$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa File: caa19d09-9dea-3935-a123-6522e01dd1d3.roa (raw, json) Hash identifier: GeDBU0EDsYx6svW9+y8HfcgOy51cKvDKpeqVKfYge/g= Subject key identifier: E0:9A:D0:C0:F3:99:E4:4D:5E:52:5F:59:02:50:18:1D:66:88:AD:5B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC540EEC9BDF18AD4B6E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:9880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c5:40:ee:c9:bd:f1:8a:d4:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d5e390b3-f671-4da8-9bb0-1223c774965b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:53:da:38:56:80:cb:27:71:6d:59:9b:72: df:0f:44:8a:45:d2:72:45:4b:97:0c:f1:68:9a:05: e2:11:d2:75:d9:2c:3f:b9:1d:95:8c:9d:fc:c6:40: e2:73:cb:2b:18:a4:0e:ce:7d:b3:39:b3:a7:9f:4a: 2e:d0:91:9a:e7:5d:f3:42:76:cb:75:53:2c:d7:4c: 82:e2:03:d1:41:00:87:4f:27:a0:29:17:1a:8d:2f: ab:bd:c4:e7:38:96:5e:24:d4:df:2d:d9:e7:04:50: c4:71:0a:7b:00:c7:d0:91:3c:2f:c6:6c:41:65:c9: 4d:e1:77:b1:84:d5:e5:be:aa:17:09:a7:eb:eb:fc: 0f:92:6b:65:ba:70:ec:ae:e6:3e:31:8b:e3:6d:95: 83:ce:d0:27:96:0c:5f:5c:b2:0b:71:26:2f:a0:8a: be:78:04:c9:15:f4:f0:fd:22:7d:2f:a0:06:0c:0a: ce:e5:0f:19:05:85:b7:bc:88:e2:01:f2:00:17:ad: ac:32:93:48:99:c4:8c:e8:67:1c:85:47:f7:f0:2e: 83:3f:1c:11:42:80:2c:b3:32:2f:fb:19:3a:87:d2: 90:26:47:a3:a6:e6:f9:a9:a9:bd:c4:71:9c:83:de: 81:54:43:e7:90:80:0a:62:44:d9:77:1c:f8:16:2d: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:D0:C0:F3:99:E4:4D:5E:52:5F:59:02:50:18:1D:66:88:AD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/caa19d09-9dea-3935-a123-6522e01dd1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d8:a1:12:5e:f9:f2:ea:5b:6f:73:c4:b1:88:ff:76:aa:18: e3:67:92:c7:de:e7:7e:59:af:e9:58:c8:1e:12:77:4d:2a:75: df:d4:92:ba:9c:f2:10:74:67:37:93:af:c0:8e:55:75:c8:0f: de:43:64:0b:f7:c3:49:63:54:c6:c5:72:53:f9:29:98:ef:a9: 60:9f:32:8a:a0:43:26:8f:b3:92:14:32:d1:dc:7e:41:76:0a: cd:18:27:63:e1:a8:71:11:76:ab:43:2f:99:19:27:15:ba:41: 33:d8:36:c7:64:19:ad:e9:4d:b8:4d:c7:55:c7:5e:2c:8f:2d: 12:6f:d9:1a:f1:69:be:e3:7f:6e:ed:c7:97:6d:51:cd:3a:0e: ac:6e:23:40:ec:16:77:bc:5d:95:e1:59:eb:ce:8b:51:b3:20: 7e:ce:26:ec:8b:90:2d:c1:38:74:0f:5e:00:12:cb:2c:b6:39: 4a:3a:9f:ff:7e:5a:7e:a2:40:4f:47:1d:77:ad:c5:92:b0:25: e1:3e:d1:34:20:52:13:d2:3b:fd:e3:fe:60:4c:54:57:5e:b8: 9a:72:a4:56:c6:e0:af:98:52:12:cd:cc:5b:30:e8:d2:4b:5a: 9d:63:9b:bc:f8:70:52:a5:10:d7:2f:3f:30:d5:52:7d:a5:fa: e3:eb:4f:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0nqsVA7sm98YrUtuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDVlMzkwYjMtZjY3MS00ZGE4LTliYjAtMTIyM2M3NzQ5NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnypT2jhWgMsncW1Zm3LfD0SKRdJyRUuXDPFo mgXiEdJ12Sw/uR2VjJ38xkDic8srGKQOzn2zObOnn0ou0JGa513zQnbLdVMs10yC 4gPRQQCHTyegKRcajS+rvcTnOJZeJNTfLdnnBFDEcQp7AMfQkTwvxmxBZclN4Xex hNXlvqoXCafr6/wPkmtlunDsruY+MYvjbZWDztAnlgxfXLILcSYvoIq+eATJFfTw /SJ9L6AGDArO5Q8ZBYW3vIjiAfIAF62sMpNImcSM6GcchUf38C6DPxwRQoAsszIv +xk6h9KQJkejpub5qam9xHGcg96BVEPnkIAKYkTZdxz4Fi0EFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCa0MDzmeRNXlJfWQJQGB1miK1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2FhMTlkMDktOWRlYS0z OTM1LWExMjMtNjUyMmUwMWRkMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLYoRJe+fLqW29zxLGI/3aqGONnksfe535Zr+lYyB4Sd00qdd/U krqc8hB0ZzeTr8COVXXID95DZAv3w0ljVMbFclP5KZjvqWCfMoqgQyaPs5IUMtHc fkF2Cs0YJ2PhqHERdqtDL5kZJxW6QTPYNsdkGa3pTbhNx1XHXiyPLRJv2Rrxab7j f27tx5dtUc06DqxuI0DsFne8XZXhWevOi1GzIH7OJuyLkC3BOHQPXgASyyy2OUo6 n/9+Wn6iQE9HHXetxZKwJeE+0TQgUhPSO/3j/mBMVFdeuJpypFbG4K+YUhLNzFsw 6NJLWp1jm7z4cFKlENcvPzDVUn2l+uPrT04= -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:57 2026 by rpki-client