$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cbfcce0-bdea-3539-956e-9ef7fe9f7c65.roa File: 0cbfcce0-bdea-3539-956e-9ef7fe9f7c65.roa (raw, json) Hash identifier: WYYgIz+Kim3HL+XYmDpX1pqb56MV9uuW6EDrN50ioP4= Subject key identifier: 04:6C:5A:20:58:4F:BA:80:DD:9B:D5:04:F8:0F:39:7F:26:EE:62:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CC07CD693D50AA7F79E163820 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cbfcce0-bdea-3539-956e-9ef7fe9f7c65.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2d80:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:d6:93:d5:0a:a7:f7:9e:16:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=ac7dd599-8eea-4cbf-90e1-0edc376126fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:7c:4b:60:aa:7d:88:af:ee:8a:5b:20:5a: 7f:ce:90:e2:e4:0c:88:fb:29:98:51:19:e7:8b:95: f9:0b:cf:5e:78:b0:95:23:b1:83:cf:46:c5:ba:48: 90:39:f6:89:ee:14:21:89:9b:27:39:35:03:6f:6f: 28:33:0c:cf:a3:ca:f1:18:d7:a7:bf:b1:e0:cd:76: 90:af:76:5b:64:73:24:2f:bc:67:50:24:42:94:af: 7a:8c:e0:3d:12:93:43:6e:88:a0:7e:8e:6f:f3:9c: e8:7e:91:17:71:94:16:12:e8:2d:62:61:82:db:c4: bc:72:fb:ce:8b:3a:8e:29:01:a4:e9:69:e0:1d:32: 0d:e9:fa:c1:d2:db:74:cc:ed:3e:40:fe:07:61:c3: ff:1d:8c:ed:ae:1f:06:cb:d5:64:06:40:97:68:92: 3c:b9:ab:f6:40:0d:91:3f:1d:5f:81:9c:cd:f4:bd: e8:49:0e:15:ae:6b:65:f6:de:ad:ad:a1:c8:57:db: 10:c9:75:80:1a:c6:be:96:d7:72:3f:8e:20:f5:8b: ae:bd:e8:ca:f2:2e:f6:45:5f:94:79:41:37:74:41: 52:35:3a:5e:dc:4a:5f:cf:16:9a:41:2b:69:0e:4c: 95:52:c8:af:81:e8:36:54:25:65:a2:e2:87:28:78: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:5A:20:58:4F:BA:80:DD:9B:D5:04:F8:0F:39:7F:26:EE:62:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0cbfcce0-bdea-3539-956e-9ef7fe9f7c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:82:a5:36:6b:61:40:5e:e8:b7:7e:42:0a:86:7d:a7:d9:4f: 8d:9f:fa:ca:3a:3d:27:a4:c9:15:f1:83:df:73:d7:c0:85:44: ca:c6:fc:2b:2a:81:3f:fe:89:b8:2f:de:df:20:0d:e3:b0:bb: 6b:9a:ec:9e:8c:26:3f:26:ad:41:1b:63:78:8c:7f:f5:35:97: e4:8d:50:a2:44:c3:13:74:0e:d3:95:22:41:37:2d:b0:ce:ab: ca:8e:48:99:c8:c4:37:c3:d4:d5:8d:3d:cd:f7:1d:3c:2f:24: d3:30:cd:56:40:d3:27:ff:42:f1:78:71:ce:9d:2a:2a:f1:4a: 53:76:c0:53:c0:04:cb:38:cd:36:2a:ef:c9:ae:3b:e6:07:00: 86:1f:21:2b:c7:04:3e:df:cc:bf:d8:d3:42:31:31:b2:cf:14: 7a:4d:a5:d6:53:bb:16:bd:ef:10:16:97:80:ad:9b:5b:a0:c6: 8a:8a:16:b6:ab:b0:db:ae:55:80:ad:49:9a:83:f0:90:92:3d: c8:ed:51:20:c1:e3:51:d4:e5:8f:9f:fa:00:bf:48:f4:8c:79: 3f:15:85:99:80:95:f4:96:bc:25:f8:6f:3d:18:42:10:12:31: 93:f0:59:9b:3f:c6:80:1b:d8:14:2c:f9:7f:9f:17:ad:f9:da: a5:27:b6:95 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzAfNaT1Qqn954WOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk YWM3ZGQ1OTktOGVlYS00Y2JmLTkwZTEtMGVkYzM3NjEyNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiB8S2CqfYiv7opbIFp/zpDi5AyI+ymYURnn i5X5C89eeLCVI7GDz0bFukiQOfaJ7hQhiZsnOTUDb28oMwzPo8rxGNenv7HgzXaQ r3ZbZHMkL7xnUCRClK96jOA9EpNDboigfo5v85zofpEXcZQWEugtYmGC28S8cvvO izqOKQGk6WngHTIN6frB0tt0zO0+QP4HYcP/HYztrh8Gy9VkBkCXaJI8uav2QA2R Px1fgZzN9L3oSQ4Vrmtl9t6traHIV9sQyXWAGsa+ltdyP44g9YuuvejK8i72RV+U eUE3dEFSNTpe3EpfzxaaQStpDkyVUsivgeg2VCVlouKHKHjz3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFARsWiBYT7qA3ZvVBPgPOX8m7mIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGNiZmNjZTAtYmRlYS0z NTM5LTk1NmUtOWVmN2ZlOWY3YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgEgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX4KlNmthQF7ot35CCoZ9p9lPjZ/6yjo9J6TJFfGD33PXwIVEysb8 KyqBP/6JuC/e3yAN47C7a5rsnowmPyatQRtjeIx/9TWX5I1QokTDE3QO05UiQTct sM6ryo5ImcjEN8PU1Y09zfcdPC8k0zDNVkDTJ/9C8Xhxzp0qKvFKU3bAU8AEyzjN Nirvya475gcAhh8hK8cEPt/Mv9jTQjExss8Uek2l1lO7Fr3vEBaXgK2bW6DGiooW tquw265VgK1JmoPwkJI9yO1RIMHjUdTlj5/6AL9I9Ix5PxWFmYCV9Ja8JfhvPRhC EBIxk/BZmz/GgBvYFCz5f58XrfnapSe2lQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:50:43 2026 by rpki-client