$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa File: f119d8b1-eb62-39c1-aad3-ae21698b1295.roa (raw, json) Hash identifier: GChUG5hCprnxmr8x2wI4VHWvV7/QgkSvS8fiJxbjdyk= Subject key identifier: A7:E1:84:2A:DB:46:A3:B3:0A:35:93:19:AB:03:36:D9:A6:3E:11:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF627F08722BA066B21CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:f500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:62:7f:08:72:2b:a0:66:b2:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6b5b45f8-d490-4007-b3cb-fc6d0dec4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f5:81:44:86:19:be:f5:77:1c:21:de:72:12: 1f:d5:59:67:6e:35:81:6c:73:db:ad:02:a8:55:b2: e6:78:ea:f3:8a:15:8f:86:4a:00:be:a6:ae:4f:ec: dd:92:71:e6:f1:a3:fe:53:7c:3f:c7:22:62:9c:0d: 4a:b2:f6:54:04:ac:5c:71:d9:13:6e:c1:c0:4a:2e: c7:25:28:7f:1d:5f:05:84:de:8b:00:f0:19:ee:7f: ab:84:2b:de:9e:2f:af:75:fb:f7:39:55:8e:de:07: 89:c9:c3:60:27:7e:46:3b:a7:44:6e:e1:f8:e1:94: 46:3e:d8:60:9d:2b:ec:d6:ed:97:5f:df:76:df:96: c6:b2:49:cb:c1:bb:9e:f3:c7:d8:ba:81:12:19:ca: 21:ec:4c:98:4d:6a:97:81:c5:da:77:70:d3:b9:a5: f3:e8:8e:08:02:89:b5:f8:84:03:03:0b:9c:42:1b: 6b:e6:00:b3:2d:b8:e4:6f:50:bd:fc:9a:db:67:99: ee:e0:31:a4:c4:cc:32:23:4b:cc:db:8a:89:87:d3: a2:97:60:fb:c7:b9:a3:de:9c:85:2b:c9:05:b2:92: 19:97:f0:f0:34:89:ad:18:de:7c:45:07:07:46:48: e8:43:fa:b6:e8:f4:23:d0:f0:10:c7:1d:4e:f3:05: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:84:2A:DB:46:A3:B3:0A:35:93:19:AB:03:36:D9:A6:3E:11:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f119d8b1-eb62-39c1-aad3-ae21698b1295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:63:1c:e8:96:2a:1c:e4:a0:0e:98:3b:59:ed:f5:dd:f7:a1: df:2b:b5:bc:73:0b:e2:09:7a:4a:09:60:58:ea:48:22:05:58: 41:79:7f:37:55:3e:9a:da:40:64:37:af:bf:fd:6a:cd:2a:4f: 84:2b:4b:59:e4:54:c1:a1:a2:c6:af:60:3b:31:5b:4e:73:ee: b9:c8:f6:7e:49:40:6a:91:7a:55:cc:1d:99:c2:b4:4a:52:1f: 10:ee:07:35:6b:ba:5f:9b:c3:75:4f:0c:02:3d:2e:ab:ca:54: 86:bd:ff:8a:2e:e8:4d:39:7d:7b:93:e0:a0:64:ee:7d:72:cc: 23:b5:8b:bf:0c:f4:65:7e:04:e9:fe:d3:a5:e3:0f:e7:c9:cb: 15:0e:af:cb:54:32:a1:d9:0e:0b:2f:75:47:34:0e:98:f1:42: b1:cb:68:59:ba:89:fd:64:c1:5b:a1:c8:8c:02:d3:67:e5:89: 09:d5:f4:33:88:7b:6e:a6:3c:ca:9b:f8:94:5e:0c:a7:10:1e: e5:5c:5f:5a:07:7f:f8:2c:f6:a0:37:b8:88:d8:ad:75:21:af: 6d:47:ba:42:17:61:54:48:81:38:8a:e0:27:76:8f:88:03:39: fa:52:64:fc:07:87:cb:93:06:a6:ca:5b:b4:63:96:99:ca:49: fa:f8:33:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32J/CHIroGayHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmI1YjQ1ZjgtZDQ5MC00MDA3LWIzY2ItZmM2ZDBkZWM0MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfWBRIYZvvV3HCHechIf1VlnbjWBbHPbrQKo VbLmeOrzihWPhkoAvqauT+zdknHm8aP+U3w/xyJinA1KsvZUBKxccdkTbsHASi7H JSh/HV8FhN6LAPAZ7n+rhCveni+vdfv3OVWO3geJycNgJ35GO6dEbuH44ZRGPthg nSvs1u2XX99235bGsknLwbue88fYuoESGcoh7EyYTWqXgcXad3DTuaXz6I4IAom1 +IQDAwucQhtr5gCzLbjkb1C9/JrbZ5nu4DGkxMwyI0vM24qJh9Oil2D7x7mj3pyF K8kFspIZl/DwNImtGN58RQcHRkjoQ/q26PQj0PAQxx1O8wVUtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKfhhCrbRqOzCjWTGasDNtmmPhFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjExOWQ4YjEtZWI2Mi0z OWMxLWFhZDMtYWUyMTY5OGIxMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdjHOiWKhzkoA6YO1nt9d33od8rtbxzC+IJekoJYFjqSCIFWEF5 fzdVPpraQGQ3r7/9as0qT4QrS1nkVMGhosavYDsxW05z7rnI9n5JQGqRelXMHZnC tEpSHxDuBzVrul+bw3VPDAI9LqvKVIa9/4ou6E05fXuT4KBk7n1yzCO1i78M9GV+ BOn+06XjD+fJyxUOr8tUMqHZDgsvdUc0DpjxQrHLaFm6if1kwVuhyIwC02fliQnV 9DOIe26mPMqb+JReDKcQHuVcX1oHf/gs9qA3uIjYrXUhr21HukIXYVRIgTiK4Cd2 j4gDOfpSZPwHh8uTBqbKW7RjlpnKSfr4M28= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:56 2026 by rpki-client