$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa File: 4db7b021-add9-39c3-8875-288dfc88daa8.roa (raw, json) Hash identifier: XIZO9JONLsR6RGsbSrwGtIga490rc3i7Oyn8qYKyoNE= Subject key identifier: B2:F2:20:0E:87:DF:1D:90:07:4C:A7:1B:D4:38:62:D2:CB:98:AE:28 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584D67DFBF88EB2397330C4C7700 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 36692 IP address blocks: 2620:119:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:bf:88:eb:23:97:33:0c:4c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=e1c4d549-8643-4cfd-a305-cb9ffce93c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:c2:ac:ba:ab:16:1c:0c:84:4a:63:0e:8b: d6:3b:3a:d5:c7:aa:aa:15:c4:85:bf:09:29:f6:0c: 99:ae:04:e1:7d:bb:57:32:9f:cf:0f:b4:15:a2:5b: a1:b7:cb:ea:8b:ff:a1:bc:e0:28:8c:f3:75:a5:5c: 71:7e:a0:2d:1c:20:42:09:4c:2f:35:c2:b6:dc:77: 53:9b:ce:e0:9e:20:df:ae:39:6d:01:33:c5:bc:05: 53:d5:72:af:d0:dd:1c:0d:09:b7:f5:89:28:df:c6: 11:9c:6b:b8:63:96:b2:68:1c:ff:99:32:22:b7:90: 68:ca:6c:56:09:bb:31:c2:67:44:cf:22:f8:ea:47: f8:a7:17:4a:b5:7d:27:30:bd:3f:20:5f:b4:8d:e9: e4:90:74:c8:4a:55:2e:a9:db:a2:d5:52:62:3b:58: df:f0:29:ed:d3:55:7e:2c:c9:09:9a:f4:c2:39:0e: da:e8:94:52:b8:fb:2e:30:d9:11:7e:6e:0d:b6:62: df:86:25:d1:b4:a6:32:96:1f:94:60:44:19:64:cf: d4:22:e9:c8:e1:5a:6c:76:8e:91:05:4a:48:cd:66: 19:4f:ce:bd:54:ff:f5:d4:b9:ca:df:29:d9:70:c7: 44:d8:a2:5e:d9:f9:af:02:75:83:1f:74:04:eb:77: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F2:20:0E:87:DF:1D:90:07:4C:A7:1B:D4:38:62:D2:CB:98:AE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/4db7b021-add9-39c3-8875-288dfc88daa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv6: 2620:119:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:55:91:b3:52:75:56:cb:37:eb:5b:a1:36:76:95:c5:12:74: 95:a1:39:07:a8:63:34:1a:87:13:64:f0:31:0f:df:46:ca:e7: ce:94:32:83:96:f2:60:89:79:02:41:e1:7f:b5:5b:7f:24:ff: b0:b1:e8:4c:f1:2c:d7:41:8d:68:f7:fc:04:86:55:24:34:35: 0e:33:6d:9e:e2:0c:d0:15:f9:47:74:22:73:b0:8e:e0:5d:28: 04:92:b3:5b:76:a8:65:39:5c:46:ce:76:42:6b:31:f3:38:cf: 27:08:9d:23:69:dc:9a:4e:ad:0e:7b:cb:4a:5a:61:87:2a:97: 46:8b:bc:c4:fc:7a:c4:bb:00:67:e7:81:44:51:c3:b2:ce:7a: 85:c1:90:d7:01:54:43:26:c6:e3:ed:d2:46:d6:d9:33:41:80: fb:f6:c8:cf:b9:b2:9b:98:ba:21:fb:60:fe:1a:c7:19:f2:74: 3d:28:eb:6a:e7:c3:98:63:b2:15:dc:78:0b:c4:dc:86:5f:4d: c2:0b:3e:74:6b:3a:aa:d8:8b:35:ab:9a:d5:06:a2:28:43:29: 35:ce:b1:87:0d:16:f1:bc:11:7b:f5:d8:0b:ba:e5:55:df:78: 88:9d:6e:76:c9:a9:d5:1f:e6:33:e1:8c:bf:c2:a2:dd:b8:27: 81:fb:bb:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n37+I6yOXMwxMdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZTFjNGQ1NDktODY0My00Y2ZkLWEzMDUtY2I5ZmZjZTkzYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCnCrLqrFhwMhEpjDovWOzrVx6qqFcSFvwkp 9gyZrgThfbtXMp/PD7QVoluht8vqi/+hvOAojPN1pVxxfqAtHCBCCUwvNcK23HdT m87gniDfrjltATPFvAVT1XKv0N0cDQm39Yko38YRnGu4Y5ayaBz/mTIit5BoymxW CbsxwmdEzyL46kf4pxdKtX0nML0/IF+0jenkkHTISlUuqdui1VJiO1jf8Cnt01V+ LMkJmvTCOQ7a6JRSuPsuMNkRfm4NtmLfhiXRtKYylh+UYEQZZM/UIunI4Vpsdo6R BUpIzWYZT869VP/11LnK3ynZcMdE2KJe2fmvAnWDH3QE63d3vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLyIA6H3x2QB0ynG9Q4YtLLmK4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvNGRiN2IwMjEtYWRkOS0z OWMzLTg4NzUtMjg4ZGZjODhkYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZVkbNSdVbLN+tboTZ2lcUSdJWhOQeoYzQahxNk8DEP30bK586U MoOW8mCJeQJB4X+1W38k/7Cx6EzxLNdBjWj3/ASGVSQ0NQ4zbZ7iDNAV+Ud0InOw juBdKASSs1t2qGU5XEbOdkJrMfM4zycInSNp3JpOrQ57y0paYYcql0aLvMT8esS7 AGfngURRw7LOeoXBkNcBVEMmxuPt0kbW2TNBgPv2yM+5spuYuiH7YP4axxnydD0o 62rnw5hjshXceAvE3IZfTcILPnRrOqrYizWrmtUGoihDKTXOsYcNFvG8EXv12Au6 5VXfeIidbnbJqdUf5jPhjL/Cot24J4H7u/0= -----END CERTIFICATE-----Generated at Tue Apr 7 13:28:01 2026 by rpki-client