$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa File: d0a0fc8b-92d9-3b76-b756-796441d174fa.roa (raw, json) Hash identifier: rXgomOiiYUTx7PBX47ZvoORJifrEEoGc95b+TU3l+iw= Subject key identifier: B6:B7:68:17:FA:4E:BB:3D:74:91:53:16:2D:2D:AE:7D:F5:A1:CA:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D40CB9DAD39AB3C34AEA0A280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2d81:600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9d:ad:39:ab:3c:34:ae:a0:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=40970034-a22b-4b8e-a149-e1f254b53caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:f7:1b:c0:13:b6:b9:2f:91:7e:a8:2b:06: 62:ec:4d:7c:13:f6:ed:79:96:ad:0c:c0:84:0b:59: 45:a0:35:4f:03:e5:a0:3f:fc:b6:cc:19:cf:6b:8f: 45:e5:a1:a3:90:a9:8d:c9:47:4c:d9:7f:ba:69:d4: ba:ed:85:59:72:70:15:86:37:33:4b:10:5b:1a:a7: 46:ad:fb:71:c2:18:8f:e9:04:f1:55:ef:21:88:f8: af:0b:30:81:cd:23:42:a0:38:6a:0d:d0:9a:f1:a3: 0d:82:4c:b3:04:e6:20:ac:ed:01:bb:cc:d1:25:79: c0:a2:55:2c:2b:d7:f3:d8:73:b3:57:6b:66:ff:c3: ff:b2:cc:a6:8e:97:18:0e:16:64:cd:7f:68:4b:5f: 42:64:42:e5:ee:74:36:1a:d9:e4:aa:f1:50:d5:44: ba:b3:c9:70:b0:15:2b:5d:77:84:30:91:b4:12:5a: a0:e8:22:8a:dd:88:59:19:d2:87:66:16:45:be:e6: c8:c1:87:38:10:4d:00:0d:5c:85:09:9a:f9:cb:bb: fe:f4:dd:c3:77:e9:0d:d4:d9:4f:d9:75:94:40:05: 4d:03:c4:4a:4d:80:18:e3:c1:ce:55:8b:2e:93:c1: 60:f0:a1:f4:06:df:1b:9f:ce:e8:ca:8d:a5:93:b5: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B7:68:17:FA:4E:BB:3D:74:91:53:16:2D:2D:AE:7D:F5:A1:CA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a0fc8b-92d9-3b76-b756-796441d174fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9c:93:cf:dd:16:83:0b:ed:72:75:e5:59:9b:9a:ce:11:09: 6b:00:0c:17:99:ee:9a:d4:e9:80:fe:2e:04:e1:e4:c8:fd:62: 75:de:cf:db:fb:b3:02:4f:b5:38:7e:c6:3f:4b:55:e0:1b:3d: cd:cf:b0:1f:59:23:91:27:e2:f6:3d:b5:ae:a4:5a:92:92:7f: 74:0c:96:f3:75:b8:0e:f3:30:50:0a:d1:54:81:a5:a1:6a:61: ea:77:27:14:85:02:8b:3f:36:b3:14:62:70:10:1a:23:eb:a9: d2:0d:13:04:fa:6f:4a:a2:05:d1:15:72:8c:27:be:96:51:22: aa:52:fe:8b:ce:ac:16:bb:4a:da:ce:36:24:8c:1a:e6:16:76: ca:62:7c:cf:51:96:50:ed:26:ac:7d:c4:bb:c0:fc:65:80:0a: 2d:db:d3:dd:f4:a1:15:a6:b5:ba:80:10:8d:c8:e1:93:95:80: 4c:b1:45:45:80:17:5a:54:56:18:e1:ad:44:ba:a0:d0:a1:9b: 57:da:11:5c:d4:fe:4f:03:76:85:47:b9:df:bd:7b:fb:2c:b8: e4:4e:d9:d2:c2:a0:4b:84:38:93:c5:d2:9e:84:e8:54:83:58: e2:42:48:d5:7f:3d:4f:b6:9f:e9:b4:18:36:09:3c:c1:df:fa: 8d:da:14:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Ay52tOas8NK6gooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDA5NzAwMzQtYTIyYi00YjhlLWExNDktZTFmMjU0YjUzY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix73G8ATtrkvkX6oKwZi7E18E/bteZatDMCE C1lFoDVPA+WgP/y2zBnPa49F5aGjkKmNyUdM2X+6adS67YVZcnAVhjczSxBbGqdG rftxwhiP6QTxVe8hiPivCzCBzSNCoDhqDdCa8aMNgkyzBOYgrO0Bu8zRJXnAolUs K9fz2HOzV2tm/8P/ssymjpcYDhZkzX9oS19CZELl7nQ2GtnkqvFQ1US6s8lwsBUr XXeEMJG0Elqg6CKK3YhZGdKHZhZFvubIwYc4EE0ADVyFCZr5y7v+9N3Dd+kN1NlP 2XWUQAVNA8RKTYAY48HOVYsuk8Fg8KH0Bt8bn87oyo2lk7Vb4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLa3aBf6Trs9dJFTFi0trn31ocrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhMGZjOGItOTJkOS0z Yjc2LWI3NTYtNzk2NDQxZDE3NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2ck8/dFoML7XJ15Vmbms4RCWsADBeZ7prU6YD+LgTh5Mj9YnXe z9v7swJPtTh+xj9LVeAbPc3PsB9ZI5En4vY9ta6kWpKSf3QMlvN1uA7zMFAK0VSB paFqYep3JxSFAos/NrMUYnAQGiPrqdINEwT6b0qiBdEVcownvpZRIqpS/ovOrBa7 StrONiSMGuYWdspifM9RllDtJqx9xLvA/GWACi3b0930oRWmtbqAEI3I4ZOVgEyx RUWAF1pUVhjhrUS6oNChm1faEVzU/k8DdoVHud+9e/ssuORO2dLCoEuEOJPF0p6E 6FSDWOJCSNV/PU+2n+m0GDYJPMHf+o3aFBY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:12 2026 by rpki-client