$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa File: def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa (raw, json) Hash identifier: iaNmj+aWzG0smf4YeEgZGX3QLklcqN96lo6KtxWtd44= Subject key identifier: DC:AE:F0:1C:22:66:ED:01:64:E1:E0:6A:C2:A4:71:FE:C2:ED:32:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0912B4FA4C36840199D40EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 396616 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:b4:fa:4c:36:84:01:99:d4:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=00d2e000-b44a-409a-a45d-6e61589a92b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:7a:0e:f1:a9:6a:3d:89:5d:e5:b0:82:dd: f9:4f:4a:18:19:ec:22:97:7c:61:8c:48:7c:b4:66: 4f:76:1c:13:eb:42:78:68:be:3f:d1:d0:82:ea:8f: 75:1c:11:40:e9:44:54:61:21:d1:ab:75:02:a8:fd: 2f:b2:bc:83:e9:56:5a:f7:10:3e:be:c0:fb:00:5e: 84:69:17:bb:9a:bf:8a:dd:47:e3:3f:1e:62:67:89: 44:75:47:ba:ee:27:ed:e3:e5:17:9a:5e:39:58:df: c1:5a:e2:11:75:90:53:78:e6:22:a0:95:f0:ec:eb: 89:dd:81:cf:ac:9f:01:43:1b:03:fd:fe:7f:74:a5: 7a:40:bd:5b:fb:04:9c:ec:ee:0d:d7:28:f0:82:5c: 2b:78:ff:3f:97:5d:87:7f:e3:f3:f4:b9:1e:a9:24: 20:97:0d:86:0d:e3:a6:06:3e:22:fa:f7:52:36:cf: e4:69:9f:85:fc:47:1f:fa:0c:b5:58:4d:24:88:31: c2:2e:ac:19:50:66:30:bd:f1:3d:91:59:1e:d7:5e: 28:5e:8a:eb:93:8d:ce:53:ed:7f:fd:fe:0c:f1:79: d8:6c:3b:bf:4d:84:b6:5b:68:73:e2:e1:86:7b:0c: ea:d9:83:d5:5c:06:8b:8f:18:98:d3:62:f6:71:3c: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AE:F0:1C:22:66:ED:01:64:E1:E0:6A:C2:A4:71:FE:C2:ED:32:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:79:95:30:a6:75:f4:45:23:e7:b9:9f:cb:9e:98:ad:5c:77: 06:b4:63:56:b7:e8:9b:8e:33:9c:8a:68:c4:07:5f:80:83:d0: 3b:eb:90:9d:38:d0:53:75:2f:1d:9e:73:f0:3d:e3:18:8a:8b: 11:93:6b:bc:e8:92:64:ad:40:b3:57:51:5c:b3:10:0e:fb:da: 65:ad:80:53:58:bc:fb:f3:80:e5:69:3e:1a:87:58:f2:0f:66: de:df:6c:f7:38:3d:80:0b:28:81:75:69:b1:b1:41:75:d4:b8: 3e:3e:dd:13:08:e9:7f:e1:22:c7:a1:0a:28:9b:e1:55:78:15: 23:e0:15:98:56:24:ca:d1:09:92:4e:ae:a4:1e:a7:ab:75:fa: 6b:5c:7d:d2:20:d2:fb:69:7c:5c:20:76:e3:cb:e5:03:1c:e6: 6f:47:8f:b4:f9:20:47:df:4d:cc:85:f7:ac:7f:ef:d8:59:fd: 56:f4:14:16:0e:c3:a9:f1:00:a1:fd:ac:6a:ea:fa:6f:5f:a6: dc:9a:e2:a2:61:a0:f9:c8:7c:0b:21:d6:51:15:54:63:02:1c: 99:3e:c0:b8:ba:3b:3b:d7:d7:98:63:30:35:55:8b:28:e2:03: b3:d7:2a:e6:49:6f:34:7a:1b:1e:bb:14:57:09:f5:9d:be:da: 20:8f:5f:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JErT6TDaEAZnUDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDBkMmUwMDAtYjQ0YS00MDlhLWE0NWQtNmU2MTU4OWE5MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV96DvGpaj2JXeWwgt35T0oYGewil3xhjEh8 tGZPdhwT60J4aL4/0dCC6o91HBFA6URUYSHRq3UCqP0vsryD6VZa9xA+vsD7AF6E aRe7mr+K3UfjPx5iZ4lEdUe67ift4+UXml45WN/BWuIRdZBTeOYioJXw7OuJ3YHP rJ8BQxsD/f5/dKV6QL1b+wSc7O4N1yjwglwreP8/l12Hf+Pz9LkeqSQglw2GDeOm Bj4i+vdSNs/kaZ+F/Ecf+gy1WE0kiDHCLqwZUGYwvfE9kVke114oXorrk43OU+1/ /f4M8XnYbDu/TYS2W2hz4uGGewzq2YPVXAaLjxiY02L2cTxYtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyu8BwiZu0BZOHgasKkcf7C7TJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVmMmU5NmYtNTU4OC0z NGViLWJiN2QtYjRhMGZkY2VlNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC15lTCmdfRFI+e5n8uemK1cdwa0Y1a36JuOM5yKaMQHX4CD0Dvr kJ040FN1Lx2ec/A94xiKixGTa7zokmStQLNXUVyzEA772mWtgFNYvPvzgOVpPhqH WPIPZt7fbPc4PYALKIF1abGxQXXUuD4+3RMI6X/hIsehCiib4VV4FSPgFZhWJMrR CZJOrqQep6t1+mtcfdIg0vtpfFwgduPL5QMc5m9Hj7T5IEffTcyF96x/79hZ/Vb0 FBYOw6nxAKH9rGrq+m9fptya4qJhoPnIfAsh1lEVVGMCHJk+wLi6OzvX15hjMDVV iyjiA7PXKuZJbzR6Gx67FFcJ9Z2+2iCPX2s= -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:55 2026 by rpki-client