$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa File: c3612ddb-d94b-3760-b29f-8208b6011a68.roa (raw, json) Hash identifier: aFYx/qBaBFbqfsyHiUyt3HQ4aOfXRCwLxMz7yhfWXuk= Subject key identifier: B1:B6:78:54:5F:EC:AD:FB:24:D4:2F:F9:F5:00:C6:03:83:AB:4E:7D Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F4328584D67DFCAB3F16FB2B6F53ED240 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 17103 IP address blocks: 2620:1b::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ca:b3:f1:6f:b2:b6:f5:3e:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=94c5fb58-4016-4e7e-bcd6-9d50d23c7318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:da:43:b8:4e:d9:4d:e7:27:49:0e:9f:64: cc:e0:6b:d0:19:c9:c4:5f:fd:79:7e:9d:ce:2f:c4: 70:ea:85:af:fd:61:fe:85:c2:a9:df:e3:4d:91:38: e1:ca:df:c4:21:d2:cd:88:54:db:36:d1:bb:60:bf: 52:87:b9:62:6a:3a:ab:04:6c:80:6b:8c:60:f3:1b: 2d:cc:32:c6:90:7e:15:87:55:da:1c:fb:7a:e5:81: 69:6f:8b:27:45:95:b4:df:ca:bc:08:4f:bc:b9:9a: 07:fc:40:11:a5:8d:2f:10:ef:7c:49:27:96:39:95: e1:6c:88:7d:db:e6:e3:83:92:8b:a0:34:2b:6f:fe: d0:e7:25:b3:b5:e4:4f:05:a9:f0:cf:45:18:4d:21: d4:97:68:3e:d4:72:62:eb:6d:15:54:71:58:6e:c6: 5b:b3:04:61:bc:2a:c6:8a:f9:f9:c6:22:e4:be:97: 2b:3e:3f:67:14:7d:c9:b0:79:9a:ab:7c:99:87:ae: 23:5a:9e:05:57:b6:6c:55:e5:e0:ef:0c:bc:45:55: 89:09:cf:d4:a0:91:20:a7:ab:44:e5:27:6a:55:20: d3:67:9f:95:39:b2:8f:9d:58:9f:08:6d:76:70:d3: 11:69:28:c9:cf:4b:61:91:75:c9:15:df:08:c7:11: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:78:54:5F:EC:AD:FB:24:D4:2F:F9:F5:00:C6:03:83:AB:4E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv6: 2620:1b::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:24:3e:28:bd:b9:bd:c9:f1:11:68:21:f7:69:f2:96:af:af: de:50:45:c2:32:aa:63:e5:12:e7:f4:66:14:8d:8e:e3:fa:fd: 9f:77:6a:c5:f2:4c:ec:2f:ed:3f:53:16:34:dc:ae:7f:0f:b7: 1b:38:d8:d9:46:38:a9:d0:6c:4f:65:d1:94:b4:53:a1:b9:74: 70:86:86:41:07:44:07:cb:40:21:ea:b0:aa:4d:b0:b4:92:7a: 8c:20:5c:bb:e1:55:bb:c9:29:e5:6f:6a:93:5d:1b:9f:5b:f3: 0d:b9:f6:91:10:1c:de:94:05:24:68:ea:ac:ae:7a:e6:a2:05: 1e:5e:95:4e:5a:b5:24:55:25:c8:af:92:9f:c3:e9:5f:10:ce: b2:e9:13:0c:96:24:3d:55:7e:80:2b:4e:5d:34:cd:6f:5a:c7: d3:cb:dc:40:a9:fd:71:fc:71:af:bb:83:df:13:0d:99:ef:05: 73:98:99:39:a9:ff:1a:a9:74:d8:d0:b4:66:26:d7:60:57:96: c2:cc:aa:fa:32:0e:96:c7:00:e0:03:e0:fa:b0:e5:e4:d2:2a: 1d:64:53:36:86:5e:90:7e:14:05:df:33:74:e4:32:25:90:b6: 95:6b:2e:1d:f8:db:ec:f3:ed:4d:fc:6d:ff:45:58:d8:46:6d: d2:e8:77:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n38qz8W+ytvU+0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OTRjNWZiNTgtNDAxNi00ZTdlLWJjZDYtOWQ1MGQyM2M3MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApivaQ7hO2U3nJ0kOn2TM4GvQGcnEX/15fp3O L8Rw6oWv/WH+hcKp3+NNkTjhyt/EIdLNiFTbNtG7YL9Sh7liajqrBGyAa4xg8xst zDLGkH4Vh1XaHPt65YFpb4snRZW038q8CE+8uZoH/EARpY0vEO98SSeWOZXhbIh9 2+bjg5KLoDQrb/7Q5yWzteRPBanwz0UYTSHUl2g+1HJi620VVHFYbsZbswRhvCrG ivn5xiLkvpcrPj9nFH3JsHmaq3yZh64jWp4FV7ZsVeXg7wy8RVWJCc/UoJEgp6tE 5SdqVSDTZ5+VObKPnVifCG12cNMRaSjJz0thkXXJFd8IxxGpkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLG2eFRf7K37JNQv+fUAxgODq059MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvYzM2MTJkZGItZDk0Yi0z NzYwLWIyOWYtODIwOGI2MDExYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAGwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAkPii9ub3J8RFoIfdp8pavr95QRcIyqmPlEuf0ZhSNjuP6/Z93 asXyTOwv7T9TFjTcrn8Ptxs42NlGOKnQbE9l0ZS0U6G5dHCGhkEHRAfLQCHqsKpN sLSSeowgXLvhVbvJKeVvapNdG59b8w259pEQHN6UBSRo6qyueuaiBR5elU5atSRV Jcivkp/D6V8QzrLpEwyWJD1VfoArTl00zW9ax9PL3ECp/XH8ca+7g98TDZnvBXOY mTmp/xqpdNjQtGYm12BXlsLMqvoyDpbHAOAD4Pqw5eTSKh1kUzaGXpB+FAXfM3Tk MiWQtpVrLh342+zz7U38bf9FWNhGbdLod3g= -----END CERTIFICATE-----Generated at Fri Apr 17 15:52:38 2026 by rpki-client