$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/900e83e8-c970-3832-aeb9-02c6c41341e6.roa File: 900e83e8-c970-3832-aeb9-02c6c41341e6.roa (raw, json) Hash identifier: VFvHlrYq0BJL6h/gXWFrEW9TjRlbuti2zoRDsP5yPGE= Subject key identifier: 2A:DA:D2:A8:AA:5D:FB:DF:00:38:61:50:B4:EA:9A:FE:8D:67:5E:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D25BD1814F2AC390465AEE100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/900e83e8-c970-3832-aeb9-02c6c41341e6.roa Signing time: Thu 12 Mar 2026 20:27:29 +0000 ROA not before: Thu 12 Mar 2026 20:27:29 +0000 ROA not after: Wed 10 Jun 2026 20:27:29 +0000 asID: 30036 IP address blocks: 2604:2d80:6680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:bd:18:14:f2:ac:39:04:65:ae:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 20:27:29 2026 GMT Not After : Jun 10 20:27:29 2026 GMT Subject: CN=f75073cd-7534-433d-8214-13a14afdbdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0c:d9:a5:67:98:7e:39:7c:95:d2:98:dc:3c: 9f:d3:c0:2b:93:74:f6:4c:cf:a0:b6:ce:ae:1f:4e: ae:d8:56:11:28:ac:82:a8:9c:45:ba:1c:6a:1d:0d: 2f:65:03:bd:46:e3:50:9a:3b:a1:1f:a9:eb:8a:8c: 51:99:aa:a5:37:c2:f0:67:b1:c3:ba:3d:b1:2e:2f: b7:9a:2f:c7:45:18:6e:53:7a:0d:58:ed:70:df:17: f2:7c:9a:da:58:17:eb:d5:82:01:96:26:e2:40:87: f4:e6:dd:12:1a:74:ce:96:36:49:89:ed:69:ac:93: 7c:1f:70:67:3a:cf:20:92:e6:41:6e:37:e1:53:7b: fd:ec:a0:db:45:67:3b:af:37:b4:0b:0a:55:89:b0: 28:e2:46:81:1f:de:11:7b:a0:ea:93:0c:c1:bf:eb: 48:8b:c4:cf:07:2c:2d:73:bc:64:f7:4d:84:c4:f5: 0c:02:98:fc:44:69:72:18:04:33:fe:e1:73:95:62: e4:93:67:68:19:27:42:96:61:1f:ad:7e:09:37:60: fb:97:2a:1e:3f:93:7f:2b:f9:bb:a2:26:86:9f:a8: 86:07:f3:06:1a:55:79:79:0a:c8:6d:f4:bd:ce:34: 06:69:47:50:05:e2:38:21:3e:b8:5d:e7:41:17:8e: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:D2:A8:AA:5D:FB:DF:00:38:61:50:B4:EA:9A:FE:8D:67:5E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/900e83e8-c970-3832-aeb9-02c6c41341e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:12:6f:17:dc:05:e7:b2:28:04:e1:1d:e9:c2:81:ef:a0:20: d5:6f:b9:d7:50:51:ea:d5:fa:c3:db:77:48:80:cb:81:7d:f5: 14:1d:4e:58:fd:c8:c3:5f:03:d7:6b:76:1b:0b:89:d5:dd:eb: 63:09:5f:b2:e9:af:60:10:6e:96:6d:b6:14:d4:5c:21:e7:be: f0:30:f9:f1:df:1b:f4:c8:d1:58:30:0c:db:29:56:83:cd:7e: 11:b3:d6:a2:2a:b4:71:34:ed:4c:25:f2:67:76:6e:2f:56:a0: 24:64:dc:6e:68:33:25:4d:82:8f:7a:32:89:04:02:54:c8:59: 63:10:36:cb:6a:53:b7:06:35:42:15:2f:43:40:50:06:f6:db: 82:9d:21:51:3d:c0:87:91:80:66:da:5e:9d:24:0a:62:6b:ab: 4e:8a:2a:15:ee:cc:c2:6f:ed:d0:9a:56:6f:38:99:b1:ca:b4: 37:4b:9f:54:65:66:6a:55:fd:e4:4f:a3:cd:4d:2d:35:02:b1: ed:84:c8:5c:3b:d7:38:f9:a9:05:92:38:96:a5:2e:35:5c:d4: c3:13:d9:70:0f:bc:38:72:1a:7a:5a:38:ba:52:40:4d:43:00: f2:5f:ac:19:28:3f:87:16:d0:5b:07:ff:9d:45:be:92:a5:d5: 91:35:de:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lvRgU8qw5BGWu4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjIwMjcyOVoXDTI2MDYxMDIwMjcyOVowLzEtMCsGA1UEAxMk Zjc1MDczY2QtNzUzNC00MzNkLTgyMTQtMTNhMTRhZmRiZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQzZpWeYfjl8ldKY3Dyf08Ark3T2TM+gts6u H06u2FYRKKyCqJxFuhxqHQ0vZQO9RuNQmjuhH6nrioxRmaqlN8LwZ7HDuj2xLi+3 mi/HRRhuU3oNWO1w3xfyfJraWBfr1YIBlibiQIf05t0SGnTOljZJie1prJN8H3Bn Os8gkuZBbjfhU3v97KDbRWc7rze0CwpVibAo4kaBH94Re6DqkwzBv+tIi8TPBywt c7xk902ExPUMApj8RGlyGAQz/uFzlWLkk2doGSdClmEfrX4JN2D7lyoeP5N/K/m7 oiaGn6iGB/MGGlV5eQrIbfS9zjQGaUdQBeI4IT64XedBF45vKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCra0qiqXfvfADhhULTqmv6NZ14tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTAwZTgzZTgtYzk3MC0z ODMyLWFlYjktMDJjNmM0MTM0MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEoSbxfcBeeyKAThHenCge+gINVvuddQUerV+sPbd0iAy4F99RQd Tlj9yMNfA9drdhsLidXd62MJX7Lpr2AQbpZtthTUXCHnvvAw+fHfG/TI0VgwDNsp VoPNfhGz1qIqtHE07Uwl8md2bi9WoCRk3G5oMyVNgo96MokEAlTIWWMQNstqU7cG NUIVL0NAUAb224KdIVE9wIeRgGbaXp0kCmJrq06KKhXuzMJv7dCaVm84mbHKtDdL n1RlZmpV/eRPo81NLTUCse2EyFw71zj5qQWSOJalLjVc1MMT2XAPvDhyGnpaOLpS QE1DAPJfrBkoP4cW0FsH/51FvpKl1ZE13v0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:56 2026 by rpki-client