$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa File: 0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa (raw, json) Hash identifier: 2ITxr1/6Sks/5JaTpmurOcoF0qD6iydf4o7c59dC2KA= Subject key identifier: 10:78:95:1F:43:4D:D6:8F:64:EE:9C:9A:B4:B1:B1:73:2E:F5:67:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA96C37A64DD384FB98F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 36630 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:96:c3:7a:64:dd:38:4f:b9:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=cecdb5d0-e2cc-4e42-a181-726bd4cd3f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:6d:b9:1a:5b:6c:be:e0:2e:fa:cb:f2:3a: 43:50:19:15:78:aa:dc:0c:d2:f2:4e:4f:fe:1b:94: 24:75:8c:80:04:df:fa:15:2e:1f:01:98:34:bc:04: 8f:c4:7e:13:ce:74:dd:9b:5a:8e:d3:8e:69:b0:25: 7f:7d:3a:fa:67:27:92:1d:c6:47:dd:25:f5:b2:e5: cd:2d:2b:c1:d0:45:ee:1f:7c:6d:ef:9e:1b:db:a2: af:60:1a:9e:9a:1a:bf:2c:41:31:3e:ce:b9:ed:d9: 0c:fe:0c:9e:7a:53:02:20:53:62:98:4b:14:c0:29: c5:39:c6:01:8b:2b:20:66:57:41:5d:aa:57:8a:6d: 4e:65:50:a7:4b:82:49:fb:3e:9a:35:37:94:0a:61: 54:bc:ab:b9:9f:6d:40:3d:ec:3f:c5:6c:ad:ce:65: 7c:f9:60:00:9a:35:06:28:16:75:9b:54:37:c7:3e: 65:6c:62:74:30:cf:5e:48:31:a7:46:40:2d:02:b1: b0:86:9c:0a:e4:bd:23:2b:6d:d1:42:8b:45:f1:04: 2e:df:ac:a6:68:f5:99:56:cc:69:df:af:6c:98:fa: 6a:88:31:31:98:ef:ab:5c:71:70:24:80:bf:2f:88: 3b:14:2b:9e:48:8e:f4:ad:3d:76:98:7a:9f:3f:9f: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:95:1F:43:4D:D6:8F:64:EE:9C:9A:B4:B1:B1:73:2E:F5:67:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9b:86:e6:a1:ab:4f:7e:38:bc:55:af:18:49:98:0b:47:10: 4c:8f:df:99:33:d8:c3:2b:3a:d9:5f:62:4e:06:c9:e8:cd:d1: ca:76:6a:12:26:e7:f0:c5:30:26:a5:24:83:71:9a:0f:b0:1a: 57:18:b6:b8:89:a9:76:89:e6:2b:9d:58:39:7d:1c:bf:ea:7b: be:7e:e7:f4:17:10:0d:de:15:03:ec:61:e3:fc:98:f2:c9:63: e3:6c:58:f6:a8:c4:fd:75:4d:71:90:c5:ca:0f:bf:97:24:c7: 23:2b:29:9c:44:0c:a9:23:4e:d4:72:4f:91:cd:12:00:44:f7: f5:62:f6:46:41:c8:1a:0a:c3:53:97:35:f4:b8:e6:a0:5d:53: cc:2e:49:91:ff:32:a5:a9:8f:f2:9a:e8:4e:ee:b2:6b:28:c6: d5:d1:92:b1:ad:37:4b:bf:0e:3e:1f:c1:60:e2:e5:4d:fb:14: 52:f2:14:00:64:6c:3f:c6:af:02:72:72:c4:4a:ef:65:16:f0: 17:20:dd:d0:36:1a:71:b4:e4:98:27:9b:94:b5:c2:4c:18:e1: 8d:43:40:3d:d8:aa:28:ca:84:e4:f3:28:11:24:89:96:aa:f0: 7e:ca:80:eb:f0:74:92:08:22:d8:a0:f2:80:53:02:36:63:39: 5f:61:ca:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pbDemTdOE+5jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2VjZGI1ZDAtZTJjYy00ZTQyLWExODEtNzI2YmQ0Y2QzZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNtuRpbbL7gLvrL8jpDUBkVeKrcDNLyTk/+ G5QkdYyABN/6FS4fAZg0vASPxH4TznTdm1qO045psCV/fTr6ZyeSHcZH3SX1suXN LSvB0EXuH3xt754b26KvYBqemhq/LEExPs657dkM/gyeelMCIFNimEsUwCnFOcYB iysgZldBXapXim1OZVCnS4JJ+z6aNTeUCmFUvKu5n21APew/xWytzmV8+WAAmjUG KBZ1m1Q3xz5lbGJ0MM9eSDGnRkAtArGwhpwK5L0jK23RQotF8QQu36ymaPWZVsxp 369smPpqiDExmO+rXHFwJIC/L4g7FCueSI70rT12mHqfP59rTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBB4lR9DTdaPZO6cmrSxsXMu9Wd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFlNmJlNGYtYmEzZC0z ZjRhLTgxN2QtNmVhMjU5ZTBkNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBxm4bmoatPfji8Va8YSZgLRxBMj9+ZM9jDKzrZ X2JOBsnozdHKdmoSJufwxTAmpSSDcZoPsBpXGLa4ial2ieYrnVg5fRy/6nu+fuf0 FxAN3hUD7GHj/JjyyWPjbFj2qMT9dU1xkMXKD7+XJMcjKymcRAypI07Uck+RzRIA RPf1YvZGQcgaCsNTlzX0uOagXVPMLkmR/zKlqY/ymuhO7rJrKMbV0ZKxrTdLvw4+ H8Fg4uVN+xRS8hQAZGw/xq8CcnLESu9lFvAXIN3QNhpxtOSYJ5uUtcJMGOGNQ0A9 2KooyoTk8ygRJImWqvB+yoDr8HSSCCLYoPKAUwI2YzlfYcqc -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:18 2026 by rpki-client