$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa File: 9566cf39-f779-3c2f-b70e-2e14de576061.roa (raw, json) Hash identifier: Nr0ud0QXt4LFwUaLNAqaf1ergEgmoru37S7NXhbUP28= Subject key identifier: 76:5D:E0:9D:4F:0F:2A:4E:D1:DF:E6:C3:2C:5B:B0:2D:6C:F6:61:1F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D40CB9E413892DF939B4B1800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:41:38:92:df:93:9b:4b:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d1a16ad7-7978-439e-b66b-320a7ca70c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:0c:0f:3b:ce:03:c2:73:0e:07:e2:6e:a4: a1:6f:51:59:ee:87:83:ec:9f:31:cc:95:2f:4a:bc: aa:20:73:7a:55:11:68:aa:d6:1b:ba:64:8d:f7:f6: 4f:57:26:22:bc:84:78:64:b7:bb:50:fb:ec:e1:98: 1c:74:a1:eb:da:c9:2f:8b:bf:8a:bf:35:bb:41:7f: 0d:e1:0c:c2:c0:64:b7:00:0d:85:4d:81:44:81:c9: bf:c4:0d:b2:cb:4e:8a:54:b8:e0:60:81:fc:d6:80: 2a:ba:ec:39:35:56:df:67:67:37:7c:94:cd:60:61: 80:b8:85:a4:1a:71:3d:71:24:6d:42:f9:69:1d:63: 94:7e:7e:6d:59:d0:a3:77:04:cc:76:a2:94:ce:4e: 8f:d5:75:c4:12:26:62:9c:96:b9:bf:99:45:82:25: 0c:f5:9a:6f:ab:91:2a:be:3d:44:1e:4a:bc:c9:19: c3:3f:24:01:df:cb:ab:44:70:94:29:10:81:ff:bc: 0b:9f:e6:33:77:ad:0f:26:9c:08:45:f3:42:4d:87: 5e:35:ac:45:f0:b5:a2:43:e5:e3:25:6f:3d:a7:29: a5:4f:ed:c4:0c:c2:2d:b7:52:04:7e:23:49:bf:f5: ff:b9:23:9b:eb:0f:8d:57:32:50:7c:da:36:69:36: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:E0:9D:4F:0F:2A:4E:D1:DF:E6:C3:2C:5B:B0:2D:6C:F6:61:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9d:68:19:22:99:84:cc:49:84:94:0d:53:75:bd:e7:ae:a6: 9b:78:e7:f5:31:25:48:3d:cc:e9:74:71:6c:da:79:a2:8d:be: 94:27:61:e3:88:f5:d8:4e:bd:12:ea:42:22:aa:fc:e0:a6:5c: 54:22:e0:ff:ac:0a:e7:3e:32:e7:b6:a1:3b:19:b1:19:38:29: 6f:96:e0:33:d0:db:91:a4:71:4d:87:0a:3a:51:ed:ac:17:9f: 46:64:81:17:a6:30:d4:10:f3:84:9a:06:19:4e:7e:75:e3:1e: 8b:1e:ec:37:c0:3c:c7:03:aa:d1:0c:fc:9c:4f:ca:25:ec:98: f9:94:d3:a1:c0:5b:98:fe:7e:f9:c8:0f:b6:77:06:e5:fd:b5: b1:99:ee:ec:51:3b:29:22:04:8d:c3:cc:76:5a:9d:a4:36:74: b0:42:37:b5:75:7c:d7:78:d9:5e:7b:62:e9:09:fd:30:f5:eb: ff:37:69:57:bb:56:66:ca:fd:15:76:71:22:ea:eb:fe:e7:d5: bc:b7:8b:d6:42:38:11:b3:db:6a:61:ec:10:fd:bb:95:a2:24: b4:2a:a1:b3:fe:f7:9a:d0:65:7d:cd:3a:a4:24:fa:2f:07:a0: a5:5d:c8:80:95:ee:c0:32:ad:60:d0:a4:e7:4f:7e:4e:dc:36: 4c:8f:7a:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Ay55BOJLfk5tLGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDFhMTZhZDctNzk3OC00MzllLWI2NmItMzIwYTdjYTcwYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iUMDzvOA8JzDgfibqShb1FZ7oeD7J8xzJUv SryqIHN6VRFoqtYbumSN9/ZPVyYivIR4ZLe7UPvs4ZgcdKHr2skvi7+KvzW7QX8N 4QzCwGS3AA2FTYFEgcm/xA2yy06KVLjgYIH81oAquuw5NVbfZ2c3fJTNYGGAuIWk GnE9cSRtQvlpHWOUfn5tWdCjdwTMdqKUzk6P1XXEEiZinJa5v5lFgiUM9Zpvq5Eq vj1EHkq8yRnDPyQB38urRHCUKRCB/7wLn+Yzd60PJpwIRfNCTYdeNaxF8LWiQ+Xj JW89pymlT+3EDMItt1IEfiNJv/X/uSOb6w+NVzJQfNo2aTYIgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHZd4J1PDypO0d/mwyxbsC1s9mEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU2NmNmMzktZjc3OS0z YzJmLWI3MGUtMmUxNGRlNTc2MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARJ1oGSKZhMxJhJQNU3W9566mm3jn9TElSD3M6XRxbNp5oo2+lCdh 44j12E69EupCIqr84KZcVCLg/6wK5z4y57ahOxmxGTgpb5bgM9DbkaRxTYcKOlHt rBefRmSBF6Yw1BDzhJoGGU5+deMeix7sN8A8xwOq0Qz8nE/KJeyY+ZTTocBbmP5+ +cgPtncG5f21sZnu7FE7KSIEjcPMdlqdpDZ0sEI3tXV813jZXnti6Qn9MPXr/zdp V7tWZsr9FXZxIurr/ufVvLeL1kI4EbPbamHsEP27laIktCqhs/73mtBlfc06pCT6 LwegpV3IgJXuwDKtYNCk509+Ttw2TI96ww== -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:12 2026 by rpki-client