$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa File: cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa (raw, json) Hash identifier: ZewijEqAFfmOehrl0zfDt2QYc2MmiKltAEU+0Afx9mI= Subject key identifier: 72:7E:71:00:D9:41:6F:38:BC:E6:9F:62:71:F9:C5:6D:57:0B:B1:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D59EA9856CD39A623AAFEF040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 19836 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:98:56:cd:39:a6:23:aa:fe:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=efb4ba1e-3913-45e9-914d-3b4dd8b2d18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:e1:df:d4:11:3d:2d:e9:e6:ab:3f:8e:d9: 89:8b:89:dd:86:ed:c0:27:a4:3e:cb:a6:48:ab:1d: 8c:21:dc:c9:ed:be:f9:43:75:16:34:81:fe:a2:92: 9f:b0:90:6c:63:c9:40:8b:52:60:2a:00:ab:5a:53: 66:18:05:78:d9:58:e1:be:81:f9:d4:c8:32:0a:1d: b0:d9:6f:d7:4e:63:ca:a1:ab:ea:21:d1:5c:3b:c1: f8:03:40:66:ca:15:fd:06:12:7b:d4:ef:b6:ec:0d: f5:6b:56:20:a6:67:2a:f6:27:ef:dd:e1:b4:e2:14: da:71:35:a2:0c:55:ed:5b:29:cc:88:90:db:bc:1f: fb:33:6e:dd:a2:71:b9:a8:f3:ae:1e:30:5f:18:c1: a7:d8:1f:68:36:a5:de:bc:2f:f8:f6:f2:be:3a:0c: 48:6e:7b:09:ff:5d:66:99:ed:f5:7e:45:c7:ce:f5: a7:b9:65:b4:97:4f:e1:f5:d6:68:eb:57:a2:a7:58: e0:8c:45:d6:ac:64:e0:30:d4:59:38:e6:e7:0d:0d: d1:86:6e:c8:5d:98:b0:fb:2c:74:e4:2f:ed:44:70: e0:ef:da:9a:88:09:01:fa:63:32:7c:b2:72:dd:60: e0:3d:91:05:5a:40:62:78:1c:42:9c:47:93:50:c1: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7E:71:00:D9:41:6F:38:BC:E6:9F:62:71:F9:C5:6D:57:0B:B1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:be:33:35:61:d5:4f:06:09:6c:c0:19:24:a4:75:8b:74:f1: 97:9d:68:2d:54:a9:a7:5b:49:34:69:20:55:ef:d4:33:76:8e: ec:03:15:8c:90:75:31:3a:dd:cc:35:0b:0a:11:97:c4:14:9f: 66:02:10:14:db:00:73:f3:28:d8:ba:f4:f6:2d:5b:57:ba:bc: 03:8a:b9:1d:85:1c:b7:bf:86:c1:8a:17:4a:e1:a7:40:04:c3: b0:f8:14:3c:bc:96:91:7a:d7:99:f4:62:5c:de:a6:d5:0f:20: 6d:98:61:93:2f:cc:0d:c5:1f:bb:13:7d:72:fc:7b:62:ab:6a: 4f:f5:62:49:50:89:79:a4:36:ba:89:c6:a6:18:a5:a4:4a:27: 5f:70:23:fa:ce:01:39:8a:70:50:74:94:3c:2b:4b:17:3f:3a: 76:d5:43:b7:aa:e1:4a:ce:9b:8d:e2:06:dc:40:ee:06:f7:4f: ee:cd:ed:48:3c:b5:84:95:8c:97:a1:b5:c6:6a:07:5c:41:78: 21:58:43:31:85:07:64:f5:24:b1:65:36:d7:7f:af:cd:ce:c0: 0c:63:fb:01:94:58:57:88:bf:99:ad:d6:55:c9:6a:37:6c:20: 46:b1:ac:07:89:d6:af:f7:66:56:bf:16:9e:fc:8d:4a:eb:e3: 18:48:47:b0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6phWzTmmI6r+8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZWZiNGJhMWUtMzkxMy00NWU5LTkxNGQtM2I0ZGQ4YjJkMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv7h39QRPS3p5qs/jtmJi4ndhu3AJ6Q+y6ZI qx2MIdzJ7b75Q3UWNIH+opKfsJBsY8lAi1JgKgCrWlNmGAV42VjhvoH51MgyCh2w 2W/XTmPKoavqIdFcO8H4A0BmyhX9BhJ71O+27A31a1Ygpmcq9ifv3eG04hTacTWi DFXtWynMiJDbvB/7M27donG5qPOuHjBfGMGn2B9oNqXevC/49vK+OgxIbnsJ/11m me31fkXHzvWnuWW0l0/h9dZo61eip1jgjEXWrGTgMNRZOObnDQ3Rhm7IXZiw+yx0 5C/tRHDg79qaiAkB+mMyfLJy3WDgPZEFWkBieBxCnEeTUMEn5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJ+cQDZQW84vOafYnH5xW1XC7EOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1NWNiZjctNWViZi0z MTI1LWE0OTUtOGE3ZDMyYWQ4MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAkvjM1YdVPBglswBkkpHWLdPGXnWgtVKmnW0k0 aSBV79Qzdo7sAxWMkHUxOt3MNQsKEZfEFJ9mAhAU2wBz8yjYuvT2LVtXurwDirkd hRy3v4bBihdK4adABMOw+BQ8vJaReteZ9GJc3qbVDyBtmGGTL8wNxR+7E31y/Hti q2pP9WJJUIl5pDa6icamGKWkSidfcCP6zgE5inBQdJQ8K0sXPzp21UO3quFKzpuN 4gbcQO4G90/uze1IPLWElYyXobXGagdcQXghWEMxhQdk9SSxZTbXf6/NzsAMY/sB lFhXiL+ZrdZVyWo3bCBGsawHidav92ZWvxae/I1K6+MYSEew -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:04 2026 by rpki-client