$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: 6+kGch5Ha6cEowW9EMLc8ioqFg7v0OzDiCajthYQx3E= Subject key identifier: 0E:09:04:5E:E2:79:89:E1:99:D9:50:F3:B3:B7:B4:73:8D:54:D3:A6 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584D492A7D22222EB4753DC82300 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7d:22:22:2e:b4:75:3d:c8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=b1cc0ef2-6b6c-4f53-8958-0b270a068065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:25:e5:a7:eb:79:19:b2:18:48:f9:d4:71: 7b:99:b9:e1:90:2e:10:79:c5:09:9d:34:54:f5:9b: a1:8a:fc:f4:a7:a4:80:f1:66:5c:66:6d:2c:e1:55: 72:55:35:8a:90:8b:e1:93:df:5f:50:27:b9:80:ab: 93:a6:c0:29:37:fa:bb:37:c2:da:a2:04:1f:e9:a1: ca:04:bd:57:47:81:14:2a:fa:42:f5:84:57:2f:e8: fc:26:07:83:91:12:bd:0c:40:e9:e8:4a:41:14:8b: 36:f2:f8:83:3d:2d:8f:7d:53:d9:b4:93:c1:87:3c: bf:c3:d4:6e:d8:c4:66:96:06:25:3c:58:1c:09:9d: 66:54:d6:5e:96:f6:ac:45:e0:9b:12:3d:48:87:5b: 14:32:cc:01:02:40:98:09:6b:fd:1f:3f:c9:a5:d4: b8:5c:5c:bf:d7:e1:a4:b3:3f:38:e6:1b:b9:c6:c8: 58:0a:5b:9a:c4:8b:c2:41:1d:31:03:58:d1:6d:3c: 19:0f:e5:b0:19:1b:5a:b5:6b:f5:59:79:69:d3:38: 53:80:77:4a:a3:a1:4f:2c:b1:fc:da:75:4a:f7:f4: 35:ec:f1:29:61:f5:ee:57:92:d4:cf:fe:4e:09:5f: 73:f6:ad:3f:3d:6a:fb:80:ba:1c:35:9c:75:c5:ae: d7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:04:5E:E2:79:89:E1:99:D9:50:F3:B3:B7:B4:73:8D:54:D3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:91:bf:80:11:2d:12:1f:80:62:c0:e4:85:f3:04:48:98:a4: 94:e5:11:70:24:60:ea:42:d4:c6:75:e9:05:6e:2a:11:74:e3: 04:e5:fc:e2:af:3f:91:31:68:0e:e2:40:16:cb:bc:ec:aa:ba: 73:15:9c:0a:0e:8e:fc:d8:b5:72:af:2b:31:b0:9c:c6:69:af: 2e:4a:f8:c0:cc:4d:a4:ba:bb:84:54:15:9a:e3:9d:05:52:72: 73:8b:ec:fe:5f:9d:9c:7e:e6:bb:e3:11:a4:1f:45:24:d8:38: c9:ae:f0:bf:af:4a:f3:76:66:3d:27:91:eb:10:de:dd:dd:24: af:d0:e2:47:16:0c:d1:25:56:c2:3f:69:22:8f:41:5e:0c:4b: 7a:c6:fe:4a:b4:49:34:65:76:d2:83:43:60:0c:d7:aa:91:68: 87:3e:dd:eb:98:0c:93:43:c9:fa:88:88:39:db:32:3c:d9:d9: 16:f3:41:a3:7a:bb:53:19:49:41:05:9e:bd:5b:fd:58:0a:75: 3f:f6:d7:45:fe:a9:ba:dc:4b:63:08:6c:ac:a8:27:aa:82:59: cf:81:f0:f3:89:26:1f:be:02:e0:f5:64:e7:72:01:bc:a8:5a: c5:e2:a7:83:2f:1a:9b:a6:61:a4:60:74:fb:7d:36:9f:f9:b2: a8:6c:d3:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKn0iIi60dT3IIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjFjYzBlZjItNmI2Yy00ZjUzLTg5NTgtMGIyNzBhMDY4MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXEl5afreRmyGEj51HF7mbnhkC4QecUJnTRU 9Zuhivz0p6SA8WZcZm0s4VVyVTWKkIvhk99fUCe5gKuTpsApN/q7N8LaogQf6aHK BL1XR4EUKvpC9YRXL+j8JgeDkRK9DEDp6EpBFIs28viDPS2PfVPZtJPBhzy/w9Ru 2MRmlgYlPFgcCZ1mVNZelvasReCbEj1Ih1sUMswBAkCYCWv9Hz/JpdS4XFy/1+Gk sz845hu5xshYCluaxIvCQR0xA1jRbTwZD+WwGRtatWv1WXlp0zhTgHdKo6FPLLH8 2nVK9/Q17PEpYfXuV5LUz/5OCV9z9q0/PWr7gLocNZx1xa7XRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA4JBF7ieYnhmdlQ87O3tHONVNOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhkb+AES0SH4BiwOSF8wRImKSU5RFwJGDqQtTGdekFbioRdOME5fzi rz+RMWgO4kAWy7zsqrpzFZwKDo782LVyrysxsJzGaa8uSvjAzE2kuruEVBWa450F UnJzi+z+X52cfua74xGkH0Uk2DjJrvC/r0rzdmY9J5HrEN7d3SSv0OJHFgzRJVbC P2kij0FeDEt6xv5KtEk0ZXbSg0NgDNeqkWiHPt3rmAyTQ8n6iIg52zI82dkW80Gj ertTGUlBBZ69W/1YCnU/9tdF/qm63EtjCGysqCeqglnPgfDziSYfvgLg9WTncgG8 qFrF4qeDLxqbpmGkYHT7fTaf+bKobNMn -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:08 2026 by rpki-client