$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f32631a-f53c-3ed4-b15e-06c17bae8240.roa File: 2f32631a-f53c-3ed4-b15e-06c17bae8240.roa (raw, json) Hash identifier: AfnmLp0/gCc64BZBeSzgw9xEXQ7L31xS9mJEgLq1E4o= Subject key identifier: 3C:5A:14:BD:83:E0:38:23:B0:1A:DE:AD:A3:66:9A:B6:D8:68:2C:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF4DB548F86306F778800DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f32631a-f53c-3ed4-b15e-06c17bae8240.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 30036 IP address blocks: 2604:2d80:f780::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:54:8f:86:30:6f:77:88:00:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=ff3961ee-8e49-4114-9930-33325c503b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:8b:e6:65:17:9a:ea:2e:a8:a4:69:23:8c: ee:cb:85:28:d3:d6:94:a6:72:74:32:16:16:df:5b: 86:37:be:fe:08:bf:51:93:48:3f:9e:4c:66:e4:1e: 31:c3:f5:88:46:1b:e2:a1:6b:a2:4c:65:b7:9d:90: 3a:68:a5:4f:e8:a3:cd:d2:88:25:b0:44:00:6c:17: e0:9c:ed:e6:9a:ea:41:54:ba:75:d6:21:60:92:44: be:1e:55:bf:22:34:dd:bd:08:17:01:19:79:c4:cc: ae:d4:ce:36:d5:c4:29:25:0b:9f:a4:2a:49:f9:8b: 00:78:d0:42:b0:15:cb:8c:b6:d8:5a:a9:e7:66:87: 05:d7:d5:26:50:a7:4a:99:80:33:bb:31:af:34:f3: a1:05:2d:64:7e:db:b2:2a:e7:7c:5f:d3:5b:8e:ba: 8c:6e:13:c3:7a:6b:47:c4:d5:8a:dc:1c:6a:73:5e: 73:1b:79:32:cd:9e:a2:da:f6:a1:da:39:d9:5e:87: 8e:b6:f8:e7:09:8d:42:6f:0e:38:09:46:60:da:f5: 7f:80:3e:74:32:c2:34:4d:b5:11:df:ca:76:46:56: 1d:cd:54:3b:ec:bf:bd:59:41:e4:39:2d:28:1f:ab: c5:52:3c:f1:b5:c5:ea:ab:27:c9:f1:67:28:c6:3e: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:14:BD:83:E0:38:23:B0:1A:DE:AD:A3:66:9A:B6:D8:68:2C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f32631a-f53c-3ed4-b15e-06c17bae8240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f780::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a2:47:39:95:c3:49:be:14:6c:3e:58:aa:d7:e4:0e:b5:a8: 36:eb:eb:a1:b7:90:f7:e0:d2:76:b3:01:42:47:38:fd:04:ae: 52:e8:9f:9b:29:62:38:35:48:06:fb:f5:d5:ed:c5:e4:23:61: e6:70:a2:d6:d3:51:db:11:a2:37:2c:bd:72:12:36:5d:23:f1: 43:16:25:e8:e0:1c:c1:b4:39:52:cd:c4:54:a2:f1:89:4f:e8: 4c:d9:77:9e:ec:52:6e:84:a9:1d:09:10:23:a3:75:8c:33:7d: 4a:7b:45:77:af:86:fb:28:f3:20:73:5b:ca:0d:3c:22:7b:3f: 46:5c:32:e8:d4:e3:a1:30:a2:bd:4b:a0:8e:10:4f:53:d5:cc: 52:80:05:f7:91:b1:a4:8a:1e:d5:8b:1d:e3:a4:36:d5:ae:cf: d0:38:2b:68:56:3c:a2:c6:38:bd:e2:32:91:c7:cd:4b:0a:a6: 90:89:46:bf:9a:00:b5:31:03:53:6a:5f:30:fb:20:fd:2f:72: 42:f2:b6:c1:17:9a:fe:fe:b6:5a:a7:29:d3:99:8d:b5:ea:b9: 5b:b2:d2:ad:7e:bc:d2:d1:f8:1a:a9:d8:89:eb:a2:84:84:f7: 10:8b:22:9f:f2:97:dc:c6:d4:d0:78:40:6d:22:8a:9e:40:f1: 23:df:66:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3021SPhjBvd4gA3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmYzOTYxZWUtOGU0OS00MTE0LTk5MzAtMzMzMjVjNTAzYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVmL5mUXmuouqKRpI4zuy4Uo09aUpnJ0MhYW 31uGN77+CL9Rk0g/nkxm5B4xw/WIRhvioWuiTGW3nZA6aKVP6KPN0oglsEQAbBfg nO3mmupBVLp11iFgkkS+HlW/IjTdvQgXARl5xMyu1M421cQpJQufpCpJ+YsAeNBC sBXLjLbYWqnnZocF19UmUKdKmYAzuzGvNPOhBS1kftuyKud8X9NbjrqMbhPDemtH xNWK3Bxqc15zG3kyzZ6i2vah2jnZXoeOtvjnCY1Cbw44CUZg2vV/gD50MsI0TbUR 38p2RlYdzVQ77L+9WUHkOS0oH6vFUjzxtcXqqyfJ8Wcoxj4AIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxaFL2D4DgjsBreraNmmrbYaCxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmYzMjYzMWEtZjUzYy0z ZWQ0LWIxNWUtMDZjMTdiYWU4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiiRzmVw0m+FGw+WKrX5A61qDbr66G3kPfg0nazAUJHOP0ErlLo n5spYjg1SAb79dXtxeQjYeZwotbTUdsRojcsvXISNl0j8UMWJejgHMG0OVLNxFSi 8YlP6EzZd57sUm6EqR0JECOjdYwzfUp7RXevhvso8yBzW8oNPCJ7P0ZcMujU46Ew or1LoI4QT1PVzFKABfeRsaSKHtWLHeOkNtWuz9A4K2hWPKLGOL3iMpHHzUsKppCJ Rr+aALUxA1NqXzD7IP0vckLytsEXmv7+tlqnKdOZjbXquVuy0q1+vNLR+Bqp2Inr ooSE9xCLIp/yl9zG1NB4QG0iip5A8SPfZpA= -----END CERTIFICATE-----Generated at Sat Jun 13 23:50:19 2026 by rpki-client