$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa File: 24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa (raw, json) Hash identifier: 923bFC0LvvDV0XPwejX4d3seECzLFpBjN4l1ku2dPQs= Subject key identifier: 42:0D:27:29:E0:79:52:D7:53:B6:F2:7B:E4:4F:33:3C:A9:F7:11:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D5E1A585897C6BF69C8226E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 19905 IP address blocks: 2604:2d81:980::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:58:58:97:c6:bf:69:c8:22:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9c0b92b2-a733-4510-9738-1a7e3da0f5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:c5:1e:ca:17:5b:cc:2f:98:49:e4:9f:f0: 56:bf:0a:d9:2b:fc:f3:31:64:54:c6:d4:11:4f:fa: b7:b1:7f:27:15:b0:c8:84:95:83:06:4a:0f:f5:7a: 80:ad:e9:ca:e1:9a:27:27:41:2b:15:24:8e:92:0d: 3e:c2:fd:8b:31:de:e5:88:4e:d1:e7:c1:7d:34:02: d2:c9:82:63:bf:34:0e:fb:50:62:33:e9:f4:9a:c1: e4:fd:64:0a:52:5c:b1:45:9f:55:b5:60:bc:fc:f4: 2a:0f:92:25:f3:00:7a:29:cc:29:a6:cc:82:fa:b3: 56:6c:d7:97:8a:ff:1a:d3:43:1d:44:56:2f:9b:bf: 83:fd:24:fd:b4:a2:cb:7e:b6:df:d3:d4:26:5d:f3: 6a:27:10:20:1a:56:8a:77:f2:f6:f0:d4:3e:22:44: aa:0a:e8:6f:47:eb:bc:d5:ac:d9:35:7b:ef:58:a0: 29:78:de:be:2b:00:01:f8:00:ad:3b:5b:e7:06:d0: 5a:30:e5:85:65:f5:54:bb:50:89:2b:93:b3:95:2e: 32:a8:27:ae:a8:05:22:2b:fa:ff:d4:55:39:b3:99: 9e:14:61:4d:74:b3:cf:07:e6:2a:88:cf:5e:b1:ce: 5c:a8:23:c8:ce:52:17:35:cc:5d:40:f1:1a:39:7f: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:27:29:E0:79:52:D7:53:B6:F2:7B:E4:4F:33:3C:A9:F7:11:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:980::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:33:c5:58:34:a8:59:aa:a1:d0:46:b4:ae:99:11:b2:7d:91: a3:54:84:75:32:16:ff:f7:9f:99:19:6a:4a:54:8c:f2:ac:70: 22:9d:d6:e4:31:96:6a:bf:6a:33:99:43:9b:2f:5f:fe:25:70: aa:ae:87:19:1a:bc:b1:af:2b:c6:15:30:8b:ac:2a:8b:85:dc: 77:ed:d2:65:89:56:d8:4e:c1:24:a3:35:dc:7b:26:65:56:1d: 8a:f1:73:07:af:e9:6b:2b:9a:71:6b:44:19:f9:2e:7f:8b:9e: 52:b3:da:79:4e:97:20:79:ee:49:c0:34:86:cb:a3:8b:40:4c: be:f3:cd:90:bb:ba:c4:5a:24:15:bb:c8:26:03:30:41:63:11: 12:b6:b1:44:0f:77:3c:1a:65:ee:04:8a:fa:20:3b:2d:fb:79: c9:24:c7:97:7c:9f:01:eb:cb:72:a6:a8:a6:d9:6e:eb:95:0e: 8f:ae:4d:54:9e:1d:50:a0:27:6e:b4:f9:96:50:71:4f:d6:27: 76:37:84:30:f6:b7:05:7a:60:6b:20:59:f5:27:db:03:9e:fd: bf:40:8d:ba:87:8b:1d:2b:65:ad:f6:70:11:76:43:5f:cd:1c: 10:8c:36:ff:b1:3e:7f:45:75:9e:d5:38:83:b3:f0:c4:ba:96: b6:f6:e3:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlhYl8a/acgiboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OWMwYjkyYjItYTczMy00NTEwLTk3MzgtMWE3ZTNkYTBmNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJfFHsoXW8wvmEnkn/BWvwrZK/zzMWRUxtQR T/q3sX8nFbDIhJWDBkoP9XqArenK4ZonJ0ErFSSOkg0+wv2LMd7liE7R58F9NALS yYJjvzQO+1BiM+n0msHk/WQKUlyxRZ9VtWC8/PQqD5Il8wB6KcwppsyC+rNWbNeX iv8a00MdRFYvm7+D/ST9tKLLfrbf09QmXfNqJxAgGlaKd/L28NQ+IkSqCuhvR+u8 1azZNXvvWKApeN6+KwAB+ACtO1vnBtBaMOWFZfVUu1CJK5OzlS4yqCeuqAUiK/r/ 1FU5s5meFGFNdLPPB+YqiM9esc5cqCPIzlIXNcxdQPEaOX8olwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEINJyngeVLXU7bye+RPMzyp9xEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjRjOWIyMDktN2VlYy0z ZTVhLWExNDEtNmMwZDA4YTgxYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQmA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUzxVg0qFmqodBGtK6ZEbJ9kaNUhHUyFv/3n5kZakpUjPKscCKd 1uQxlmq/ajOZQ5svX/4lcKquhxkavLGvK8YVMIusKouF3Hft0mWJVthOwSSjNdx7 JmVWHYrxcwev6WsrmnFrRBn5Ln+LnlKz2nlOlyB57knANIbLo4tATL7zzZC7usRa JBW7yCYDMEFjERK2sUQPdzwaZe4EivogOy37eckkx5d8nwHry3KmqKbZbuuVDo+u TVSeHVCgJ260+ZZQcU/WJ3Y3hDD2twV6YGsgWfUn2wOe/b9AjbqHix0rZa32cBF2 Q1/NHBCMNv+xPn9FdZ7VOIOz8MS6lrb24/Q= -----END CERTIFICATE-----Generated at Fri Apr 17 03:47:52 2026 by rpki-client