$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa File: 1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa (raw, json) Hash identifier: 3rq485r0zf/lKKzHB/ZmI7mvKxg3x7AOJSoqjT7PFGQ= Subject key identifier: 3A:B5:1C:7E:4C:01:49:99:77:55:84:EC:F8:91:6F:A0:0D:6D:06:BB Certificate issuer: /CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Certificate serial: 010D0C9F4328584D6D7509906B99C9F9F1AA28C0 Authority key identifier: 51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 11409 IP address blocks: 2620:118:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:09:90:6b:99:c9:f9:f1:aa:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1a5536-816c-426b-b7e4-bad0d305a931 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=85b5e663-7d20-4063-bb9c-afb092516258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:4f:9a:76:c1:8e:c5:af:72:08:c2:2b:27: d6:d9:8a:08:41:8a:8d:04:e6:d5:6c:05:d3:b0:54: 24:a8:0c:02:26:1d:ea:71:2c:24:f5:5f:91:09:19: 79:2f:2e:44:b1:be:b6:41:bd:1d:e2:af:55:d3:51: 24:e5:af:01:d0:3d:34:32:13:20:b6:95:78:b4:62: a3:5c:a2:b7:ee:71:84:8e:9e:17:9e:0c:7a:4e:96: e0:5a:d1:29:8e:32:11:4f:20:12:ec:43:e3:b9:78: 11:5a:c9:4d:f1:e3:c9:0d:ea:54:72:3a:ca:9c:02: 47:93:e4:97:b7:22:99:13:a2:46:c3:07:ce:4d:77: 06:22:0c:3f:db:b6:4c:08:b6:c1:c6:11:59:85:db: ec:0a:1c:b6:fb:f1:ac:88:0e:53:9b:b3:66:92:1e: d6:fe:c1:0b:f6:f8:1d:c4:f4:8c:d7:4e:ee:83:78: 76:5b:ad:2e:4b:ed:07:ac:c7:ff:c8:49:04:89:95: 87:38:16:62:3c:d4:20:44:e8:fd:75:a8:2e:1f:e0: 4d:5b:ff:ec:a6:a3:3e:70:e5:d4:02:6d:c9:1a:f2: 52:e3:e6:ce:e4:5a:c3:56:d0:c5:36:ed:c2:f8:74: 6a:b3:f6:2f:92:fd:19:03:92:c1:e4:44:68:c6:c1: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:1C:7E:4C:01:49:99:77:55:84:EC:F8:91:6F:A0:0D:6D:06:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/1bc6be06-f8c7-3c78-be41-d38e4895fe19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931/8c1a5536-816c-426b-b7e4-bad0d305a931.crl X509v3 Authority Key Identifier: keyid:51:9E:35:FE:1F:E0:DE:81:F8:F6:6E:63:A3:07:B4:5F:F7:F9:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8c1a5536-816c-426b-b7e4-bad0d305a931.cer sbgp-ipAddrBlock: critical IPv6: 2620:118:2020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c7:c3:b7:e5:07:43:73:22:ee:ea:ab:63:bc:1b:2b:15:5c: ee:48:e7:1a:08:eb:da:91:9c:14:1e:e2:68:23:fc:25:e3:72: c6:11:ef:36:13:ad:75:5d:a2:32:6b:52:f5:32:29:3c:80:84: f0:ba:45:59:3d:92:ef:51:5a:77:bb:13:87:24:93:05:02:a2: 38:0a:3f:ac:47:ee:7c:fc:d1:21:02:44:ce:a5:a0:a1:5f:aa: b9:16:48:b7:2d:58:0f:49:6a:73:a1:54:d6:4d:66:bc:b7:76: 87:b1:0f:22:a7:f0:25:c3:f3:54:b9:08:12:79:b8:41:43:80: ac:7f:8c:21:ba:40:1c:13:1a:28:5a:75:00:9a:98:5a:e4:b1: cb:94:ee:99:7d:52:25:02:7c:64:a7:17:08:02:a3:63:0f:0c: 5f:22:31:c0:b4:32:cd:f4:55:85:e5:6d:b4:06:5c:86:d1:28: a9:76:66:7a:2d:be:1e:32:25:9b:8a:4d:37:57:01:a5:0e:8e: 60:51:fd:cf:27:dd:0c:f8:89:12:bb:03:e8:cf:24:4b:13:97: 0e:83:56:f8:04:cb:fc:fd:e7:df:c3:3d:10:1c:5a:1a:e5:74: d4:16:df:bf:07:cc:62:34:3d:20:91:09:98:8e:d9:4c:04:4c: ab:d6:8f:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1tdQmQa5nJ+fGqKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxYTU1MzYtODE2Yy00MjZiLWI3ZTQtYmFkMGQzMDVh OTMxMB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk ODViNWU2NjMtN2QyMC00MDYzLWJiOWMtYWZiMDkyNTE2MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoZPmnbBjsWvcgjCKyfW2YoIQYqNBObVbAXT sFQkqAwCJh3qcSwk9V+RCRl5Ly5Esb62Qb0d4q9V01Ek5a8B0D00MhMgtpV4tGKj XKK37nGEjp4Xngx6TpbgWtEpjjIRTyAS7EPjuXgRWslN8ePJDepUcjrKnAJHk+SX tyKZE6JGwwfOTXcGIgw/27ZMCLbBxhFZhdvsChy2+/GsiA5Tm7Nmkh7W/sEL9vgd xPSM107ug3h2W60uS+0HrMf/yEkEiZWHOBZiPNQgROj9daguH+BNW//spqM+cOXU Am3JGvJS4+bO5FrDVtDFNu3C+HRqs/Yvkv0ZA5LB5ERoxsHGCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDq1HH5MAUmZd1WE7PiRb6ANbQa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFh NTUzNi04MTZjLTQyNmItYjdlNC1iYWQwZDMwNWE5MzEvMWJjNmJlMDYtZjhjNy0z Yzc4LWJlNDEtZDM4ZTQ4OTVmZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGMxYTU1MzYtODE2Yy00MjZiLWI3 ZTQtYmFkMGQzMDVhOTMxLzhjMWE1NTM2LTgxNmMtNDI2Yi1iN2U0LWJhZDBkMzA1 YTkzMS5jcmwwHwYDVR0jBBgwFoAUUZ41/h/g3oH49m5jowe0X/f5n7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YzFhNTUzNi04MTZjLTQyNmItYjdlNC1iYWQw ZDMwNWE5MzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGCAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDHw7flB0NzIu7qq2O8GysVXO5I5xoI69qRnBQe4mgj/CXjcsYR 7zYTrXVdojJrUvUyKTyAhPC6RVk9ku9RWne7E4ckkwUCojgKP6xH7nz80SECRM6l oKFfqrkWSLctWA9JanOhVNZNZry3doexDyKn8CXD81S5CBJ5uEFDgKx/jCG6QBwT GihadQCamFrkscuU7pl9UiUCfGSnFwgCo2MPDF8iMcC0Ms30VYXlbbQGXIbRKKl2 Znotvh4yJZuKTTdXAaUOjmBR/c8n3Qz4iRK7A+jPJEsTlw6DVvgEy/z959/DPRAc WhrldNQW378HzGI0PSCRCZiO2UwETKvWj3w= -----END CERTIFICATE-----Generated at Wed Apr 8 12:17:14 2026 by rpki-client