$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa File: 4f771a25-4b10-344b-bcab-36085b86cfb4.roa (raw, json) Hash identifier: //sKjKplN2uhiQcPUUtDJuL0wgTmZBygbkWojKLGgNE= Subject key identifier: 46:FA:00:00:77:1D:98:54:CA:B1:B2:9A:04:4E:27:2C:9A:9A:DA:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D52433D852F9101E1A97787E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 2620:74:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:3d:85:2f:91:01:e1:a9:77:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=fa70cb1e-b494-47cd-ba37-f17480f69311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:4e:3b:a0:ab:fb:5b:94:3b:ec:12:ec:ad: 4d:2f:43:4d:f7:b3:d1:90:be:5a:f6:0e:90:99:6e: 79:59:1c:50:a1:a1:08:c9:1b:6b:30:3b:62:57:e3: 90:99:a3:ae:8b:85:c6:c2:92:f3:6f:29:0c:36:d4: 81:14:44:bd:3b:c6:c3:d6:6a:d7:74:f0:d2:35:87: 53:5d:1b:82:09:85:4a:2a:7e:95:05:c4:73:56:60: f7:87:92:f1:e6:a6:b4:e6:c9:e5:33:5e:bc:84:11: 80:2a:c9:88:dd:f9:52:0b:f4:a8:b5:51:56:83:2a: 2a:8d:25:1a:d8:96:ed:ea:c1:07:c7:f0:1f:ac:59: 20:57:17:71:1b:a2:f3:22:c2:f5:2c:5f:7b:b7:19: 51:6f:9a:ec:52:56:ce:34:d0:5a:56:b2:55:07:a6: c7:2f:1c:f3:cf:32:d9:7c:8d:f7:ce:88:86:16:96: ce:cb:93:ce:fe:0d:2f:cc:47:25:63:8f:5f:63:e5: 88:9a:c9:bc:72:5b:c3:19:a2:19:ec:7e:5f:6a:34: 49:9e:fe:2d:6a:ea:6a:04:30:d0:aa:60:ee:53:01: 89:27:ed:e1:1c:07:92:ad:c5:14:6d:7b:47:0b:26: 84:56:a6:04:e6:dc:f7:55:b4:84:21:f4:ea:eb:df: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FA:00:00:77:1D:98:54:CA:B1:B2:9A:04:4E:27:2C:9A:9A:DA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4f771a25-4b10-344b-bcab-36085b86cfb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:31:3b:83:1a:e5:51:43:38:90:0c:5d:7f:a7:af:bc:d4:3a: 19:ac:97:0d:26:77:69:20:a1:34:84:55:51:34:6f:27:28:58: 15:6a:68:f6:88:30:b7:a5:2a:ae:34:c3:05:25:e5:ce:0b:42: 23:70:e8:4c:eb:41:7f:ad:af:f4:37:56:c6:0d:f2:35:c8:85: cf:40:28:4c:e9:69:13:a1:c9:62:84:15:45:a6:a9:f9:e2:5b: 42:09:83:44:87:6f:de:34:9e:60:9e:57:2e:9a:ee:2f:78:e0: 5f:04:cd:74:05:1a:10:79:e6:c7:4c:cb:d6:2e:ff:26:ba:97: 74:f0:c1:20:33:8b:ac:b6:3a:3d:0b:56:c2:f1:77:2a:10:f3: 73:53:60:73:5d:9b:dc:62:13:ea:37:3e:03:84:e7:65:70:66: 8d:6e:31:9b:5c:01:ca:fa:1a:0e:51:2f:1d:2c:a3:98:64:6e: 9e:9c:50:2b:c6:8b:55:9a:d2:64:e0:8a:4c:1e:89:ce:50:7a: 00:8f:20:4b:e0:9d:72:85:bd:e6:c1:dd:01:9d:14:e8:fe:23: bf:cd:b1:47:53:af:d4:7a:d0:5a:61:d6:9d:af:68:db:1e:4b: 7f:c9:21:df:36:ce:03:90:80:f5:b5:b2:76:22:61:f7:2a:d1: e5:bc:83:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SQz2FL5EB4al3h+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZmE3MGNiMWUtYjQ5NC00N2NkLWJhMzctZjE3NDgwZjY5MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/lOO6Cr+1uUO+wS7K1NL0NN97PRkL5a9g6Q mW55WRxQoaEIyRtrMDtiV+OQmaOui4XGwpLzbykMNtSBFES9O8bD1mrXdPDSNYdT XRuCCYVKKn6VBcRzVmD3h5Lx5qa05snlM168hBGAKsmI3flSC/SotVFWgyoqjSUa 2Jbt6sEHx/AfrFkgVxdxG6LzIsL1LF97txlRb5rsUlbONNBaVrJVB6bHLxzzzzLZ fI33zoiGFpbOy5PO/g0vzEclY49fY+WImsm8clvDGaIZ7H5fajRJnv4taupqBDDQ qmDuUwGJJ+3hHAeSrcUUbXtHCyaEVqYE5tz3VbSEIfTq69+E/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEb6AAB3HZhUyrGymgROJyyamtqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGY3NzFhMjUtNGIxMC0z NDRiLWJjYWItMzYwODViODZjZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcxO4Ma5VFDOJAMXX+nr7zUOhmslw0md2kgoTSEVVE0bycoWBVq aPaIMLelKq40wwUl5c4LQiNw6EzrQX+tr/Q3VsYN8jXIhc9AKEzpaROhyWKEFUWm qfniW0IJg0SHb940nmCeVy6a7i944F8EzXQFGhB55sdMy9Yu/ya6l3TwwSAzi6y2 Oj0LVsLxdyoQ83NTYHNdm9xiE+o3PgOE52VwZo1uMZtcAcr6Gg5RLx0so5hkbp6c UCvGi1Wa0mTgikweic5QegCPIEvgnXKFvebB3QGdFOj+I7/NsUdTr9R60Fph1p2v aNseS3/JId82zgOQgPW1snYiYfcq0eW8g4k= -----END CERTIFICATE-----Generated at Mon Mar 30 04:24:08 2026 by rpki-client