$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa File: 21812b5d-b2b3-398c-afb7-221a71c32c32.roa (raw, json) Hash identifier: Jepn1vPHAagHgCLJb7F5uQwD1byMjnGkOGWR/XbvlCI= Subject key identifier: F8:06:E5:CE:6E:B5:74:90:62:5B:D2:5C:9D:54:0E:30:AE:48:96:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9BDA27D78A8EE0BFAF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396575 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9b:da:27:d7:8a:8e:e0:bf:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=f84a5cec-b7f1-4bc3-851b-0eefd1cd0f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:d4:26:37:e1:47:d9:7f:f3:b1:94:c8:fc: 1b:57:72:d6:b9:55:4f:07:c0:55:6a:04:f1:3c:d3: 2c:59:60:24:e4:b4:b9:65:a9:9b:48:b3:11:cc:bb: 46:1f:08:e0:2d:16:9c:2a:35:5e:d8:d9:da:f2:74: c8:a7:70:36:50:78:6d:ac:ba:42:d1:5c:8b:a4:bb: 20:d4:0c:e0:2a:e4:13:53:0c:50:4b:dd:b1:11:25: 3b:b7:1b:97:b4:83:af:62:d7:f7:d9:a3:f6:33:da: 99:a8:94:9d:21:17:21:2d:07:9a:0c:b0:21:63:aa: 99:31:cc:42:c4:56:ca:f4:99:b6:7e:bf:6b:59:33: 25:b0:d3:9a:37:da:48:1d:13:3f:e9:5a:a1:79:eb: 4d:21:52:bf:1a:1c:a5:67:58:cf:3a:30:80:97:b9: ff:b8:ac:12:27:e5:a2:3f:7d:23:11:10:69:1e:d6: 1e:72:ba:1d:11:e3:0e:8c:b9:04:c0:8c:19:7e:dc: e8:d6:58:55:81:70:6d:9e:dc:b9:8c:ee:e4:33:54: 0f:16:fa:9b:21:d5:de:ba:6d:de:94:8b:dd:91:c1: 14:a6:a6:59:7b:65:45:2d:bf:fe:e7:e2:6d:1e:2d: d0:f5:b8:50:dd:64:81:66:66:9c:83:a2:61:0e:95: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:06:E5:CE:6E:B5:74:90:62:5B:D2:5C:9D:54:0E:30:AE:48:96:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c9:e1:4a:68:7d:7f:3d:fe:ce:ed:24:96:38:b5:82:de:4c: 66:f4:b2:f5:42:3e:df:3f:06:37:01:8e:c9:68:e3:22:30:d0: 83:36:1c:49:45:f7:e1:f9:84:ce:ad:48:53:8c:05:35:19:b7: 48:a0:14:bb:87:93:ae:1f:17:4e:d3:53:3a:04:b3:88:cc:12: bb:95:d1:e9:b1:e5:47:0c:d4:4b:be:2e:82:a2:07:ad:a4:e6: 47:e1:60:ee:42:f7:fd:fd:4b:16:a3:6a:9d:20:f0:f0:c3:c6: 18:80:4c:b6:f8:c9:4e:2d:6f:13:77:55:49:a0:78:f2:0e:55: 95:f0:90:cd:09:ed:19:dd:5c:cb:1d:fc:21:af:9c:4d:4c:7e: ec:9d:bb:bf:79:30:17:d0:98:be:62:36:54:a3:5a:b5:97:78: 07:e7:e4:de:8a:0b:5f:c4:28:a6:88:9c:54:70:8f:b0:68:58: f7:40:59:bc:0d:24:71:2b:76:6a:12:23:99:47:11:21:19:f3: dd:0d:cc:56:e2:2c:ef:20:1e:13:8f:18:07:91:25:9a:4e:47: f0:c1:0c:c3:f1:c9:f9:44:4f:7e:31:38:de:d7:28:7c:b8:60: d3:19:6d:6b:cc:94:05:9a:28:c3:36:a3:50:6b:0d:e4:1e:16: 8d:1b:a4:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pvaJ9eKjuC/r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Zjg0YTVjZWMtYjdmMS00YmMzLTg1MWItMGVlZmQxY2QwZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp93UJjfhR9l/87GUyPwbV3LWuVVPB8BVagTx PNMsWWAk5LS5ZambSLMRzLtGHwjgLRacKjVe2Nna8nTIp3A2UHhtrLpC0VyLpLsg 1AzgKuQTUwxQS92xESU7txuXtIOvYtf32aP2M9qZqJSdIRchLQeaDLAhY6qZMcxC xFbK9Jm2fr9rWTMlsNOaN9pIHRM/6VqheetNIVK/GhylZ1jPOjCAl7n/uKwSJ+Wi P30jERBpHtYecrodEeMOjLkEwIwZftzo1lhVgXBtnty5jO7kM1QPFvqbIdXeum3e lIvdkcEUpqZZe2VFLb/+5+JtHi3Q9bhQ3WSBZmacg6JhDpW5HwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPgG5c5utXSQYlvSXJ1UDjCuSJZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjE4MTJiNWQtYjJiMy0z OThjLWFmYjctMjIxYTcxYzMyYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwyeFKaH1/Pf7O7SSWOLWC3kxm9LL1Qj7fPwY3 AY7JaOMiMNCDNhxJRffh+YTOrUhTjAU1GbdIoBS7h5OuHxdO01M6BLOIzBK7ldHp seVHDNRLvi6CogetpOZH4WDuQvf9/UsWo2qdIPDww8YYgEy2+MlOLW8Td1VJoHjy DlWV8JDNCe0Z3VzLHfwhr5xNTH7snbu/eTAX0Ji+YjZUo1q1l3gH5+TeigtfxCim iJxUcI+waFj3QFm8DSRxK3ZqEiOZRxEhGfPdDcxW4izvIB4TjxgHkSWaTkfwwQzD 8cn5RE9+MTje1yh8uGDTGW1rzJQFmijDNqNQaw3kHhaNG6Qo -----END CERTIFICATE-----Generated at Fri Apr 17 07:27:22 2026 by rpki-client