$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/1bfc1202-1954-31a9-ab20-3b015b9c9541.roa File: 1bfc1202-1954-31a9-ab20-3b015b9c9541.roa (raw, json) Hash identifier: dhVB3AEWrVelh72tGR0+ZI/BpiO8/U69sgghry4B8c0= Subject key identifier: D9:10:2C:FB:1B:EA:90:C0:9D:67:43:11:9A:9E:74:F5:D5:51:DA:B4 Certificate issuer: /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Certificate serial: 010D0C9F4328584D19B4DA4BC2FAC8DC75B0AE00 Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/1bfc1202-1954-31a9-ab20-3b015b9c9541.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11260 IP address blocks: 24.207.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:da:4b:c2:fa:c8:dc:75:b0:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=79fcba96-a84d-48fc-bf1f-fb6d363964b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:60:27:b9:11:62:e0:df:a0:0a:8d:d7:1c: a1:c4:57:36:07:1a:3f:0b:9d:bf:49:70:ca:83:7e: e2:b8:73:e7:89:d6:b8:45:1e:c5:a2:b6:68:70:65: c6:ab:35:2c:32:4a:f1:8b:67:be:d5:aa:ae:58:66: f5:12:0a:95:1a:fc:aa:7d:32:29:10:33:65:4b:a0: 4c:4b:54:11:e7:e6:7f:a7:31:d9:f3:b9:e8:58:90: d7:66:37:19:be:06:05:90:9b:89:6a:31:3a:73:bd: 76:cd:f6:3d:9b:bc:7b:f6:92:0e:7a:cf:8f:0e:4c: ab:fe:25:e9:3b:72:6d:4c:d7:ed:e2:a1:d7:78:00: 0a:c0:cc:32:ed:5c:d2:d9:11:0e:1a:6d:e3:67:cf: 1a:1f:16:a2:ce:8b:f4:71:7a:8e:f4:5c:bd:c9:1c: 3b:d8:7d:a1:11:2c:c5:0f:09:cd:c1:d4:2c:04:91: 7f:0b:f6:5b:77:7a:b4:ba:1f:81:a3:ab:c8:29:fe: 08:d0:6c:fe:07:bb:d1:ae:50:37:5e:39:0e:54:41: 60:bf:b2:d0:c5:52:d9:4c:20:2c:13:58:61:21:3d: c3:83:b2:07:7f:27:aa:d4:5e:ce:f7:c1:c2:3e:4e: 3d:49:c6:3b:a7:9c:7e:7f:8f:74:98:9b:e1:da:3a: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:10:2C:FB:1B:EA:90:C0:9D:67:43:11:9A:9E:74:F5:D5:51:DA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/1bfc1202-1954-31a9-ab20-3b015b9c9541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl X509v3 Authority Key Identifier: keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer sbgp-ipAddrBlock: critical IPv4: 24.207.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:75:65:74:7b:05:e0:6e:71:79:a0:f4:a4:07:92:22:fd:f7: 62:26:dd:86:b8:74:94:5a:f3:44:65:b6:05:f1:95:a0:90:fd: e0:34:b7:44:2d:40:9c:bc:e9:af:98:4d:aa:a8:89:2c:81:cc: 3f:11:09:bd:65:f8:d8:cf:11:8c:50:0b:c4:b9:c7:d0:7f:a2: 66:5f:56:77:fa:7e:24:0f:69:06:b3:b8:be:1f:cc:5e:46:6f: ef:0d:97:62:30:ee:e6:06:70:02:37:c9:cf:3e:03:c8:b7:ca: 29:a3:1c:c1:e5:d8:3a:2d:15:9d:11:0e:93:fe:4a:b8:f2:c7: 02:62:0e:f3:25:39:17:24:71:d5:28:95:d2:ed:90:fa:27:74: 00:35:e5:84:f6:2e:3f:32:de:b5:fb:ab:e3:9c:6d:e1:eb:56: 41:e6:74:d0:e1:b6:23:53:ce:54:88:fc:fb:44:7f:b0:b6:3c: b6:46:9f:63:3f:8b:dd:72:f7:98:11:f6:02:0e:6d:15:e1:29: a1:20:c2:c5:d3:e0:fc:97:d6:9d:1b:82:06:56:7e:59:8b:73: 9b:2e:92:99:08:ab:da:67:be:7d:de:95:5f:15:51:2e:b2:64: 57:ca:88:3c:5f:da:d9:84:9c:5f:e5:7c:fd:e5:43:6f:b5:e8: ad:6f:6a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNpLwvrI3HWwrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmZiMTg5NjgtN2FhNS00MWU1LTk2YjYtYzQ1YzI1YTU2 NmU4MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzlmY2JhOTYtYTg0ZC00OGZjLWJmMWYtZmI2ZDM2Mzk2NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQRgJ7kRYuDfoAqN1xyhxFc2Bxo/C52/SXDK g37iuHPnida4RR7ForZocGXGqzUsMkrxi2e+1aquWGb1EgqVGvyqfTIpEDNlS6BM S1QR5+Z/pzHZ87noWJDXZjcZvgYFkJuJajE6c712zfY9m7x79pIOes+PDkyr/iXp O3JtTNft4qHXeAAKwMwy7VzS2REOGm3jZ88aHxaizov0cXqO9Fy9yRw72H2hESzF DwnNwdQsBJF/C/Zbd3q0uh+Bo6vIKf4I0Gz+B7vRrlA3XjkOVEFgv7LQxVLZTCAs E1hhIT3Dg7IHfyeq1F7O98HCPk49ScY7p5x+f490mJvh2jo1xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkQLPsb6pDAnWdDEZqedPXVUdq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIx ODk2OC03YWE1LTQxZTUtOTZiNi1jNDVjMjVhNTY2ZTgvMWJmYzEyMDItMTk1NC0z MWE5LWFiMjAtM2IwMTViOWM5NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZiMTg5NjgtN2FhNS00MWU1LTk2 YjYtYzQ1YzI1YTU2NmU4LzZmYjE4OTY4LTdhYTUtNDFlNS05NmI2LWM0NWMyNWE1 NjZlOC5jcmwwHwYDVR0jBBgwFoAUxp+s6nB94FGrxRuCOU0OczqioQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmIxODk2OC03YWE1LTQxZTUtOTZiNi1jNDVj MjVhNTY2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGM8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN1ZXR7BeBucXmg9KQHkiL992Im3Ya4dJRa80RltgXxlaCQ/eA0t0Qt QJy86a+YTaqoiSyBzD8RCb1l+NjPEYxQC8S5x9B/omZfVnf6fiQPaQazuL4fzF5G b+8Nl2Iw7uYGcAI3yc8+A8i3yimjHMHl2DotFZ0RDpP+SrjyxwJiDvMlORckcdUo ldLtkPondAA15YT2Lj8y3rX7q+OcbeHrVkHmdNDhtiNTzlSI/PtEf7C2PLZGn2M/ i91y95gR9gIObRXhKaEgwsXT4PyX1p0bggZWflmLc5sukpkIq9pnvn3elV8VUS6y ZFfKiDxf2tmEnF/lfP3lQ2+16K1valo= -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:06 2026 by rpki-client