$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa File: cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa (raw, json) Hash identifier: yIKyqjT6+N6DRMOZ81f4IL3QmqABLSo44n28oT0TxbU= Subject key identifier: 7F:90:62:A3:D5:0D:46:49:DF:02:84:D5:5C:DC:67:76:D9:DC:68:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D524340AD77DB6D946C1E1F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 2620:74:22::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:40:ad:77:db:6d:94:6c:1e:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4b8be118-7fbd-49de-9bcd-b1def5f277c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:99:65:ea:31:b6:1b:11:70:51:3a:91:0d: 94:73:08:ef:fc:83:91:a1:42:cb:ef:7a:91:b4:2d: e7:14:62:e4:2f:c7:6e:81:64:6c:e5:3a:2a:80:06: d2:07:c4:d1:23:9c:64:db:8f:24:bb:c9:25:cb:01: 49:15:a9:07:f5:14:e1:86:16:53:ac:52:36:b6:d1: 9e:e2:4b:8a:f6:07:8a:03:56:6d:99:68:bd:36:25: 09:c5:28:55:e9:02:01:5d:f4:42:19:58:de:ec:10: 70:6d:54:e6:56:95:8f:94:ce:13:70:51:bb:87:ba: e6:fb:72:c0:0d:45:f7:72:b7:fb:bf:c7:5d:b8:fa: b6:3a:d8:fc:6c:86:98:2b:85:e8:65:90:e6:71:20: 44:02:ba:a8:79:11:de:18:3b:0c:3e:58:d4:c7:ef: 56:41:3a:9a:7b:d1:f1:c9:82:e1:a2:a5:1a:0e:d6: e4:1c:51:d7:ba:94:9d:97:bd:1c:78:86:b5:49:9e: d8:ac:8d:28:d1:c6:ac:ca:1b:98:69:31:28:58:7e: 39:ab:5b:66:6c:fa:46:28:41:34:77:89:97:31:5c: 14:83:0f:db:92:a6:30:24:7a:86:8b:e2:38:89:3b: 2b:5a:d6:8a:69:b5:8b:47:e6:c3:02:24:fb:03:9b: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:62:A3:D5:0D:46:49:DF:02:84:D5:5C:DC:67:76:D9:DC:68:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:22::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:79:18:9a:c1:4e:09:7a:8f:6f:65:9e:09:d5:f3:bc:46:8c: 67:70:9e:99:35:d8:6a:58:38:1b:db:17:3c:a1:9c:17:64:f8: aa:e1:4d:bb:11:2a:5d:d4:77:3d:41:81:34:7b:4a:14:7a:21: 4a:5c:d2:64:37:fe:89:28:14:00:db:13:dd:64:9b:b3:78:1d: 3a:34:7f:b3:7e:1d:2b:5b:b8:cb:53:d2:c0:c1:1a:ec:c8:b4: 90:b8:b5:29:68:78:0f:7f:0e:dd:8b:61:85:60:63:31:40:6e: 07:a6:c2:a5:99:57:2b:5f:0f:d8:fa:87:d2:1a:e1:52:80:54: 5d:1d:e1:77:5d:75:41:51:25:80:07:7c:97:1e:4a:80:1f:22: d8:de:d1:10:bd:ab:f8:b0:be:f3:99:8a:5d:38:c1:9c:08:b0: b0:a5:41:be:4a:d2:a8:8c:a7:9a:6a:10:7d:eb:a3:c7:a1:6b: 44:9a:ca:96:fa:43:d1:ab:73:b9:50:ff:76:60:d7:5a:ec:68: 8d:b7:85:a7:c6:5a:23:ea:ec:d7:90:a4:89:5a:0d:e0:a4:e4: 35:4f:84:9d:55:4b:2a:97:99:a7:55:f0:1e:62:56:96:04:ac: 98:72:e4:13:66:01:66:59:38:99:40:e7:49:25:d3:2e:6e:0b: 72:f7:97:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SQ0Ctd9ttlGweH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGI4YmUxMTgtN2ZiZC00OWRlLTliY2QtYjFkZWY1ZjI3N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOGZZeoxthsRcFE6kQ2Ucwjv/IORoULL73qR tC3nFGLkL8dugWRs5ToqgAbSB8TRI5xk248ku8klywFJFakH9RThhhZTrFI2ttGe 4kuK9geKA1ZtmWi9NiUJxShV6QIBXfRCGVje7BBwbVTmVpWPlM4TcFG7h7rm+3LA DUX3crf7v8dduPq2Otj8bIaYK4XoZZDmcSBEArqoeRHeGDsMPljUx+9WQTqae9Hx yYLhoqUaDtbkHFHXupSdl70ceIa1SZ7YrI0o0casyhuYaTEoWH45q1tmbPpGKEE0 d4mXMVwUgw/bkqYwJHqGi+I4iTsrWtaKabWLR+bDAiT7A5vmZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+QYqPVDUZJ3wKE1VzcZ3bZ3GgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxNzUzMDUtYmMxZC0z OGIxLTk0YTAtYjA2ZjZmNGJlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFR5GJrBTgl6j29lngnV87xGjGdwnpk12GpYOBvbFzyhnBdk+Krh TbsRKl3Udz1BgTR7ShR6IUpc0mQ3/okoFADbE91km7N4HTo0f7N+HStbuMtT0sDB GuzItJC4tSloeA9/Dt2LYYVgYzFAbgemwqWZVytfD9j6h9Ia4VKAVF0d4XdddUFR JYAHfJceSoAfItje0RC9q/iwvvOZil04wZwIsLClQb5K0qiMp5pqEH3ro8eha0Sa ypb6Q9Grc7lQ/3Zg11rsaI23hafGWiPq7NeQpIlaDeCk5DVPhJ1VSyqXmadV8B5i VpYErJhy5BNmAWZZOJlA50kl0y5uC3L3l78= -----END CERTIFICATE-----Generated at Mon Mar 30 04:24:08 2026 by rpki-client