$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa File: 2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa (raw, json) Hash identifier: p/frWC7xSZFP9hA238R4uaLhEyZkhuYLRVmFYuT2ofI= Subject key identifier: DF:04:DB:88:88:36:6F:7C:C3:BF:99:98:B7:B7:DA:BA:0B:BB:58:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF587AA4EFDC5FE198EB4A000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396594 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:aa:4e:fd:c5:fe:19:8e:b4:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=64a1cba9-9afa-4d9a-a142-f7d1cdc3cd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:b3:06:ae:11:38:c2:ad:50:59:ae:36:31: 1d:b5:c4:30:d5:bd:aa:4e:48:7e:9a:de:12:87:19: df:c4:9d:de:98:83:65:ef:85:52:08:0d:f3:5a:c6: 12:5b:e1:3d:22:d4:5d:10:5f:ab:6e:d8:fd:52:ab: be:81:b8:72:3e:49:5d:3e:44:59:12:40:22:cc:af: 55:e6:1d:68:38:b8:ee:46:6c:c0:d1:b3:52:5b:fa: 76:2c:20:17:87:d0:81:72:6d:a5:83:15:09:32:08: a9:92:37:83:7b:1d:30:78:94:a8:01:95:f3:b7:38: b0:b5:20:c5:51:a5:7e:6b:32:88:0e:31:96:55:40: 08:86:65:38:7c:ef:b9:05:46:20:ce:22:e4:bd:aa: 55:19:33:92:be:9e:09:b6:c5:0a:9e:de:9f:33:fc: 57:76:1c:d1:e8:d2:02:1a:f0:03:5e:0c:bb:35:5a: a1:54:8c:d0:f0:67:96:b0:a2:e5:db:78:61:d2:41: 3b:73:f5:53:cd:ca:4c:dc:6a:de:3f:37:cd:29:cf: 03:7e:70:5c:a4:66:19:19:e8:df:74:78:81:5d:16: e6:05:7a:bd:7b:6f:eb:7f:2d:c9:b1:3a:83:73:5e: c5:90:ef:bd:a1:6b:fb:5a:e1:71:0f:b6:33:23:ee: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:DB:88:88:36:6F:7C:C3:BF:99:98:B7:B7:DA:BA:0B:BB:58:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:37:fb:c5:97:f2:60:ca:b0:d4:e3:5b:62:cb:fa:3d:b7:c0: 99:cf:f2:28:b8:bf:10:95:0e:99:30:df:25:0d:93:a1:ef:a2: 05:ce:21:d8:1c:df:a5:09:90:12:12:18:aa:55:29:8b:8e:ab: c4:76:32:75:dd:64:7f:e1:5d:8e:c9:70:1b:3f:77:a7:79:92: 52:f7:4c:9f:bc:57:dc:3d:99:bb:68:25:2c:83:c9:ea:f8:e3: 5d:cc:3f:22:17:20:07:86:be:88:76:31:ae:7d:a7:fc:91:84: 3d:a6:22:1e:6b:d5:56:bd:a5:e7:80:6f:07:b8:e5:68:1a:ae: eb:18:dd:c6:04:7a:54:e4:10:10:5c:b9:1d:b2:de:fd:3c:27: 32:fb:af:89:0c:60:53:5c:2e:ad:0b:9c:74:5d:25:ea:0d:df: 2e:26:db:51:d2:af:0f:3c:e1:bc:95:80:31:e3:4f:2b:20:02: c9:28:4c:10:e6:ec:63:08:89:e4:5b:9f:42:44:c9:11:46:bf: d0:b6:87:22:a2:1e:67:c8:5c:b9:17:5b:c7:da:df:a8:16:af: 5e:b4:cf:da:23:cc:dc:43:8f:78:d3:09:11:60:83:08:3d:cf: 23:4d:19:24:f9:d2:f8:d5:f1:65:b7:b4:32:49:fa:a8:de:c6: f2:74:17:96 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz1h6pO/cX+GY60oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NjRhMWNiYTktOWFmYS00ZDlhLWExNDItZjdkMWNkYzNjZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03qzBq4ROMKtUFmuNjEdtcQw1b2qTkh+mt4S hxnfxJ3emINl74VSCA3zWsYSW+E9ItRdEF+rbtj9Uqu+gbhyPkldPkRZEkAizK9V 5h1oOLjuRmzA0bNSW/p2LCAXh9CBcm2lgxUJMgipkjeDex0weJSoAZXztziwtSDF UaV+azKIDjGWVUAIhmU4fO+5BUYgziLkvapVGTOSvp4JtsUKnt6fM/xXdhzR6NIC GvADXgy7NVqhVIzQ8GeWsKLl23hh0kE7c/VTzcpM3GrePzfNKc8DfnBcpGYZGejf dHiBXRbmBXq9e2/rfy3JsTqDc17FkO+9oWv7WuFxD7YzI+4AIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN8E24iINm98w7+ZmLe32roLu1i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjk5NWJmYmEtYTRiMi0z YTVmLTgyNDItZjJkZDNkODBkZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiN/vFl/JgyrDU41tiy/o9t8CZz/IouL8QlQ6Z MN8lDZOh76IFziHYHN+lCZASEhiqVSmLjqvEdjJ13WR/4V2OyXAbP3eneZJS90yf vFfcPZm7aCUsg8nq+ONdzD8iFyAHhr6IdjGufaf8kYQ9piIea9VWvaXngG8HuOVo Gq7rGN3GBHpU5BAQXLkdst79PCcy+6+JDGBTXC6tC5x0XSXqDd8uJttR0q8PPOG8 lYAx408rIALJKEwQ5uxjCInkW59CRMkRRr/Qtocioh5nyFy5F1vH2t+oFq9etM/a I8zcQ4940wkRYIMIPc8jTRkk+dL41fFlt7QySfqo3sbydBeW -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:06 2026 by rpki-client