$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa File: 682ff451-e7f8-34da-9f17-1b849a279e3a.roa (raw, json) Hash identifier: N22wIuuVt/lXjQFaxkYY1GKPGzVvXQ75jYScuXkI+xU= Subject key identifier: 8F:58:52:83:71:0F:1A:C1:7D:DF:5C:EC:41:60:8F:72:43:D7:3D:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D3F64D80CBBB520BF61C14F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d81:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d8:0c:bb:b5:20:bf:61:c1:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=39d63ba7-b9bb-4172-84e0-cd1a8f8b12ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:62:25:42:16:1a:df:8c:37:19:48:7a:30: 6a:c0:b3:5e:a4:0c:51:2d:c9:53:f1:1e:b0:99:ae: bf:6c:cc:69:42:6f:74:b4:e5:65:46:da:38:d1:39: 6b:fe:3b:5e:b2:b2:10:f1:ae:f7:fe:7e:36:3f:bf: ab:f0:40:b2:46:55:77:16:88:6a:3a:d3:c5:2a:03: c3:63:f9:3b:7f:db:ee:a5:a0:10:9c:44:f2:c8:58: 47:e9:03:66:84:b2:1f:42:76:9f:76:ea:7d:7f:12: 04:92:e0:9d:bb:ae:bf:a1:0d:72:0a:71:e5:75:8b: c2:ef:38:1a:3b:f6:b3:ec:09:eb:16:97:ad:d4:93: 31:16:c9:5e:ae:a6:18:d5:8e:9a:d8:9b:bf:de:3f: 63:0a:39:d9:6d:0d:97:b9:73:c4:fa:ac:61:02:92: c1:4b:fd:04:02:3f:6b:90:47:dd:db:3a:0c:59:6c: fa:f8:fc:06:fb:fe:de:cd:57:1f:e8:cb:12:24:ef: 77:64:eb:6f:67:1a:1b:85:0a:da:19:ca:1b:9d:cb: 2b:c6:d8:ee:27:c0:6b:d1:59:60:0b:5f:2a:7a:86: b4:72:ab:6a:e5:9a:26:b9:15:80:8d:f0:dd:be:f0: b6:db:a9:83:da:95:69:79:ef:27:6c:12:51:b0:6a: 90:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:52:83:71:0F:1A:C1:7D:DF:5C:EC:41:60:8F:72:43:D7:3D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/682ff451-e7f8-34da-9f17-1b849a279e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a0:18:7c:e6:8c:89:16:b8:2e:04:f3:f7:e3:1f:5f:38:71: e3:e8:f3:df:96:69:84:9c:e7:33:87:f3:d3:75:4e:c7:31:98: fd:72:34:b2:15:f8:4c:a9:89:58:bb:78:6f:6e:44:22:2f:8c: 16:c7:69:2f:a4:4d:44:79:19:5b:af:a7:03:42:28:8c:4e:b2: 56:4a:9b:09:04:75:b0:15:84:1c:91:61:76:3f:ab:eb:90:36: 78:bb:cf:ca:13:9d:78:7f:87:12:b0:f8:08:30:77:20:aa:91: c0:16:67:a7:d1:f8:39:d3:69:2c:66:98:11:64:49:f7:fc:af: 02:f4:f8:a4:a9:11:20:37:fb:f1:e2:cd:97:97:cd:38:dc:a4: f3:78:36:e9:93:f3:61:6a:79:33:2d:6c:87:b7:42:71:03:b6: 66:68:9e:72:7e:0d:12:5f:c7:c8:69:a4:9b:99:37:d3:53:79: 96:61:c8:e8:82:9a:65:47:4d:06:50:a0:ac:d9:d4:c5:8c:b7: be:d1:14:a0:a4:06:10:f6:7b:b7:84:77:41:23:2e:2b:db:85: 79:32:d4:23:b7:5b:6c:f9:e9:12:91:fc:dc:82:f3:2a:98:18: 2c:e1:01:0a:82:95:b7:10:ae:08:3d:e4:fa:ab:7b:1e:2d:77: 1e:c3:88:12 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZNgMu7Ugv2HBTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MzlkNjNiYTctYjliYi00MTcyLTg0ZTAtY2QxYThmOGIxMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNxiJUIWGt+MNxlIejBqwLNepAxRLclT8R6w ma6/bMxpQm90tOVlRto40Tlr/jtesrIQ8a73/n42P7+r8ECyRlV3FohqOtPFKgPD Y/k7f9vupaAQnETyyFhH6QNmhLIfQnafdup9fxIEkuCdu66/oQ1yCnHldYvC7zga O/az7AnrFpet1JMxFslerqYY1Y6a2Ju/3j9jCjnZbQ2XuXPE+qxhApLBS/0EAj9r kEfd2zoMWWz6+PwG+/7ezVcf6MsSJO93ZOtvZxobhQraGcobncsrxtjuJ8Br0Vlg C18qeoa0cqtq5ZomuRWAjfDdvvC226mD2pVpee8nbBJRsGqQVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI9YUoNxDxrBfd9c7EFgj3JD1z1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjgyZmY0NTEtZTdmOC0z NGRhLTlmMTctMWI4NDlhMjc5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgKAYfOaMiRa4LgTz9+MfXzhx4+jz35ZphJznM4fz03VOxzGY/XI0 shX4TKmJWLt4b25EIi+MFsdpL6RNRHkZW6+nA0IojE6yVkqbCQR1sBWEHJFhdj+r 65A2eLvPyhOdeH+HErD4CDB3IKqRwBZnp9H4OdNpLGaYEWRJ9/yvAvT4pKkRIDf7 8eLNl5fNONyk83g26ZPzYWp5My1sh7dCcQO2Zmiecn4NEl/HyGmkm5k301N5lmHI 6IKaZUdNBlCgrNnUxYy3vtEUoKQGEPZ7t4R3QSMuK9uFeTLUI7dbbPnpEpH83ILz KpgYLOEBCoKVtxCuCD3k+qt7Hi13HsOIEg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:18 2026 by rpki-client