$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa File: a9fed974-a199-3051-87f8-87f2db3f9c21.roa (raw, json) Hash identifier: LyfAeDvMKyUidCMvG/GcdgER/fB7ev+2ca7yMAuDQeE= Subject key identifier: 5C:1C:03:51:71:89:D0:04:2C:6C:BD:F8:71:07:ED:47:70:E9:4A:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D3B34EC0F8436158BFABC3E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d81:500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:ec:0f:84:36:15:8b:fa:bc:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=44f23482-8263-4f10-86ef-b1f48e1ff9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:e3:b8:d5:dc:8c:0c:54:dd:5c:c2:6d:a6: 24:d8:a8:19:2e:72:99:79:8d:50:aa:98:1f:99:68: d0:1b:1a:c6:18:18:52:9b:66:54:6c:95:0f:57:ec: 20:34:97:56:06:db:ec:1a:8d:9b:87:19:f7:69:7f: 3b:41:55:88:61:04:e5:1f:ab:64:60:3d:f5:c5:e7: 91:fa:82:98:5f:b1:a1:e8:7e:25:52:17:97:d4:73: a6:77:b1:06:53:ee:be:05:39:d6:63:f8:35:00:ad: a0:b1:0c:ed:63:cd:69:f4:42:78:8e:75:b7:48:0c: 6a:9c:c1:c0:c4:ba:34:e5:db:70:9e:0b:09:b8:6e: d5:b9:1d:f6:48:f9:69:62:7c:34:f4:e5:37:3e:3e: fb:fd:ff:9a:a7:02:92:6b:28:15:d4:33:d6:0c:78: 0b:55:b7:d6:5e:32:e1:4d:6b:b6:7a:b9:89:25:4b: 26:1d:3f:48:e0:01:29:e4:1f:ef:59:ce:b5:c4:74: b1:d5:3d:16:70:98:c1:52:50:3b:19:53:ca:ac:28: ac:80:ee:3e:7f:62:bd:df:25:5d:7f:71:9e:2f:e3: 4f:7c:37:5b:71:f7:23:9a:05:c2:ad:03:98:fe:e6: f7:0e:76:96:26:41:f4:29:bf:c5:d2:e0:81:a3:f5: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:03:51:71:89:D0:04:2C:6C:BD:F8:71:07:ED:47:70:E9:4A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9fed974-a199-3051-87f8-87f2db3f9c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9d:87:76:8b:0b:13:6b:f1:7c:74:5b:97:6e:4a:b6:65:e4: 22:7a:cd:4e:07:78:f3:d5:03:be:42:5f:43:a3:33:18:c8:2f: a0:73:3b:85:1a:02:c7:c0:3c:93:8e:55:a1:7f:0d:8a:0d:d9: 48:45:54:6b:09:6b:70:15:a7:0e:2e:fc:12:a9:4d:30:df:8a: a7:36:ae:43:9d:58:56:08:0e:2f:5e:58:48:03:6b:c8:65:91: 14:30:2f:e6:c8:5e:98:ac:b6:20:af:22:a5:4e:8e:57:56:83: a2:8c:c6:a7:0e:b0:56:b4:8f:f0:3b:cf:30:89:6e:4c:c8:0d: 00:1b:59:83:a8:16:35:8f:61:e1:83:66:e2:d0:3b:55:26:9f: e4:54:b0:24:9e:01:cf:4a:97:64:bd:ac:e2:e6:79:9a:9a:60: f5:a7:4b:a7:4c:f6:86:83:bd:19:25:d5:8a:05:b9:5d:49:dc: 1b:bf:cc:76:a3:a3:70:6a:a5:13:a5:ec:75:e8:74:79:e1:f9: 92:0e:ad:50:7d:f0:d8:d1:71:0b:88:9c:64:d4:30:92:17:78: 30:88:cd:24:6a:c1:ad:3f:a6:3c:85:ee:29:3f:90:28:ee:c4: d0:68:9b:9f:cf:87:4a:16:0b:58:a6:b3:c6:79:72:97:84:c8: 0b:b9:5c:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07NOwPhDYVi/q8PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NDRmMjM0ODItODI2My00ZjEwLTg2ZWYtYjFmNDhlMWZmOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKfjuNXcjAxU3VzCbaYk2KgZLnKZeY1Qqpgf mWjQGxrGGBhSm2ZUbJUPV+wgNJdWBtvsGo2bhxn3aX87QVWIYQTlH6tkYD31xeeR +oKYX7Gh6H4lUheX1HOmd7EGU+6+BTnWY/g1AK2gsQztY81p9EJ4jnW3SAxqnMHA xLo05dtwngsJuG7VuR32SPlpYnw09OU3Pj77/f+apwKSaygV1DPWDHgLVbfWXjLh TWu2ermJJUsmHT9I4AEp5B/vWc61xHSx1T0WcJjBUlA7GVPKrCisgO4+f2K93yVd f3GeL+NPfDdbcfcjmgXCrQOY/ub3DnaWJkH0Kb/F0uCBo/Ve/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFwcA1FxidAELGy9+HEH7Udw6UrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTlmZWQ5NzQtYTE5OS0z MDUxLTg3ZjgtODdmMmRiM2Y5YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmdh3aLCxNr8Xx0W5duSrZl5CJ6zU4HePPVA75CX0OjMxjIL6Bz O4UaAsfAPJOOVaF/DYoN2UhFVGsJa3AVpw4u/BKpTTDfiqc2rkOdWFYIDi9eWEgD a8hlkRQwL+bIXpistiCvIqVOjldWg6KMxqcOsFa0j/A7zzCJbkzIDQAbWYOoFjWP YeGDZuLQO1Umn+RUsCSeAc9Kl2S9rOLmeZqaYPWnS6dM9oaDvRkl1YoFuV1J3Bu/ zHajo3BqpROl7HXodHnh+ZIOrVB98NjRcQuInGTUMJIXeDCIzSRqwa0/pjyF7ik/ kCjuxNBom5/Ph0oWC1ims8Z5cpeEyAu5XGE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:22 2026 by rpki-client