$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa File: 6fff2e42-444b-3096-9b7f-260c3499f91c.roa (raw, json) Hash identifier: isrhL9wKEn7hArvF96XRWnUlsbMkzbqEuV4f4rMZOV8= Subject key identifier: 28:BE:E3:CE:04:B9:A1:5E:B4:DD:62:F4:61:B8:19:1D:A3:D8:F8:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9B966079C093495A1340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396586 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9b:96:60:79:c0:93:49:5a:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8338abce-a896-4901-9728-595ab1e698f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:b4:70:26:88:fd:16:9e:30:c1:e3:5e:ec: 18:b4:4a:ab:82:a7:d5:3a:aa:a6:3e:c2:22:bc:2e: 87:e0:6f:c6:10:c3:38:af:8b:d0:f2:c9:2a:58:f0: 0c:82:ec:24:54:ae:91:d6:74:f2:d1:9c:3f:23:92: 13:48:00:ed:23:35:f5:91:ba:40:ed:ec:fe:b6:5e: 3a:b8:0a:be:b2:9f:67:82:47:01:43:b2:50:a1:29: bb:0a:34:60:54:01:4a:ca:d3:b6:5f:84:12:0c:a6: 85:0b:ed:67:46:9a:68:c8:d7:32:d7:6a:16:69:ac: b0:17:d8:7b:2e:8f:e3:b8:f9:cd:e1:bb:9e:55:fe: 72:6e:96:00:ae:5d:ba:cc:82:eb:ed:08:a1:e4:67: 1a:21:40:f4:eb:14:e8:37:41:b5:f8:9d:e8:3f:85: b7:f6:01:9f:7b:ab:ce:e4:30:b8:2e:8b:4e:6c:92: bb:1f:6b:97:60:89:00:7a:97:06:5c:8d:5b:9b:fc: 0f:f1:61:e0:d7:fa:1e:ff:e9:b6:4f:e0:a6:a0:fe: 48:0b:43:a1:59:a9:f2:bc:41:e8:e6:55:8b:37:6f: b2:9d:2c:21:4f:56:93:5d:fa:6a:29:39:2f:8f:16: 45:19:5e:cd:0b:3b:0a:5e:ce:f2:9a:ad:e6:29:10: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BE:E3:CE:04:B9:A1:5E:B4:DD:62:F4:61:B8:19:1D:A3:D8:F8:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6fff2e42-444b-3096-9b7f-260c3499f91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2e:06:92:d5:3c:d1:af:4f:ca:0f:59:36:e8:7a:85:e4:04: c1:5c:aa:2a:f9:09:3c:53:fe:fa:77:5a:e7:67:1d:30:2d:da: 6c:a9:3b:77:e0:28:a3:31:19:a5:62:32:f2:2e:01:d7:38:4a: 99:4d:d1:04:b6:8d:44:e1:2e:f5:b0:1d:6c:13:7a:13:71:c9: d8:e5:05:cc:54:20:fb:79:4e:f6:90:99:bd:2e:cf:67:d7:03: 07:c2:0a:d7:e7:ca:f1:27:1e:78:17:ca:d5:cb:df:c5:85:8e: 9c:14:61:ee:8e:c5:10:6b:ba:52:d8:8b:49:14:87:d7:2c:09: 43:45:a3:cb:ca:2b:c1:b0:aa:5e:a0:d1:d5:70:fc:87:7b:ef: ce:91:84:d7:f7:b1:05:db:0b:b1:07:64:d4:be:f5:d0:18:05: 2a:ca:7b:b1:6f:ba:d3:77:7d:08:f0:9b:d2:6d:6e:25:92:3c: 80:5b:90:bb:40:f0:6e:6d:ce:5f:f8:3f:38:9f:26:62:37:af: 0c:a0:db:a5:66:51:a5:c2:c7:1c:09:0d:46:90:64:ae:1f:a1: eb:4c:32:50:5a:44:cc:b1:fb:7b:eb:f7:da:99:e4:f4:fe:fa: 07:0b:17:81:2c:85:ee:8c:52:11:1c:5e:c0:f3:85:83:55:ef: c1:5e:8a:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6puWYHnAk0laE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODMzOGFiY2UtYTg5Ni00OTAxLTk3MjgtNTk1YWIxZTY5OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwe0cCaI/RaeMMHjXuwYtEqrgqfVOqqmPsIi vC6H4G/GEMM4r4vQ8skqWPAMguwkVK6R1nTy0Zw/I5ITSADtIzX1kbpA7ez+tl46 uAq+sp9ngkcBQ7JQoSm7CjRgVAFKytO2X4QSDKaFC+1nRppoyNcy12oWaaywF9h7 Lo/juPnN4bueVf5ybpYArl26zILr7Qih5GcaIUD06xToN0G1+J3oP4W39gGfe6vO 5DC4LotObJK7H2uXYIkAepcGXI1bm/wP8WHg1/oe/+m2T+CmoP5IC0OhWanyvEHo 5lWLN2+ynSwhT1aTXfpqKTkvjxZFGV7NCzsKXs7ymq3mKRD+CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCi+484EuaFetN1i9GG4GR2j2PhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZmZjJlNDItNDQ0Yi0z MDk2LTliN2YtMjYwYzM0OTlmOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQByLgaS1TzRr0/KD1k26HqF5ATBXKoq+Qk8U/76 d1rnZx0wLdpsqTt34CijMRmlYjLyLgHXOEqZTdEEto1E4S71sB1sE3oTccnY5QXM VCD7eU72kJm9Ls9n1wMHwgrX58rxJx54F8rVy9/FhY6cFGHujsUQa7pS2ItJFIfX LAlDRaPLyivBsKpeoNHVcPyHe+/OkYTX97EF2wuxB2TUvvXQGAUqynuxb7rTd30I 8JvSbW4lkjyAW5C7QPBubc5f+D84nyZiN68MoNulZlGlwsccCQ1GkGSuH6HrTDJQ WkTMsft76/fameT0/voHCxeBLIXujFIRHF7A84WDVe/BXopn -----END CERTIFICATE-----Generated at Fri Apr 17 10:04:37 2026 by rpki-client