$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa File: e34448b6-729b-35b3-aaa8-dd92c624790e.roa (raw, json) Hash identifier: sq7rIiQFiIDyualSx6y8W5B/bbnL9bJAOnWdtUXgYuQ= Subject key identifier: 10:6E:AA:9B:92:31:4D:47:0C:89:26:8C:E3:14:C2:BF:C0:33:F0:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA532D6A228BD4835CEC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396614 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:53:2d:6a:22:8b:d4:83:5c:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=a79a191a-f5e1-4ae8-9db0-aaa38b38637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:5c:d2:29:bf:6b:72:77:90:c3:01:65:a3: a2:d1:56:e7:02:e1:94:13:4f:4d:56:20:21:ac:c8: 68:c4:d4:d4:28:b0:1f:e8:81:bb:19:60:42:c9:92: c6:83:5f:ff:70:fa:44:06:60:9d:85:84:e8:e5:1d: f4:cb:7a:73:4c:d2:09:fd:50:e1:9d:97:fb:8d:41: c5:ae:21:89:f8:bf:e1:46:24:55:d3:5d:bf:ae:55: 6a:5f:80:22:e5:59:b2:f4:50:03:c7:c0:fe:7b:54: 8f:df:26:0a:5f:23:7e:d5:be:40:13:14:02:9b:70: 2e:0c:f3:ed:0e:bf:94:32:f7:3c:ad:c6:e4:aa:11: 6f:f3:e6:be:52:f6:57:04:f0:56:11:9c:01:39:26: 99:0f:e9:05:00:19:5d:26:f7:13:de:e2:3c:4b:35: 56:ec:06:2d:85:82:80:b2:14:fd:66:23:7b:a0:fa: c4:35:0d:00:8b:60:b8:c2:16:27:cc:e0:be:86:71: fe:d5:a6:6f:d0:36:2b:54:b8:a5:54:5d:1e:3a:eb: 0d:aa:bf:44:8c:c5:b1:f6:f5:81:28:4e:b4:87:f7: a0:14:4f:79:c5:25:36:65:f2:1c:47:9a:aa:67:22: 1e:df:41:51:c0:92:c3:3c:4f:cd:9c:c4:17:e9:46: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:AA:9B:92:31:4D:47:0C:89:26:8C:E3:14:C2:BF:C0:33:F0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e34448b6-729b-35b3-aaa8-dd92c624790e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:62:15:32:cc:0a:be:50:a0:7c:f9:b1:f2:c9:af:51:a7:1d: 03:5c:3d:d6:9a:ba:d4:97:68:ca:b1:b8:92:51:24:4c:52:81: 2f:a5:05:ec:46:6c:1f:6a:98:b7:3e:1c:35:2e:cb:bc:6d:dd: d4:dd:a8:de:bf:d1:51:d4:2f:c7:85:fc:63:9f:cb:e7:9e:f6: 20:35:98:9b:f8:c8:2c:c2:9d:b7:91:d6:ca:ba:d4:2c:13:2d: 0e:e4:15:2e:d7:b0:ad:ed:e4:6b:27:74:dd:97:d2:39:89:54: 90:e5:df:b8:de:f0:40:90:75:a9:0b:5c:76:fa:9d:e0:c4:06: a2:ba:85:5a:3f:ed:54:0d:c2:68:dc:b4:40:a7:c4:f9:48:25: a6:20:09:1b:bd:8c:7a:50:72:6f:85:e9:f8:b7:23:0c:bc:2a: bb:1c:ea:31:0d:ed:7f:23:b7:13:58:fd:bc:6a:41:b2:d1:75: 40:dd:37:e9:00:f4:ce:de:d8:11:07:68:f7:ed:0b:cf:fa:30: ee:58:70:40:de:54:30:e0:2b:38:4b:75:36:3e:07:45:01:de: e9:3a:c9:36:4f:09:77:02:b7:c0:77:ed:14:41:0c:c0:34:8a: c6:bf:d8:80:ed:dc:e5:e5:5c:c7:3c:76:b3:e8:82:81:a5:b3: 49:ed:33:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1E+lMtaiKL1INc7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YTc5YTE5MWEtZjVlMS00YWU4LTlkYjAtYWFhMzhiMzg2MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWFc0im/a3J3kMMBZaOi0VbnAuGUE09NViAh rMhoxNTUKLAf6IG7GWBCyZLGg1//cPpEBmCdhYTo5R30y3pzTNIJ/VDhnZf7jUHF riGJ+L/hRiRV012/rlVqX4Ai5Vmy9FADx8D+e1SP3yYKXyN+1b5AExQCm3AuDPPt Dr+UMvc8rcbkqhFv8+a+UvZXBPBWEZwBOSaZD+kFABldJvcT3uI8SzVW7AYthYKA shT9ZiN7oPrENQ0Ai2C4whYnzOC+hnH+1aZv0DYrVLilVF0eOusNqr9EjMWx9vWB KE60h/egFE95xSU2ZfIcR5qqZyIe30FRwJLDPE/NnMQX6UZfewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBBuqpuSMU1HDIkmjOMUwr/AM/ANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM0NDQ4YjYtNzI5Yi0z NWIzLWFhYTgtZGQ5MmM2MjQ3OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAoYhUyzAq+UKB8+bHyya9Rpx0DXD3WmrrUl2jK sbiSUSRMUoEvpQXsRmwfapi3Phw1Lsu8bd3U3ajev9FR1C/Hhfxjn8vnnvYgNZib +Mgswp23kdbKutQsEy0O5BUu17Ct7eRrJ3Tdl9I5iVSQ5d+43vBAkHWpC1x2+p3g xAaiuoVaP+1UDcJo3LRAp8T5SCWmIAkbvYx6UHJvhen4tyMMvCq7HOoxDe1/I7cT WP28akGy0XVA3TfpAPTO3tgRB2j37QvP+jDuWHBA3lQw4Cs4S3U2PgdFAd7pOsk2 Twl3ArfAd+0UQQzANIrGv9iA7dzl5VzHPHaz6IKBpbNJ7TO7 -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:28 2026 by rpki-client