$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa File: a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa (raw, json) Hash identifier: dsXkCOr1bMWTvxAMK74+vv3W0t4nRXA5WJZ1oc1tH+I= Subject key identifier: 17:47:C3:6A:17:4E:4F:9B:2A:EC:A0:CF:6B:56:ED:E4:52:D1:C0:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9A47A2C8710F7075CB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:2e00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9a:47:a2:c8:71:0f:70:75:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fb219f04-06a7-411b-b2b5-68a7b5523c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:8e:d5:eb:a9:0c:4a:bc:76:50:fe:d4:c3: 90:1f:e6:79:c5:04:45:41:be:ef:5e:db:47:f8:7a: 4c:9e:61:7b:cf:a4:4d:50:f5:c5:41:70:54:ac:d0: bf:d2:26:4d:15:1c:72:d3:9e:7e:3e:d0:c2:da:97: a2:76:87:a7:cd:0c:74:cb:4d:02:ca:fe:fc:9c:77: a8:33:34:03:74:47:00:eb:e8:12:91:de:86:86:ab: 9e:8f:2c:3c:58:33:ae:c2:0b:b4:7c:44:ef:a8:c3: 9e:7c:4d:ae:3b:a1:e8:f5:ae:35:02:69:4e:ac:d7: 70:3f:0e:79:23:a1:73:76:1d:c2:c4:11:0d:98:5f: a1:94:99:ee:49:e3:fa:3c:8c:f9:b5:d5:20:0a:66: c8:e9:d1:6f:0c:4c:71:d2:05:8b:3c:50:da:98:dd: de:f4:54:cf:4b:db:94:85:f5:0f:13:de:d1:70:2e: 51:14:6c:13:34:bb:89:2e:5a:91:c8:8e:6c:9b:f8: ad:08:83:48:e0:5a:3a:d9:9d:67:a5:cc:a3:8c:11: 6b:c2:94:b9:19:b9:52:e8:38:73:29:5d:a7:e2:c5: e6:a7:24:e6:b9:9d:83:51:5b:c9:27:dc:97:8f:1d: b4:60:4e:8a:98:0d:82:b8:a2:fc:66:a0:5d:5b:92: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:47:C3:6A:17:4E:4F:9B:2A:EC:A0:CF:6B:56:ED:E4:52:D1:C0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2e00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:dd:4d:1a:52:2c:86:67:01:19:a2:9f:08:40:ae:f1:2d:dd: c1:43:66:12:ba:26:25:6f:32:74:8a:2e:34:d7:54:dd:c5:d8: 87:70:42:80:65:01:0d:fc:e4:50:82:22:1e:41:8f:c7:9f:69: 2d:e0:31:1e:01:56:83:89:b1:dd:b5:3c:1b:c2:e5:90:c3:9b: ee:aa:45:c6:1e:41:8a:d3:41:71:a1:29:31:9e:29:90:61:41: 51:73:aa:1e:96:b7:75:b4:90:a1:b0:fd:ff:8a:69:18:76:e7: 9b:c4:75:87:af:a1:34:0c:00:7a:ca:8e:da:25:ab:b2:4d:a0: ea:c6:d5:8c:dd:08:cf:3c:61:d7:66:da:bb:e6:a8:9a:1d:26: a4:de:5e:09:40:93:b9:29:12:67:48:2e:c3:49:e4:53:cf:d2: 62:54:4b:cd:a3:dc:df:86:30:c3:69:a3:be:95:1d:60:d6:0e: 03:1d:f8:c5:6c:91:ff:6c:93:fd:95:5f:1b:36:ec:c6:ac:0f: f7:59:f8:9a:c0:1f:74:2d:06:86:b7:6a:83:57:6a:42:a6:86: 06:5c:99:0a:62:69:de:bb:6c:7b:bd:b2:a8:89:97:01:b1:a4: 26:5a:2f:05:36:8b:30:da:99:0b:53:2e:32:e7:a9:d6:df:44: 1d:4a:94:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35pHoshxD3B1y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmIyMTlmMDQtMDZhNy00MTFiLWIyYjUtNjhhN2I1NTIzYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC+O1eupDEq8dlD+1MOQH+Z5xQRFQb7vXttH +HpMnmF7z6RNUPXFQXBUrNC/0iZNFRxy055+PtDC2peidoenzQx0y00Cyv78nHeo MzQDdEcA6+gSkd6Ghquejyw8WDOuwgu0fETvqMOefE2uO6Ho9a41AmlOrNdwPw55 I6Fzdh3CxBENmF+hlJnuSeP6PIz5tdUgCmbI6dFvDExx0gWLPFDamN3e9FTPS9uU hfUPE97RcC5RFGwTNLuJLlqRyI5sm/itCINI4Fo62Z1npcyjjBFrwpS5GblS6Dhz KV2n4sXmpyTmuZ2DUVvJJ9yXjx20YE6KmA2CuKL8ZqBdW5LSmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdHw2oXTk+bKuygz2tW7eRS0cBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE5YjU4NzEtMGI1ZC0z YWNmLWFjODktZjU0OTFjZGJiNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgC4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvdTRpSLIZnARminwhArvEt3cFDZhK6JiVvMnSKLjTXVN3F2Idw QoBlAQ385FCCIh5Bj8efaS3gMR4BVoOJsd21PBvC5ZDDm+6qRcYeQYrTQXGhKTGe KZBhQVFzqh6Wt3W0kKGw/f+KaRh255vEdYevoTQMAHrKjtolq7JNoOrG1YzdCM88 Yddm2rvmqJodJqTeXglAk7kpEmdILsNJ5FPP0mJUS82j3N+GMMNpo76VHWDWDgMd +MVskf9sk/2VXxs27MasD/dZ+JrAH3QtBoa3aoNXakKmhgZcmQpiad67bHu9sqiJ lwGxpCZaLwU2izDamQtTLjLnqdbfRB1KlLM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:05 2026 by rpki-client