$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e63e5ab-8f9b-30d1-904e-095d62c65180.roa File: 1e63e5ab-8f9b-30d1-904e-095d62c65180.roa (raw, json) Hash identifier: 6av8Qi6eM2E1YZAvmYoidt5of41T33qXA4Liz/wTt+0= Subject key identifier: EA:99:EB:A5:9B:AA:4A:59:97:64:65:0E:C2:FF:29:49:56:B6:BE:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CFB7C0CA74C5146F478798180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e63e5ab-8f9b-30d1-904e-095d62c65180.roa Signing time: Wed 25 Feb 2026 17:12:29 +0000 ROA not before: Wed 25 Feb 2026 17:12:29 +0000 ROA not after: Tue 26 May 2026 16:12:29 +0000 asID: 30036 IP address blocks: 2604:2d81:1280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:7c:0c:a7:4c:51:46:f4:78:79:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 25 17:12:29 2026 GMT Not After : May 26 16:12:29 2026 GMT Subject: CN=f71da501-2ef3-4637-9561-20bd85293105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:84:54:b3:de:20:bf:2f:2a:df:37:f3:53: 6f:48:e2:c3:21:21:51:a4:40:6e:c3:ca:37:95:ad: 38:03:85:24:2d:0b:40:b4:18:27:ff:6a:78:23:e3: 80:83:de:a4:fd:c3:15:66:6d:fe:df:80:4a:af:29: 45:fa:42:61:5a:1b:bf:d6:b6:d3:1a:44:90:83:54: 89:65:ca:fa:35:65:3e:42:ef:2c:1c:2d:5c:ea:e4: 33:51:2c:99:9c:7f:9b:63:c1:86:2d:85:a4:74:f0: 97:11:73:e6:bc:bf:9e:f9:5c:3e:96:84:3c:17:95: b9:73:ce:6c:a8:8f:9f:6d:b7:50:58:9d:58:22:75: 22:98:c2:04:54:f8:f1:6c:7f:1e:a2:cc:6d:17:ac: 0f:0d:a5:43:8a:86:1e:ac:55:31:73:dd:bf:54:7b: 16:db:27:82:08:85:d3:2b:17:94:fe:3a:e3:62:1f: e6:9e:27:79:10:92:78:d0:6d:4d:16:19:80:fd:fd: dc:1e:e8:8e:35:b1:be:47:ca:4c:f9:4a:da:49:67: fb:6b:01:80:20:a4:ad:b0:70:9a:7d:fc:5b:d5:e0: 68:c7:fb:ce:84:dd:6b:e0:a0:48:d8:c4:df:27:57: 39:37:f1:4e:4c:a9:03:04:b7:23:31:f9:67:f3:68: aa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:99:EB:A5:9B:AA:4A:59:97:64:65:0E:C2:FF:29:49:56:B6:BE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e63e5ab-8f9b-30d1-904e-095d62c65180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2a:e9:6f:38:57:ce:c3:d9:67:6e:f0:34:f0:5c:e2:9e:a3: ed:f0:5f:ec:42:35:51:89:63:a2:91:49:3b:da:93:36:94:18: d0:fe:96:e9:83:5b:17:fa:12:69:48:b5:18:26:c0:08:30:b2: 04:5d:37:48:8b:01:36:ca:a7:6d:66:c6:e8:43:8f:f9:73:0c: dc:c3:5a:ad:c8:10:ab:6b:41:b9:8c:10:6e:d7:0d:56:32:ce: bc:d0:08:6c:85:4a:de:dd:fe:3b:98:70:5a:c5:dd:25:f4:34: 03:2e:46:b3:b5:50:f4:c2:25:61:14:c0:11:d9:bf:5c:02:0a: 40:73:52:f9:fb:bf:1c:a9:53:01:67:61:c1:63:1a:d5:08:d8: 1d:1e:17:c7:f9:d8:b8:a9:22:6e:c2:b2:c3:d0:b5:22:bc:9e: e2:c6:32:0c:9f:3a:60:e0:80:3b:10:d3:a3:c6:f9:4a:0f:75: 8d:df:83:fe:19:6d:7d:5c:9f:8b:fa:a0:02:25:fb:e9:11:5a: c0:cb:57:1f:8c:65:ee:0a:14:07:80:70:83:0d:ed:2e:0c:c9: 72:89:27:24:d3:f9:f0:75:d9:81:d5:1b:61:3d:48:9b:ca:11: 10:19:68:01:aa:39:cf:d1:14:de:7d:31:5d:36:a3:b9:dc:2b: 69:b7:7b:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz7fAynTFFG9Hh5gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyNTE3MTIyOVoXDTI2MDUyNjE2MTIyOVowLzEtMCsGA1UEAxMk ZjcxZGE1MDEtMmVmMy00NjM3LTk1NjEtMjBiZDg1MjkzMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKuEVLPeIL8vKt8381NvSOLDISFRpEBuw8o3 la04A4UkLQtAtBgn/2p4I+OAg96k/cMVZm3+34BKrylF+kJhWhu/1rbTGkSQg1SJ Zcr6NWU+Qu8sHC1c6uQzUSyZnH+bY8GGLYWkdPCXEXPmvL+e+Vw+loQ8F5W5c85s qI+fbbdQWJ1YInUimMIEVPjxbH8eosxtF6wPDaVDioYerFUxc92/VHsW2yeCCIXT KxeU/jrjYh/mnid5EJJ40G1NFhmA/f3cHuiONbG+R8pM+UraSWf7awGAIKStsHCa ffxb1eBox/vOhN1r4KBI2MTfJ1c5N/FOTKkDBLcjMfln82iq+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqZ66WbqkpZl2RlDsL/KUlWtr5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWU2M2U1YWItOGY5Yi0z MGQxLTkwNGUtMDk1ZDYyYzY1MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADEq6W84V87D2Wdu8DTwXOKeo+3wX+xCNVGJY6KRSTvakzaUGND+ lumDWxf6EmlItRgmwAgwsgRdN0iLATbKp21mxuhDj/lzDNzDWq3IEKtrQbmMEG7X DVYyzrzQCGyFSt7d/juYcFrF3SX0NAMuRrO1UPTCJWEUwBHZv1wCCkBzUvn7vxyp UwFnYcFjGtUI2B0eF8f52LipIm7CssPQtSK8nuLGMgyfOmDggDsQ06PG+UoPdY3f g/4ZbX1cn4v6oAIl++kRWsDLVx+MZe4KFAeAcIMN7S4MyXKJJyTT+fB12YHVG2E9 SJvKERAZaAGqOc/RFN59MV02o7ncK2m3e+k= -----END CERTIFICATE-----Generated at Sun Mar 1 23:05:26 2026 by rpki-client