$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa File: cd44eacc-c882-382e-aad6-db91ce3e7552.roa (raw, json) Hash identifier: NxFQMlJm9xxZN+jom+NF5C+whEaQuDwLbEIJFTzrtSw= Subject key identifier: 46:72:F0:09:32:2D:2E:2D:34:A4:C8:2A:7F:C8:2E:59:D2:C4:E9:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF6A9AB9D6C3F95B9DE530 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:7d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6a:9a:b9:d6:c3:f9:5b:9d:e5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d43fae24-460b-40a7-ad9d-f06c7cd594e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:2a:e8:e9:76:dc:d8:98:a9:0b:08:98:10: de:9b:fd:fd:a1:61:93:d8:d8:83:23:30:3e:d2:77: 45:cb:80:06:df:bb:5e:04:93:40:d0:73:2c:0d:71: 16:0c:ff:9c:f4:d7:62:f9:b4:17:9d:94:7d:e7:8e: 84:8c:bd:be:db:b4:c4:82:65:b2:4e:5d:92:c9:37: eb:dc:0c:96:04:e8:db:4f:6e:67:81:2d:f3:32:5a: 33:70:25:bb:93:82:61:f5:18:60:0d:e1:fb:bd:d9: b0:75:9f:f2:46:77:da:18:ed:34:19:9b:c9:ce:14: 7d:44:32:60:c2:91:df:48:09:03:1f:bf:9a:60:be: 77:68:eb:19:90:2c:5e:e3:55:9b:66:f9:25:50:13: d5:20:3a:b0:b7:71:12:3b:d6:23:19:6d:b0:43:ed: 2f:8a:79:78:28:c3:2e:f5:e2:76:71:29:99:d7:0c: d1:d7:21:ca:a4:c3:53:3b:65:82:1a:47:fa:5a:c2: 5c:4e:af:67:01:55:23:df:d7:1a:5b:7e:5c:1d:3c: 6a:77:b4:6e:ef:d9:db:90:9b:ca:9b:25:17:84:53: c6:14:41:5a:21:a4:81:10:96:a4:de:83:b5:4d:93: 7a:ab:4f:27:97:79:7e:c5:23:0c:f6:4d:0e:fc:c1: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:F0:09:32:2D:2E:2D:34:A4:C8:2A:7F:C8:2E:59:D2:C4:E9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d4:c7:df:01:6a:38:6e:9f:d6:91:12:8e:9f:29:dd:7c:42: 51:dc:ce:db:66:9b:0e:57:88:94:d1:10:16:bf:2b:aa:21:01: ca:b2:60:35:41:8b:4b:61:c1:5b:52:83:ce:16:ce:74:b5:db: 1f:de:95:64:17:d5:8a:f7:bd:9b:71:d9:f8:3b:73:f9:7c:d8: 2a:46:06:71:b0:85:86:2a:82:a7:48:87:c7:3f:bf:5e:ad:d9: 71:c1:fb:a8:af:23:dc:58:71:b0:6a:65:53:93:1e:9a:c7:02: 38:86:d3:fc:e5:8e:e6:21:89:88:6c:0e:a4:31:c5:32:9f:c3: 10:f5:9c:f8:5d:ed:7b:a1:df:af:6d:c8:6b:90:9a:0f:9e:8c: 39:e8:97:dd:3b:e9:02:e2:fa:b3:76:22:5c:26:95:04:f1:71: a0:6a:80:23:df:38:5e:94:9f:5e:67:d6:c8:d1:ee:78:a0:e9: 42:41:22:9d:d9:3d:d0:85:c7:00:f0:aa:83:6f:90:8a:41:7a: 3c:5c:f3:24:a5:17:d7:7b:39:0b:c2:20:8a:bf:ba:41:d9:83: 84:e8:9d:a9:06:d1:61:12:f9:97:40:20:98:0a:df:dd:22:9c: af:ad:79:6d:d1:b7:b4:e8:46:f9:0b:c9:2c:e2:d8:60:9c:99: 48:11:94:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32qaudbD+Vud5TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDQzZmFlMjQtNDYwYi00MGE3LWFkOWQtZjA2YzdjZDU5NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KUq6Ol23NiYqQsImBDem/39oWGT2NiDIzA+ 0ndFy4AG37teBJNA0HMsDXEWDP+c9Ndi+bQXnZR9546EjL2+27TEgmWyTl2SyTfr 3AyWBOjbT25ngS3zMlozcCW7k4Jh9RhgDeH7vdmwdZ/yRnfaGO00GZvJzhR9RDJg wpHfSAkDH7+aYL53aOsZkCxe41WbZvklUBPVIDqwt3ESO9YjGW2wQ+0vinl4KMMu 9eJ2cSmZ1wzR1yHKpMNTO2WCGkf6WsJcTq9nAVUj39caW35cHTxqd7Ru79nbkJvK myUXhFPGFEFaIaSBEJak3oO1TZN6q08nl3l+xSMM9k0O/MGSqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZy8AkyLS4tNKTIKn/ILlnSxOlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Q0NGVhY2MtYzg4Mi0z ODJlLWFhZDYtZGI5MWNlM2U3NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXUx98Bajhun9aREo6fKd18QlHczttmmw5XiJTREBa/K6ohAcqy YDVBi0thwVtSg84WznS12x/elWQX1Yr3vZtx2fg7c/l82CpGBnGwhYYqgqdIh8c/ v16t2XHB+6ivI9xYcbBqZVOTHprHAjiG0/zljuYhiYhsDqQxxTKfwxD1nPhd7Xuh 369tyGuQmg+ejDnol9076QLi+rN2IlwmlQTxcaBqgCPfOF6Un15n1sjR7nig6UJB Ip3ZPdCFxwDwqoNvkIpBejxc8ySlF9d7OQvCIIq/ukHZg4TonakG0WES+ZdAIJgK 390inK+teW3Rt7ToRvkLySzi2GCcmUgRlOA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:40 2026 by rpki-client