$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa File: 5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa (raw, json) Hash identifier: /k1t4bKX+5iIWACVnZc2ul3P2Q7aOT7/InaGSHTx0IE= Subject key identifier: 92:2B:74:AB:F7:EF:12:D2:76:8E:B0:10:5C:B9:13:4C:BF:9D:F1:C5 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584D1B1A6056EB271852EEEA9D00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 763 IP address blocks: 2620:1f7:c052::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:60:56:eb:27:18:52:ee:ea:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ceffd225-0544-4b88-a8d4-4d33c6dd1a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:62:3a:e6:72:e5:b0:cb:ca:e7:f1:c6:dd: 98:40:bd:2e:03:53:d7:5d:7c:a5:66:f7:85:a8:ea: 27:b0:aa:32:59:bb:7b:e6:03:e1:ec:48:f2:2c:26: 08:6e:d5:c0:04:10:b8:25:48:e5:ef:26:e8:78:6b: 6d:25:83:c1:98:0d:02:51:01:18:b7:c6:e5:12:f4: 4d:09:16:a5:ba:eb:cd:84:b8:1d:b6:de:f8:5f:16: 8f:61:a1:da:77:5b:79:16:ad:d8:22:46:77:24:a5: 69:0d:e4:00:ab:e4:d2:5f:41:78:c1:98:ee:38:61: 06:18:dd:8c:e8:a9:fd:f6:43:59:f1:69:e2:ba:58: 7a:b1:53:41:10:7f:93:7b:ca:d2:f3:49:6d:9f:d6: f8:d2:75:ce:6c:67:c9:73:f3:d2:ed:eb:3a:d0:f1: b4:68:d9:d2:d2:ca:2e:5b:66:eb:24:5c:0d:99:5e: e4:7f:43:42:ca:f4:65:a0:81:b2:26:3a:9d:aa:61: 3b:94:fb:b9:38:d3:f5:cd:0a:61:ad:33:72:99:9d: 04:5d:6f:01:fa:df:a4:6a:f7:6a:a3:e7:74:57:84: 98:37:f8:bd:4c:7b:e3:ee:a9:27:92:e1:d9:61:83: 42:96:b1:78:4e:cc:4c:02:4e:8b:4a:9f:c0:10:e5: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:74:AB:F7:EF:12:D2:76:8E:B0:10:5C:B9:13:4C:BF:9D:F1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1f7:c052::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:86:28:e8:eb:34:44:ac:fc:ee:49:99:8f:2f:47:64:70:38: 97:d4:80:4a:66:a8:96:e7:f0:7e:d7:ad:e9:15:56:19:14:08: 16:a2:e1:e6:12:84:11:6d:53:97:7b:b8:b5:e6:ff:d4:eb:79: dd:68:2e:cb:e8:be:91:68:6c:9d:25:25:6d:f8:ff:a4:61:40: 0f:c2:ff:70:09:01:81:78:86:39:e2:40:56:eb:6c:c0:46:2f: eb:27:8c:55:51:7c:67:bb:41:40:6d:78:3e:31:98:e5:a5:65: 03:df:27:59:f4:fa:0b:00:fe:eb:a5:13:a0:53:41:cc:35:45: 61:e6:95:a5:c8:94:fb:0a:76:73:6b:c6:b6:e4:af:e3:74:6b: 55:e6:f1:49:39:b8:46:dd:47:af:7f:a6:a6:f3:90:c0:52:4c: dc:e1:2d:f3:66:5f:ee:0d:06:af:75:73:24:fd:92:5d:c7:dc: d0:30:6d:76:ef:3e:1b:e4:2d:54:e4:75:a6:18:4e:d8:88:21: be:d5:2e:ad:e3:6a:3b:d2:d9:1a:1c:79:8e:a8:f5:45:a4:bf: 74:55:b7:a2:37:eb:c6:1a:0f:d9:29:1d:ee:4d:30:41:ac:9f: 97:50:81:cb:08:eb:55:59:4b:32:ac:e7:25:eb:fa:4f:3f:9e: 33:ce:4a:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGmBW6ycYUu7qnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2VmZmQyMjUtMDU0NC00Yjg4LWE4ZDQtNGQzM2M2ZGQxYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCViOuZy5bDLyufxxt2YQL0uA1PXXXylZveF qOonsKoyWbt75gPh7EjyLCYIbtXABBC4JUjl7yboeGttJYPBmA0CUQEYt8blEvRN CRaluuvNhLgdtt74XxaPYaHad1t5Fq3YIkZ3JKVpDeQAq+TSX0F4wZjuOGEGGN2M 6Kn99kNZ8Wniulh6sVNBEH+Te8rS80ltn9b40nXObGfJc/PS7es60PG0aNnS0sou W2brJFwNmV7kf0NCyvRloIGyJjqdqmE7lPu5ONP1zQphrTNymZ0EXW8B+t+kavdq o+d0V4SYN/i9THvj7qknkuHZYYNClrF4TsxMAk6LSp/AEOWFtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIrdKv37xLSdo6wEFy5E0y/nfHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNWZkMTdiYTMtMjk4ZS0z ZGM5LWIyMjgtOGRhZmI5ZDkxNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98BS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGaGKOjrNESs/O5JmY8vR2RwOJfUgEpmqJbn8H7XrekVVhkUCBai 4eYShBFtU5d7uLXm/9Tred1oLsvovpFobJ0lJW34/6RhQA/C/3AJAYF4hjniQFbr bMBGL+snjFVRfGe7QUBteD4xmOWlZQPfJ1n0+gsA/uulE6BTQcw1RWHmlaXIlPsK dnNrxrbkr+N0a1Xm8Uk5uEbdR69/pqbzkMBSTNzhLfNmX+4NBq91cyT9kl3H3NAw bXbvPhvkLVTkdaYYTtiIIb7VLq3jajvS2RoceY6o9UWkv3RVt6I368YaD9kpHe5N MEGsn5dQgcsI61VZSzKs5yXr+k8/njPOSmo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:36 2026 by rpki-client