$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json) Hash identifier: VQdffVVD223yRbfMk6ljVUTovYpKZ5p+cADT1wYaYc0= Subject key identifier: CF:97:6C:A8:03:93:21:C9:8C:B7:48:36:A8:AC:04:43:C4:AF:2B:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D300A80B659B521E16F5ABCB8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396603 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:80:b6:59:b5:21:e1:6f:5a:bc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a070d15d-02a3-47ca-9785-e551659b9a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:1e:43:59:b6:9f:23:b1:29:80:fc:a9:c1: b4:38:1c:41:67:82:cc:00:50:f7:6b:64:76:8d:02: ea:f1:4b:78:e3:0b:59:e3:6c:7b:8b:61:8e:eb:fd: 6f:19:2b:d6:d7:1f:39:db:ef:fc:f3:f0:ff:2b:a7: f3:2e:bb:75:8d:f7:3e:8c:2b:bb:2b:b3:41:52:2b: cb:83:9d:74:59:a3:d4:3e:e4:46:10:ff:6d:37:f9: 20:3d:c5:d6:17:c7:08:8e:9e:87:7c:cb:eb:e8:53: 86:a6:2d:9a:65:79:8a:ad:a6:90:0c:04:31:fa:fe: 19:64:a9:5a:49:07:6c:e5:ba:ad:62:5f:a7:f8:4f: 8d:23:36:f9:79:22:02:49:41:96:a5:85:3e:e6:03: 13:37:fe:d1:b3:79:11:1f:4d:ed:09:9e:3f:45:d9: 90:a3:61:9e:d6:8b:fa:b3:c1:5d:17:14:62:5b:98: c7:93:b3:00:ea:57:85:0f:75:b4:c4:e2:07:88:3d: 22:9e:48:52:e6:92:95:00:fe:a4:46:f1:d2:90:b5: 0c:67:1e:07:07:90:16:18:75:b9:9a:fd:c4:fd:ca: c0:2b:59:99:42:d2:cf:a8:43:a4:c8:c2:25:29:2f: ee:74:86:f7:8f:e4:fd:2b:31:04:4c:e3:37:d6:f1: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:6C:A8:03:93:21:C9:8C:B7:48:36:A8:AC:04:43:C4:AF:2B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a6:4d:d8:e0:01:17:f3:53:dd:c6:15:66:c9:60:dd:ce:24: 50:c8:7d:5c:ae:29:3f:a1:75:58:7c:1c:8e:1d:2b:26:18:c9: 49:a6:91:5f:89:4e:b9:dc:3e:70:55:bf:5c:bb:d7:de:72:f9: 7f:b1:95:ee:8b:a8:56:bb:06:62:4e:36:54:50:aa:f9:39:76: 4c:b0:0e:a4:dd:a4:98:8d:3b:83:86:cc:cf:af:f0:df:84:3a: 9d:a4:3b:bc:e5:7f:3d:17:7c:34:23:ab:08:86:a7:0b:a0:42: 22:32:25:3e:ff:a5:8e:d9:e6:e8:eb:34:81:b9:eb:17:8c:9e: 81:4a:3a:18:2c:32:9b:25:86:49:03:82:ae:4e:60:94:b1:25: b7:cb:a2:90:9f:51:57:f5:14:dd:da:99:a2:92:09:88:73:b8: 08:4b:c8:dd:29:ce:51:60:19:60:36:e5:e7:0c:35:43:c2:1a: 85:dd:c5:0d:b7:78:8c:db:3d:11:88:89:cb:00:03:5b:f7:1e: 75:e0:27:e7:5d:8e:6f:2a:4b:05:1b:57:4e:6d:65:3c:be:d9: 95:e7:44:da:82:68:95:43:7f:5d:6a:84:9b:60:3c:0b:d5:30: 44:12:c9:e9:74:e5:82:b8:62:e9:65:08:48:09:ee:0e:e0:88: 8d:46:80:96 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0wCoC2WbUh4W9avLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTA3MGQxNWQtMDJhMy00N2NhLTk3ODUtZTU1MTY1OWI5YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDQeQ1m2nyOxKYD8qcG0OBxBZ4LMAFD3a2R2 jQLq8Ut44wtZ42x7i2GO6/1vGSvW1x852+/88/D/K6fzLrt1jfc+jCu7K7NBUivL g510WaPUPuRGEP9tN/kgPcXWF8cIjp6HfMvr6FOGpi2aZXmKraaQDAQx+v4ZZKla SQds5bqtYl+n+E+NIzb5eSICSUGWpYU+5gMTN/7Rs3kRH03tCZ4/RdmQo2Ge1ov6 s8FdFxRiW5jHk7MA6leFD3W0xOIHiD0inkhS5pKVAP6kRvHSkLUMZx4HB5AWGHW5 mv3E/crAK1mZQtLPqEOkyMIlKS/udIb3j+T9KzEETOM31vGJcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM+XbKgDkyHJjLdINqisBEPEryvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEwOGZhZjQtZTdhOS0z ZGZlLWI0ZDktMzMxZjMyM2Y3NmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4pk3Y4AEX81PdxhVmyWDdziRQyH1crik/oXVY fByOHSsmGMlJppFfiU653D5wVb9cu9fecvl/sZXui6hWuwZiTjZUUKr5OXZMsA6k 3aSYjTuDhszPr/DfhDqdpDu85X89F3w0I6sIhqcLoEIiMiU+/6WO2ebo6zSBuesX jJ6BSjoYLDKbJYZJA4KuTmCUsSW3y6KQn1FX9RTd2pmikgmIc7gIS8jdKc5RYBlg NuXnDDVDwhqF3cUNt3iM2z0RiInLAANb9x514CfnXY5vKksFG1dObWU8vtmV50Ta gmiVQ39daoSbYDwL1TBEEsnpdOWCuGLpZQhICe4O4IiNRoCW -----END CERTIFICATE-----Generated at Thu Mar 26 20:22:40 2026 by rpki-client