74:d6:0d:86:a5:93:8e:55:bb:d9:0a:79:d8:a9:4d: cb:04:32:1b:6b:dc:41:a4:ff:0b:0c:de:45:07:57: 48:35:b9:62:7f:d1:a6:45:29:bd:72:fd:39:06:5b: a6:aa:9d:59:3b:e8:5a:f2:0e:74:28:9f:31:03:bd: 90:76:b4:ae:be:04:9a:65:73:47:11:44:66:a3:d2: 32:6e:b1:2d:1f:49:50:1d:f9:68:c3:e6:32:bd:93: 96:4c:42:93:52:75:40:13:87:6b:b4:ef:f2:49:5e: 59:e8:6e:a3:74:15:24:d7:d9:21:2e:e5:d8:32:97: 1c:5b:12:d0:50:03:ad:03:d3:9d:2c:07:d6:86:91: f8:48:a8:3d:c8:95:ad:78:4b:b0:27:cf:b2:a1:a5: 8c:1e:43:f3:5b:43:56:e5:98:70:6b:cd:fa:91:c9: 2d:fd:90:c8:b3:ec:6b:44:2c:02:6e:16:bc:68:12: 66:60:89:61:6e:78:b3:39:bb:51:23:43:e3:50:6d: e8:56:95:8c:4d:cf:55:92:09:7b:18:64:f0:3d:0f: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:2C:1D:1E:EC:40:03:BA:F7:DE:55:9D:3D:90:86:C7:CA:D3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:df:ad:8f:7f:53:13:73:97:43:62:89:05:c8:ac:a8:95:f9: c4:e7:54:ce:77:72:45:2e:24:9a:6f:a8:c2:de:95:66:07:11: 1d:04:cc:2b:a6:24:77:ba:9b:63:38:db:4d:7b:c1:fa:c0:d2: 98:66:c1:bb:b1:92:52:50:18:44:ff:bd:96:e2:cd:dc:50:d8: 8b:81:d3:0f:7b:9d:33:95:30:87:82:72:1e:ee:ac:2d:32:2b: a0:9a:14:31:1e:ca:23:51:64:a8:dc:6e:30:06:36:a2:b8:92: 5c:04:06:90:72:b8:8e:69:ce:03:5a:c9:52:c4:7a:e1:ec:23: 2b:84:6b:c9:35:4d:81:be:23:ae:44:9d:b0:b0:78:e3:5c:04: e0:c6:ea:05:08:ac:fa:f7:74:d1:f1:66:92:3b:2c:14:80:a3: 77:37:97:51:81:13:a4:a1:15:69:e0:e2:b4:41:60:de:fa:0c: 9a:68:18:9d:8a:29:9f:ec:4b:e8:e9:2a:8b:5d:d0:95:89:4e: d1:cc:2f:87:15:a1:2d:c3:ba:ac:c1:24:9f:27:68:81:c9:41: 77:ee:d1:52:14:1d:cc:61:2c:3d:40:97:bc:7a:71:90:77:dc: 26:0c:de:2a:05:f6:75:7e:0c:d4:2b:aa:60:e2:bf:2f:36:52: 06:1f:bc:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekbtUckDVqagP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDBjMWNjZTItMjk4OC00N2IwLWEwNmQtYmMwOWY2MzEyNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfeJRpULWWjGsgYqyvZVwzkac4cVHkhwMC2T hZDz4j8gGmiN+hV65Mhqh8t01g2GpZOOVbvZCnnYqU3LBDIba9xBpP8LDN5FB1dI Nblif9GmRSm9cv05Blumqp1ZO+ha8g50KJ8xA72QdrSuvgSaZXNHEURmo9IybrEt H0lQHflow+YyvZOWTEKTUnVAE4drtO/ySV5Z6G6jdBUk19khLuXYMpccWxLQUAOt A9OdLAfWhpH4SKg9yJWteEuwJ8+yoaWMHkPzW0NW5Zhwa836kckt/ZDIs+xrRCwC bha8aBJmYIlhbnizObtRI0PjUG3oVpWMTc9Vkgl7GGTwPQ8K+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHS8LB0e7EADuvfeVZ09kIbHytN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY1YmE2MjktZTRmMS0z YTgyLWEyNGQtZDU3ZWZiYzFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3frY9/UxNzl0NiiQXIrKiV+cTnVM53ckUuJJpvqMLelWYHER0E zCumJHe6m2M42017wfrA0phmwbuxklJQGET/vZbizdxQ2IuB0w97nTOVMIeCch7u rC0yK6CaFDEeyiNRZKjcbjAGNqK4klwEBpByuI5pzgNayVLEeuHsIyuEa8k1TYG+ I65EnbCweONcBODG6gUIrPr3dNHxZpI7LBSAo3c3l1GBE6ShFWng4rRBYN76DJpo GJ2KKZ/sS+jpKotd0JWJTtHML4cVoS3DuqzBJJ8naIHJQXfu0VIUHcxhLD1Al7x6 cZB33CYM3ioF9nV+DNQrqmDivy82UgYfvBY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:16 2026 by rpki-client