$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa File: 1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (raw, json) Hash identifier: K7NDLuhnKCvxm9G6lBSgie5PnAZP/y4dgTVfv339ou4= Subject key identifier: 02:E1:6B:EA:9E:20:ED:F1:98:5B:6A:7A:7C:8E:D0:BF:29:C4:8A:FA Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F4328584D15A25BE8240BAD0181370240 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 394470 IP address blocks: 2620:25:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:5b:e8:24:0b:ad:01:81:37:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=d41bf5ca-84ad-4dad-b2f8-83d2f742f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:ee:53:a5:a6:0f:03:b4:7b:e6:66:bc:da: 05:39:2e:fa:e0:ed:f0:59:04:dd:06:d2:1e:1a:b2: 9b:df:e2:2c:16:36:7d:c1:b1:07:ea:97:8a:e6:5a: 58:44:85:21:ce:a5:e4:37:bd:a8:85:a0:e3:67:bf: cd:02:d0:77:9c:88:40:e2:76:c6:52:2b:8a:ac:c8: 90:12:ab:72:f5:d7:10:76:37:ff:9b:7f:7b:32:62: 9a:f2:26:7d:ac:70:92:16:9b:b9:7d:54:59:29:80: 2f:79:ab:4b:af:63:53:83:b7:80:eb:c4:4a:35:a2: 2e:24:fc:fe:43:7b:13:fe:2f:a4:12:ca:3c:8b:ac: e0:fa:56:35:cd:31:d2:85:41:3f:81:6e:7c:4e:3a: 29:d5:ad:07:0b:78:98:f5:76:cd:57:6e:f6:ee:af: 2e:ad:21:17:6b:f4:75:26:4c:6d:4e:20:dc:4e:98: 11:19:12:03:46:e3:4a:86:57:ab:62:ab:55:f0:bd: 5e:7b:2a:9c:53:99:43:cd:33:72:a1:5c:87:b6:79: fa:68:16:ee:98:95:eb:6d:9b:88:fd:e2:25:4a:c4: 45:bc:e5:ff:74:55:f8:49:5a:28:fc:cf:fd:50:a9: cc:c6:a6:1e:56:c5:0f:6e:23:06:67:23:e6:ae:b1: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:6B:EA:9E:20:ED:F1:98:5B:6A:7A:7C:8E:D0:BF:29:C4:8A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv6: 2620:25:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:07:09:8e:1d:ca:24:4c:1e:b5:66:f2:45:da:86:7e:3c:e0: 7e:f2:be:2c:dc:22:1c:5c:1b:79:a2:ee:37:d5:aa:81:22:2e: 86:9b:78:f6:94:bc:94:7f:2f:c0:af:e5:8a:f1:b6:55:65:24: 0c:35:a6:62:2f:19:c7:ad:c7:92:05:17:c3:b2:4c:41:8d:c5: 08:5c:1a:b9:80:9e:b9:32:80:56:71:73:07:6a:10:f5:30:ec: d8:10:ba:73:ba:7a:ce:70:4c:6d:7d:88:6f:63:6d:ca:b9:62: 87:ab:7f:ba:e9:22:42:0d:ab:e7:2e:18:c9:48:bf:c1:d5:cc: 57:8b:17:2b:12:cc:88:c1:6e:aa:50:93:45:6a:21:90:bf:97: c5:93:1f:fe:67:a0:46:cf:f2:c7:ca:34:64:93:8d:d6:37:01: d0:bb:d0:23:e8:d2:19:48:c2:1a:0a:ba:88:d1:01:43:93:67: 38:ac:05:7a:91:98:68:99:62:4c:a1:c7:0a:4f:ef:c6:f2:2a: 48:e2:e2:de:00:dd:e9:ba:f3:a0:4b:7e:07:c8:04:cf:74:60: b3:aa:46:09:05:78:3c:22:95:3a:67:d1:4a:89:3d:48:39:44: d6:e6:45:16:48:cc:3f:f0:cf:46:de:c7:10:6b:71:b4:28:73: b0:97:f7:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0VolvoJAutAYE3AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk ZDQxYmY1Y2EtODRhZC00ZGFkLWIyZjgtODNkMmY3NDJmOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8PuU6WmDwO0e+ZmvNoFOS764O3wWQTdBtIe GrKb3+IsFjZ9wbEH6peK5lpYRIUhzqXkN72ohaDjZ7/NAtB3nIhA4nbGUiuKrMiQ Eqty9dcQdjf/m397MmKa8iZ9rHCSFpu5fVRZKYAveatLr2NTg7eA68RKNaIuJPz+ Q3sT/i+kEso8i6zg+lY1zTHShUE/gW58Tjop1a0HC3iY9XbNV2727q8urSEXa/R1 JkxtTiDcTpgRGRIDRuNKhlerYqtV8L1eeyqcU5lDzTNyoVyHtnn6aBbumJXrbZuI /eIlSsRFvOX/dFX4SVoo/M/9UKnMxqYeVsUPbiMGZyPmrrH6FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFALha+qeIO3xmFtqenyO0L8pxIr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvMWMwMzRmODYtM2JjNy0z MzY5LThkNWUtMDE2YTlkOWNhYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAJaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgHCY4dyiRMHrVm8kXahn484H7yvizcIhxcG3mi7jfVqoEiLoab ePaUvJR/L8Cv5YrxtlVlJAw1pmIvGcetx5IFF8OyTEGNxQhcGrmAnrkygFZxcwdq EPUw7NgQunO6es5wTG19iG9jbcq5Yoerf7rpIkINq+cuGMlIv8HVzFeLFysSzIjB bqpQk0VqIZC/l8WTH/5noEbP8sfKNGSTjdY3AdC70CPo0hlIwhoKuojRAUOTZzis BXqRmGiZYkyhxwpP78byKkji4t4A3em686BLfgfIBM90YLOqRgkFeDwilTpn0UqJ PUg5RNbmRRZIzD/wz0bexxBrcbQoc7CX9+k= -----END CERTIFICATE-----Generated at Sun Mar 22 09:28:47 2026 by rpki-client