$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa File: 20991295-a2e7-3567-810e-8370e1695ef0.roa (raw, json) Hash identifier: IOK7ZtHb9MymYVK5qGXpnS/42DPQVD0vR2xEekgCreE= Subject key identifier: 0F:80:54:05:DF:E0:CA:4E:5A:96:17:81:F9:85:2A:24:5C:8F:24:7E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647B48BCFD21BEDEF7A1580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 2604:2d80:7f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b4:8b:cf:d2:1b:ed:ef:7a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=344feef1-766f-40a2-84b2-b5169465614e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:33:b8:45:93:7b:ca:15:7b:69:71:da:81: 45:06:0f:93:ce:23:b0:6f:e3:19:2d:73:ed:d3:71: a3:b8:e7:1d:94:1c:d0:e1:8f:5f:e0:8c:d0:60:7a: 4a:b0:2a:af:af:aa:18:07:0b:37:5e:b4:84:ac:63: af:97:4b:d2:e7:6d:55:05:50:26:14:7d:30:da:31: be:44:e7:46:a4:1f:6a:18:55:0e:7e:61:36:10:10: a6:2a:31:1e:18:81:c3:23:a9:ef:4c:29:23:85:f1: f1:29:a9:a1:5a:fc:a8:92:16:ca:58:9a:cd:71:60: 8e:25:8d:eb:4b:2b:df:d6:e2:31:44:0e:c6:ba:52: 43:74:f9:f5:e8:4d:8f:d5:1c:33:b6:0d:fa:8c:ed: c3:08:b9:f3:bc:23:cd:fc:5a:71:26:2e:68:8c:91: 4b:82:01:9b:22:9a:c6:47:fb:51:55:a8:81:58:4a: ae:82:f6:50:80:ce:bf:0c:1b:58:29:93:71:3c:52: f4:16:fb:e4:dc:cc:4b:62:96:cf:8b:1e:34:04:b2: dd:30:4a:59:d8:a6:f1:fe:b8:a8:6d:ef:64:9c:96: b5:73:f6:63:87:f1:fd:75:28:9b:65:9c:7e:91:36: f8:26:94:25:bc:f5:1f:47:65:b0:a7:7f:41:a4:3f: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:80:54:05:DF:E0:CA:4E:5A:96:17:81:F9:85:2A:24:5C:8F:24:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e4:9d:c4:cb:a1:a7:4c:81:95:a2:d4:2d:24:d3:05:ee:ef: 07:ab:c5:93:10:09:80:96:dc:a1:bb:b8:d3:77:38:a1:2a:d2: b7:ae:f2:ae:28:32:3a:74:c8:84:db:3f:01:38:66:4b:90:3a: b2:4a:06:cf:5b:36:4a:76:7b:3c:a9:1b:96:3d:8b:e9:0e:e2: 55:9d:26:3f:6f:aa:15:56:d7:2e:19:4c:5a:30:4d:a2:c5:a0: 3f:22:cf:3c:0e:ad:84:5e:18:67:0d:38:7e:3d:da:a5:b9:79: b4:79:e6:46:ae:1b:9c:3a:98:d5:ed:93:63:5c:7a:aa:c7:24: 27:72:ca:7c:21:97:02:ae:28:32:82:cd:83:7d:13:ba:92:df: 90:e3:d5:5f:e0:07:6c:a7:a1:1a:81:5e:35:22:fa:ba:ea:03: cf:33:58:9a:bb:0c:5a:f1:76:c5:e3:19:d6:2e:e6:11:00:98: ea:c5:6f:87:f1:8b:ae:15:58:95:f3:ba:8f:83:83:c7:54:aa: da:9d:e7:56:dc:f8:e1:c1:c4:bc:91:f0:02:f1:ce:08:f5:d1: af:72:1d:61:11:69:6a:6b:53:eb:03:90:ab:0f:69:60:4a:27: 9a:67:82:39:47:e2:55:17:33:cc:fe:b0:ce:b6:8b:ea:d6:f3: 9b:51:34:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR7SLz9Ib7e96FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzQ0ZmVlZjEtNzY2Zi00MGEyLTg0YjItYjUxNjk0NjU2MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wzuEWTe8oVe2lx2oFFBg+TziOwb+MZLXPt 03GjuOcdlBzQ4Y9f4IzQYHpKsCqvr6oYBws3XrSErGOvl0vS521VBVAmFH0w2jG+ ROdGpB9qGFUOfmE2EBCmKjEeGIHDI6nvTCkjhfHxKamhWvyokhbKWJrNcWCOJY3r Syvf1uIxRA7GulJDdPn16E2P1Rwztg36jO3DCLnzvCPN/FpxJi5ojJFLggGbIprG R/tRVaiBWEqugvZQgM6/DBtYKZNxPFL0Fvvk3MxLYpbPix40BLLdMEpZ2Kbx/rio be9knJa1c/Zjh/H9dSibZZx+kTb4JpQlvPUfR2Wwp39BpD/YQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+AVAXf4MpOWpYXgfmFKiRcjyR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjA5OTEyOTUtYTJlNy0z NTY3LTgxMGUtODM3MGUxNjk1ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbkncTLoadMgZWi1C0k0wXu7werxZMQCYCW3KG7uNN3OKEq0reu 8q4oMjp0yITbPwE4ZkuQOrJKBs9bNkp2ezypG5Y9i+kO4lWdJj9vqhVW1y4ZTFow TaLFoD8izzwOrYReGGcNOH492qW5ebR55kauG5w6mNXtk2NceqrHJCdyynwhlwKu KDKCzYN9E7qS35Dj1V/gB2ynoRqBXjUi+rrqA88zWJq7DFrxdsXjGdYu5hEAmOrF b4fxi64VWJXzuo+Dg8dUqtqd51bc+OHBxLyR8ALxzgj10a9yHWERaWprU+sDkKsP aWBKJ5pngjlH4lUXM8z+sM62i+rW85tRNHA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:59 2026 by rpki-client