$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa File: 0030076b-667f-3ffd-a0a6-6634f482c04a.roa (raw, json) Hash identifier: 4vL8SCAjZGCRPd/DfCxeBtcwRK9WUWQhoHT3jFzO1H0= Subject key identifier: B7:F4:5D:48:20:77:15:96:45:E1:61:46:6A:08:DF:21:0D:80:D5:C9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1272F3DF03300835F0100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:27:2f:3d:f0:33:00:83:5f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=09532c22-179e-440f-849b-0ff35188df99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:32:0d:ad:5a:d1:f5:dd:fe:94:cf:06:f6: 97:8d:1d:b3:d2:6f:83:59:d2:46:f6:1a:b3:ab:5e: 63:a1:62:94:ae:80:0c:8d:e0:41:82:22:75:f7:49: 84:ca:31:a0:3e:16:5b:2a:02:79:b3:96:b7:f6:db: 87:a9:f1:5d:7d:ab:25:f7:41:ea:7c:b3:de:7c:31: a9:eb:b3:d4:40:2d:ed:50:10:cb:ed:71:32:df:cd: e5:78:0e:b9:03:b1:01:99:64:22:af:1d:dc:0e:90: 35:68:63:31:4e:bf:46:87:56:88:7b:19:04:58:b8: 9d:6f:9b:ca:c3:f7:87:8d:44:ce:5d:42:c9:68:7a: 23:31:e8:4f:aa:f6:23:41:f1:94:32:ed:2a:f7:8e: 9a:65:64:4e:5f:ca:68:9d:e1:12:8f:b3:9b:cf:3a: f5:c5:aa:48:3d:cf:74:17:39:91:50:7f:85:1f:1d: bf:89:07:1f:41:22:a5:12:f3:4d:81:d1:6b:dc:02: b5:a6:b6:86:76:01:0e:90:b6:0d:c1:b7:75:87:5e: 7e:ca:87:6d:ae:91:c5:cb:d8:e0:db:5e:29:0a:7d: 87:9e:01:38:3f:8c:a6:4e:35:01:ed:9c:b9:97:a6: 0c:8c:fa:d3:6b:b5:eb:e1:87:81:06:33:02:6a:9b: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:5D:48:20:77:15:96:45:E1:61:46:6A:08:DF:21:0D:80:D5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:20:3b:92:66:40:ac:7d:95:7e:af:49:1c:00:26:20:9f:8f: 58:9a:72:3f:fc:8f:19:c2:26:d4:33:48:9e:41:02:2f:4d:7b: 63:e1:ab:f0:38:22:5f:66:b2:5d:c2:b5:dd:71:25:49:99:3c: 5e:29:f1:63:64:be:7a:a8:1b:79:b2:89:23:f4:35:08:af:f7: a1:54:bb:7c:bc:f9:ad:ce:b0:30:cb:fa:52:85:cb:1c:a6:e1: 23:aa:8a:0a:1c:50:8e:56:d7:83:d8:b1:7f:36:26:65:60:cb: cb:6a:12:eb:8d:69:57:ed:5f:e4:d5:f8:23:ec:7b:dd:72:7d: 05:3c:39:28:e9:bc:97:a4:35:fd:94:0d:33:ff:cf:d4:bc:89: 5a:19:3b:44:e5:58:37:7c:af:cd:d4:75:13:9e:70:2a:a4:21: 4a:a6:c7:e7:b8:23:9a:3c:5f:0b:5c:d5:ce:62:49:f1:a3:08: f4:c1:1d:da:86:4a:66:85:cc:b4:c0:26:2f:b3:66:07:2f:fc: 09:b2:b0:a8:7d:cf:78:20:97:08:ab:e5:ab:a4:28:7a:df:c1: 22:7d:0c:26:4d:e0:bf:95:bb:d6:33:bd:21:1d:3e:b8:f7:b9: 99:f9:79:e6:ea:7c:b1:c3:e9:b7:52:1a:cb:db:81:cf:6c:74: 8e:6f:b9:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4ScvPfAzAINfAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDk1MzJjMjItMTc5ZS00NDBmLTg0OWItMGZmMzUxODhkZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7AyDa1a0fXd/pTPBvaXjR2z0m+DWdJG9hqz q15joWKUroAMjeBBgiJ190mEyjGgPhZbKgJ5s5a39tuHqfFdfasl90HqfLPefDGp 67PUQC3tUBDL7XEy383leA65A7EBmWQirx3cDpA1aGMxTr9Gh1aIexkEWLidb5vK w/eHjUTOXULJaHojMehPqvYjQfGUMu0q946aZWROX8poneESj7Obzzr1xapIPc90 FzmRUH+FHx2/iQcfQSKlEvNNgdFr3AK1praGdgEOkLYNwbd1h15+yodtrpHFy9jg 214pCn2HngE4P4ymTjUB7Zy5l6YMjPrTa7Xr4YeBBjMCapuobwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLf0XUggdxWWReFhRmoI3yENgNXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDAzMDA3NmItNjY3Zi0z ZmZkLWEwYTYtNjYzNGY0ODJjMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQgO5JmQKx9lX6vSRwAJiCfj1iacj/8jxnCJtQzSJ5BAi9Ne2Ph q/A4Il9msl3Ctd1xJUmZPF4p8WNkvnqoG3myiSP0NQiv96FUu3y8+a3OsDDL+lKF yxym4SOqigocUI5W14PYsX82JmVgy8tqEuuNaVftX+TV+CPse91yfQU8OSjpvJek Nf2UDTP/z9S8iVoZO0TlWDd8r83UdROecCqkIUqmx+e4I5o8Xwtc1c5iSfGjCPTB HdqGSmaFzLTAJi+zZgcv/AmysKh9z3gglwir5aukKHrfwSJ9DCZN4L+Vu9YzvSEd Prj3uZn5eebqfLHD6bdSGsvbgc9sdI5vuS8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:06 2026 by rpki-client