$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json) Hash identifier: Nq0Ti/niacyuzr7HDm4Jwr4VBch7p7iwsLQUpYObqJI= Subject key identifier: E6:C4:D1:D1:5F:0C:7A:AA:53:B9:97:31:C3:40:8B:49:77:0C:5D:9B Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Certificate serial: 010D0C9F4328584DAC457B75EA895D91A4492C80 Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 399494 IP address blocks: 2604:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7b:75:ea:89:5d:91:a4:49:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=29b7e74f-c175-4062-afdc-4f2e06d57537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:e8:88:fc:2d:ea:e8:b3:a5:67:85:9f:86: 47:e5:5e:cd:1c:4c:96:96:5f:b8:40:0e:33:8e:ff: e4:b0:5a:93:4a:5b:d2:2a:b5:db:f3:2b:b4:18:66: f6:90:2e:8c:8c:ad:33:06:79:9e:bd:2d:13:fe:8a: 83:8d:1a:f7:f2:6e:e6:4e:6d:19:a7:88:2e:40:68: e6:62:5f:2d:05:6f:14:4a:d0:d1:8a:b1:8f:50:be: 7a:0d:9c:df:4e:c3:76:5f:88:e8:90:2d:75:69:fb: 5d:f7:19:c6:70:30:1e:82:45:cc:b4:c0:26:bd:03: 99:82:95:33:22:1f:12:31:38:72:bf:fe:e8:7d:f0: 0d:76:16:8e:c3:92:9f:a5:dc:de:06:fe:3f:56:53: 2a:49:ba:7b:a3:18:e7:fa:98:74:e3:a2:c5:b5:ee: cc:a0:f9:72:07:f5:74:d9:00:08:2e:cc:fb:47:e3: 15:8d:87:c1:79:24:c3:2b:27:c3:93:77:92:34:4c: 39:44:89:fe:dc:80:76:29:7b:78:16:0f:78:61:3f: bf:a3:bd:7e:cd:f4:55:0f:11:f7:24:62:9b:b8:70: 42:22:e7:77:c8:90:13:41:4b:e4:43:8d:8d:0b:62: ed:c5:f6:b5:03:58:59:51:73:af:e1:42:9f:8e:6d: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C4:D1:D1:5F:0C:7A:AA:53:B9:97:31:C3:40:8B:49:77:0C:5D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl X509v3 Authority Key Identifier: keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer sbgp-ipAddrBlock: critical IPv6: 2604:3b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fa:ed:c2:b3:7f:e2:45:8c:b5:64:15:2c:0e:af:57:70:70: 19:49:8c:2d:3d:c5:86:64:b5:e5:9e:38:4c:42:85:c3:08:cf: 96:46:11:2a:7c:af:17:73:24:01:0a:7d:ac:26:d6:f3:b9:c1: ce:75:02:21:d7:b7:61:e5:03:08:07:88:3c:c7:4d:b9:87:ef: 18:e4:89:7e:ce:c0:d7:10:70:09:b6:c7:c4:56:38:7b:8e:ea: 15:df:b1:5f:d3:4f:1a:8e:a1:d1:40:24:f9:ca:31:3c:05:c2: 08:0f:df:cf:64:80:78:be:82:b5:de:2d:7d:78:76:31:f1:23: 61:59:0a:98:a3:07:66:37:55:e3:dd:5a:29:1c:e4:12:b6:a0: ff:60:1b:cb:79:27:5f:35:e6:0d:06:d3:08:52:76:ac:6d:d5: c1:ad:1e:e8:6d:b7:1c:02:e3:7b:33:cb:c7:65:fd:ca:2b:27: 1f:06:99:45:13:a4:e3:51:21:ee:e1:07:06:09:db:97:92:76: 36:b3:86:ee:da:51:eb:8c:b7:0b:d8:66:a8:9d:75:f5:90:b6: e6:9c:d2:49:63:71:79:d8:b3:6c:a2:52:66:5b:cb:e4:eb:bb: 47:66:84:0d:94:7f:fa:6f:3e:54:0e:58:c2:67:c3:62:b5:46: 0d:6e:15:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRXt16oldkaRJLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYjM4OTctZmQxNC00OGVlLWFkODQtODEyYzQwOGNm NDZlMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MjliN2U3NGYtYzE3NS00MDYyLWFmZGMtNGYyZTA2ZDU3NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3oiPwt6uizpWeFn4ZH5V7NHEyWll+4QA4z jv/ksFqTSlvSKrXb8yu0GGb2kC6MjK0zBnmevS0T/oqDjRr38m7mTm0Zp4guQGjm Yl8tBW8UStDRirGPUL56DZzfTsN2X4jokC11aftd9xnGcDAegkXMtMAmvQOZgpUz Ih8SMThyv/7offANdhaOw5KfpdzeBv4/VlMqSbp7oxjn+ph046LFte7MoPlyB/V0 2QAILsz7R+MVjYfBeSTDKyfDk3eSNEw5RIn+3IB2KXt4Fg94YT+/o71+zfRVDxH3 JGKbuHBCIud3yJATQUvkQ42NC2Ltxfa1A1hZUXOv4UKfjm0DNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFObE0dFfDHqqU7mXMcNAi0l3DF2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Zi Mzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJjNDA4Y2Y0NmUvNDEwYjc0NjctOGRjMS0z NDNkLWJlNjItNmVjYTU5NTQxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNmYjM4OTctZmQxNC00OGVlLWFk ODQtODEyYzQwOGNmNDZlL2MzZmIzODk3LWZkMTQtNDhlZS1hZDg0LTgxMmM0MDhj ZjQ2ZS5jcmwwHwYDVR0jBBgwFoAUgZwK5yjcYjVE9BCFuNcSWRpX3fYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2ZiMzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJj NDA4Y2Y0NmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBe+u3Cs3/iRYy1ZBUsDq9XcHAZSYwtPcWGZLXlnjhMQoXDCM+WRhEq fK8XcyQBCn2sJtbzucHOdQIh17dh5QMIB4g8x025h+8Y5Il+zsDXEHAJtsfEVjh7 juoV37Ff008ajqHRQCT5yjE8BcIID9/PZIB4voK13i19eHYx8SNhWQqYowdmN1Xj 3VopHOQStqD/YBvLeSdfNeYNBtMIUnasbdXBrR7obbccAuN7M8vHZf3KKycfBplF E6TjUSHu4QcGCduXknY2s4bu2lHrjLcL2GaonXX1kLbmnNJJY3F52LNsolJmW8vk 67tHZoQNlH/6bz5UDljCZ8NitUYNbhVY -----END CERTIFICATE-----Generated at Wed May 13 16:00:49 2026 by rpki-client