$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa File: bda7199a-3f2e-35df-847e-f0a5ec44448e.roa (raw, json) Hash identifier: OtqzOoe+ZnMTGqdljlaDnj7EiYPckhXnX/RE759wcV8= Subject key identifier: 48:C5:C4:2D:DA:90:DF:2F:A2:76:75:24:3A:F1:52:66:29:8D:CD:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF99765C96942D46F08600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:2200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:99:76:5c:96:94:2d:46:f0:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0bbc9470-4e1d-4800-b51c-c910ae26d1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:fa:bd:59:99:25:67:de:38:62:09:7c:ee: 46:09:7c:9a:5b:7e:ca:fd:94:44:1b:99:0c:75:c3: 15:c6:0a:c0:48:68:06:42:83:d0:a5:29:6b:89:b8: 0e:46:6e:de:c8:54:44:92:ea:6e:3d:fc:d9:d2:e1: d4:ba:30:ad:aa:49:64:82:ea:70:3f:1e:9d:e5:66: 2c:ce:cf:a4:6d:27:f4:7f:50:a5:ea:04:74:b5:b0: 12:64:73:07:2e:8c:10:7b:a5:c2:8f:db:c0:75:04: 74:14:38:90:95:9f:f3:4e:c8:11:1b:c7:7a:3d:27: 5c:07:4f:80:b6:14:c5:0d:b6:17:48:86:a3:ba:b6: 7c:84:82:0e:7d:42:66:8d:43:11:e5:94:cf:8d:5e: 1b:cd:a8:e7:1e:a2:9c:02:72:95:04:67:36:68:48: bc:24:45:d6:f3:a0:ac:e2:7e:4a:08:43:09:ef:72: bf:a0:70:fa:77:a7:dd:d2:b8:19:b7:d7:30:27:36: de:c2:a9:69:52:16:d6:26:8c:b8:4f:0e:4e:e3:5c: 40:e5:23:8f:31:14:d2:3f:6b:93:6b:a7:92:43:8f: 33:c0:c2:37:5e:01:01:cf:fb:80:62:83:e0:89:82: b2:b1:3a:4c:69:4f:9d:55:53:dd:9b:e1:ea:d6:9a: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:C4:2D:DA:90:DF:2F:A2:76:75:24:3A:F1:52:66:29:8D:CD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bda7199a-3f2e-35df-847e-f0a5ec44448e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:de:74:b9:f6:1c:c8:c5:4d:22:b9:cc:0f:74:0b:b3:14:a6: 49:ea:fe:81:28:af:71:2e:8f:47:06:f8:41:b4:a6:1c:4e:1b: b3:1e:6b:15:f0:1c:bc:63:c9:ac:96:04:c2:d1:53:5c:92:d9: 3c:9e:b3:2a:8f:cd:1e:e4:a0:27:23:ca:27:57:cc:9e:1e:d6: 88:f6:2e:25:ae:21:b6:da:ef:e0:bc:ae:26:bc:41:b1:1d:da: ec:d0:79:9a:ca:df:77:1e:8e:87:24:c1:b7:98:3c:d1:69:80: df:77:61:fa:5e:c4:2b:7b:90:3d:c7:48:98:50:15:49:1b:b9: 7d:b2:52:2e:9e:9f:0f:06:d2:51:9e:12:81:ac:d2:1c:d0:24: 93:40:97:29:54:35:f0:a8:87:60:78:d3:6e:30:7b:c3:0a:a6: 92:f0:d5:cc:25:fd:f6:aa:2c:e8:61:e7:81:01:20:63:63:10: 6e:e3:ae:0c:7c:91:19:0c:c5:7a:3c:7c:12:49:ee:1c:3f:54: c1:b2:2b:a0:ed:73:0f:06:d9:cc:95:60:16:56:3b:13:1c:3b: d1:7d:ee:5d:1b:0c:ec:33:1c:d2:1b:90:07:12:51:7e:4c:0f: 28:60:46:46:6a:2a:31:82:bc:f1:ed:13:f1:5e:dc:70:41:84: 90:c7:0e:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35l2XJaULUbwhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGJiYzk0NzAtNGUxZC00ODAwLWI1MWMtYzkxMGFlMjZkMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyj6vVmZJWfeOGIJfO5GCXyaW37K/ZREG5kM dcMVxgrASGgGQoPQpSlribgORm7eyFREkupuPfzZ0uHUujCtqklkgupwPx6d5WYs zs+kbSf0f1Cl6gR0tbASZHMHLowQe6XCj9vAdQR0FDiQlZ/zTsgRG8d6PSdcB0+A thTFDbYXSIajurZ8hIIOfUJmjUMR5ZTPjV4bzajnHqKcAnKVBGc2aEi8JEXW86Cs 4n5KCEMJ73K/oHD6d6fd0rgZt9cwJzbewqlpUhbWJoy4Tw5O41xA5SOPMRTSP2uT a6eSQ48zwMI3XgEBz/uAYoPgiYKysTpMaU+dVVPdm+Hq1pqBJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEjFxC3akN8vonZ1JDrxUmYpjc1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhNzE5OWEtM2YyZS0z NWRmLTg0N2UtZjBhNWVjNDQ0NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbedLn2HMjFTSK5zA90C7MUpknq/oEor3Euj0cG+EG0phxOG7Me axXwHLxjyayWBMLRU1yS2TyesyqPzR7koCcjyidXzJ4e1oj2LiWuIbba7+C8ria8 QbEd2uzQeZrK33cejockwbeYPNFpgN93YfpexCt7kD3HSJhQFUkbuX2yUi6enw8G 0lGeEoGs0hzQJJNAlylUNfCoh2B4024we8MKppLw1cwl/faqLOhh54EBIGNjEG7j rgx8kRkMxXo8fBJJ7hw/VMGyK6Dtcw8G2cyVYBZWOxMcO9F97l0bDOwzHNIbkAcS UX5MDyhgRkZqKjGCvPHtE/Fe3HBBhJDHDkE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:30 2026 by rpki-client