$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa File: 0afbd1be-ede0-32aa-9917-796a386cf2ac.roa (raw, json) Hash identifier: +d2qqHi/lTeKLCLVpRCRICRw+LadHLoxbQKDhA0SKgk= Subject key identifier: 95:45:64:B6:B5:18:8D:D8:E9:FE:F2:06:FE:1A:A2:93:AD:36:AF:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF4DB8788EDCB0362E85C3DC2 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 2604:2d81:1c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:87:88:ed:cb:03:62:e8:5c:3d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=9e291e26-23fa-49ee-aaa8-284833c1fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:40:8a:c1:98:24:62:40:e5:a8:d4:e1:89: 07:73:7d:e0:e8:15:dc:92:54:15:c7:96:cb:9e:b1: 40:e4:cc:67:b8:c0:cf:a2:0d:3f:73:f6:24:0c:16: f1:48:b2:3e:59:7d:96:86:33:12:cd:81:3b:25:06: 95:28:e6:0f:d0:69:43:83:34:bc:ee:b7:b4:fe:cb: a5:5d:12:ba:dc:df:b7:a6:ab:20:0c:8b:9f:33:be: c0:4d:82:f2:e1:c4:b9:99:dc:be:2f:8b:fd:4d:3b: 73:62:9a:d0:9c:59:27:87:28:41:ec:38:aa:37:17: 7e:e1:11:5c:96:04:ad:16:1b:de:6b:b9:0d:a2:34: 24:77:31:b2:79:6f:3b:ea:0f:3f:e5:6e:6b:a5:b4: ca:f0:6c:51:90:f9:a1:60:0e:ce:f5:3e:92:41:91: 1c:1c:fa:71:30:40:cf:eb:52:7f:4f:08:64:bf:bd: f3:c9:3b:d4:bd:20:fd:c3:f6:a2:95:94:53:97:7b: e4:4d:76:47:e5:7b:5a:8c:85:82:15:3c:b2:50:8b: c0:aa:11:ff:29:3e:f5:80:39:f1:1a:8d:4a:fa:b0: 1d:ae:27:0f:2b:bc:85:ea:b3:40:55:ff:a0:85:a4: 5d:a3:23:2c:02:c0:ef:f1:41:25:94:a2:3f:8e:10: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:64:B6:B5:18:8D:D8:E9:FE:F2:06:FE:1A:A2:93:AD:36:AF:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0afbd1be-ede0-32aa-9917-796a386cf2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0d:0e:83:7b:30:05:ff:ad:7e:aa:0a:65:f2:05:70:3d:5d: 30:85:af:62:f0:4e:4b:49:17:59:1e:48:54:b8:86:92:eb:85: 1c:12:e1:75:80:5f:35:f0:77:58:41:71:98:99:88:99:fd:5f: 2f:d2:ce:c0:d7:0b:83:ca:06:5e:59:99:71:30:32:96:ad:bf: bf:ba:8b:90:a6:1e:d2:7a:c3:8a:6e:af:cd:33:c0:7e:be:e7: 4b:2c:a1:27:96:7e:b4:18:81:03:87:52:12:84:21:f9:d0:df: 7b:5c:6c:9f:8b:e3:0f:c8:a5:5f:3c:04:af:6c:12:ae:47:80: fb:3c:52:e9:0d:60:e9:00:6c:98:75:1a:c0:a1:fc:fd:fe:8f: a8:c8:af:7b:78:68:7e:16:3f:43:45:ba:a6:6c:55:47:18:3b: c4:b5:cd:8c:96:68:83:79:1d:94:1c:0c:88:17:79:97:9e:5d: 62:c9:22:61:bf:a5:69:f4:17:67:9d:84:f5:f7:03:ec:ae:2f: 41:31:7d:3f:23:3c:1c:7f:ed:54:e2:ec:5d:49:29:b1:d5:2b: a5:fb:ac:eb:9a:93:4a:af:43:69:a8:c9:25:47:28:13:51:45: 1f:53:22:1a:4f:b0:5c:70:b0:8d:a4:99:e1:29:90:fb:97:ae: ab:8b:d6:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3024eI7csDYuhcPcIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OWUyOTFlMjYtMjNmYS00OWVlLWFhYTgtMjg0ODMzYzFmYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprpAisGYJGJA5ajU4YkHc33g6BXcklQVx5bL nrFA5MxnuMDPog0/c/YkDBbxSLI+WX2WhjMSzYE7JQaVKOYP0GlDgzS87re0/sul XRK63N+3pqsgDIufM77ATYLy4cS5mdy+L4v9TTtzYprQnFknhyhB7DiqNxd+4RFc lgStFhvea7kNojQkdzGyeW876g8/5W5rpbTK8GxRkPmhYA7O9T6SQZEcHPpxMEDP 61J/Twhkv73zyTvUvSD9w/ailZRTl3vkTXZH5XtajIWCFTyyUIvAqhH/KT71gDnx Go1K+rAdricPK7yF6rNAVf+ghaRdoyMsAsDv8UEllKI/jhBmLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVFZLa1GI3Y6f7yBv4aopOtNq94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFmYmQxYmUtZWRlMC0z MmFhLTk5MTctNzk2YTM4NmNmMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMNDoN7MAX/rX6qCmXyBXA9XTCFr2LwTktJF1keSFS4hpLrhRwS 4XWAXzXwd1hBcZiZiJn9Xy/SzsDXC4PKBl5ZmXEwMpatv7+6i5CmHtJ6w4pur80z wH6+50ssoSeWfrQYgQOHUhKEIfnQ33tcbJ+L4w/IpV88BK9sEq5HgPs8UukNYOkA bJh1GsCh/P3+j6jIr3t4aH4WP0NFuqZsVUcYO8S1zYyWaIN5HZQcDIgXeZeeXWLJ ImG/pWn0F2edhPX3A+yuL0ExfT8jPBx/7VTi7F1JKbHVK6X7rOuak0qvQ2moySVH KBNRRR9TIhpPsFxwsI2kmeEpkPuXrquL1mM= -----END CERTIFICATE-----Generated at Sat Jun 13 19:28:23 2026 by rpki-client