$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35cd333d-0887-3b84-8f76-7b2cf2751ecb.roa File: 35cd333d-0887-3b84-8f76-7b2cf2751ecb.roa (raw, json) Hash identifier: amLXR+hzYJ0DQMdgx9b3O/o/SEqchmUXmw1IqmpjYKE= Subject key identifier: 1F:DB:60:A4:44:21:A1:05:08:27:5D:4C:21:32:B8:2A:B0:95:22:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA96E59BC0CB9C3E8DC7B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35cd333d-0887-3b84-8f76-7b2cf2751ecb.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396573 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:96:e5:9b:c0:cb:9c:3e:8d:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e1dc160b-51aa-4053-b1ca-c1d78c47d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:5e:d5:13:6a:c6:db:52:8e:a9:8c:5b:b3: c8:11:d1:46:52:c2:6b:fe:b4:46:54:e5:0f:55:9f: 62:2b:e8:f3:c7:4b:1b:81:b1:f3:e5:63:29:2b:60: ae:40:02:70:a0:19:5c:fa:41:2c:09:53:12:8b:8b: da:3e:01:7d:af:2c:99:26:29:cf:43:7d:aa:40:13: 1d:dd:44:e9:1d:7a:0c:91:ed:46:d2:79:c7:58:21: 6b:4a:0e:a7:af:15:92:83:4d:05:50:d2:7a:a3:31: 65:6d:8b:f1:c8:0e:e7:51:fe:c8:c0:14:8f:70:cf: d7:7e:df:eb:cb:bc:1b:41:16:28:c3:a5:74:43:99: 30:ca:04:59:08:16:3c:a0:04:8f:34:13:24:ef:70: f4:68:a7:50:12:83:2f:bf:ac:e7:ee:70:25:4f:2f: b1:00:cd:a3:24:23:3c:02:e9:87:20:0e:12:45:3a: 15:48:e9:99:60:2f:be:a7:0b:ea:b6:bf:d8:40:1f: 2a:4c:32:78:ee:e5:62:02:ac:ee:b8:de:aa:30:55: 33:a0:9d:7f:0d:38:1a:26:ce:8d:ef:fd:bf:c1:6f: 5e:9c:07:d5:52:b9:9f:49:d1:9d:cf:f7:3a:b4:59: b1:8a:6e:ea:9c:af:a9:57:d2:b5:44:68:3a:f7:a4: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DB:60:A4:44:21:A1:05:08:27:5D:4C:21:32:B8:2A:B0:95:22:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35cd333d-0887-3b84-8f76-7b2cf2751ecb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:41:58:78:3d:a9:8b:3d:45:4f:8d:7c:27:38:d6:91:c5:31: 9a:cb:0b:8f:04:ed:f9:a5:4d:83:ba:87:71:90:62:49:14:32: c9:45:3e:f8:16:53:1e:de:b8:0a:bb:61:c4:a6:cf:83:de:4c: 23:3d:1f:2e:c2:4b:d2:08:f9:97:92:2a:70:d9:66:46:72:48: c8:50:6b:07:d0:32:8f:79:f1:2a:90:7b:c5:e1:f7:8b:ac:59: 67:8d:92:4e:b0:fb:fe:ec:4d:63:c3:ce:cc:96:8c:38:c5:2a: 25:0f:3d:37:97:41:7c:a5:92:62:f4:9b:49:17:eb:5f:fa:aa: ca:70:f6:8e:9f:31:ad:35:02:ea:af:b9:6b:1e:ab:51:10:a7: 4b:9a:d9:be:12:ed:77:5e:a1:2a:e6:e5:29:24:37:50:40:70: 83:e7:a3:af:bf:98:84:12:0b:03:28:a4:60:a4:bd:e6:5c:b1: 1f:14:66:52:ab:47:98:2f:0f:9c:c6:8c:8d:b4:51:a7:f2:62: 2c:de:9f:61:5a:c8:ab:fd:bb:f5:4c:39:67:e0:14:2b:08:bb: 67:cd:fd:65:b2:1e:61:38:bf:4b:88:69:6e:29:c1:04:ac:dc: ce:ce:68:f7:96:7e:f5:44:5d:fb:2c:24:67:0e:c6:c1:b1:77: 79:9c:a7:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6pblm8DLnD6Nx7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTFkYzE2MGItNTFhYS00MDUzLWIxY2EtYzFkNzhjNDdkNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9te1RNqxttSjqmMW7PIEdFGUsJr/rRGVOUP VZ9iK+jzx0sbgbHz5WMpK2CuQAJwoBlc+kEsCVMSi4vaPgF9ryyZJinPQ32qQBMd 3UTpHXoMke1G0nnHWCFrSg6nrxWSg00FUNJ6ozFlbYvxyA7nUf7IwBSPcM/Xft/r y7wbQRYow6V0Q5kwygRZCBY8oASPNBMk73D0aKdQEoMvv6zn7nAlTy+xAM2jJCM8 AumHIA4SRToVSOmZYC++pwvqtr/YQB8qTDJ47uViAqzuuN6qMFUzoJ1/DTgaJs6N 7/2/wW9enAfVUrmfSdGdz/c6tFmxim7qnK+pV9K1RGg696TrPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB/bYKREIaEFCCddTCEyuCqwlSJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzVjZDMzM2QtMDg4Ny0z Yjg0LThmNzYtN2IyY2YyNzUxZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhQVh4PamLPUVPjXwnONaRxTGaywuPBO35pU2D uodxkGJJFDLJRT74FlMe3rgKu2HEps+D3kwjPR8uwkvSCPmXkipw2WZGckjIUGsH 0DKPefEqkHvF4feLrFlnjZJOsPv+7E1jw87Mlow4xSolDz03l0F8pZJi9JtJF+tf +qrKcPaOnzGtNQLqr7lrHqtREKdLmtm+Eu13XqEq5uUpJDdQQHCD56Ovv5iEEgsD KKRgpL3mXLEfFGZSq0eYLw+cxoyNtFGn8mIs3p9hWsir/bv1TDln4BQrCLtnzf1l sh5hOL9LiGluKcEErNzOzmj3ln71RF37LCRnDsbBsXd5nKck -----END CERTIFICATE-----Generated at Fri Apr 17 07:05:31 2026 by rpki-client