$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa File: 3525b946-e088-30a0-80a8-0242eeac1d5e.roa (raw, json) Hash identifier: OL/zingpA4q2ek+byS3VDkvoMgS3nR0if5LnTdSnQ8M= Subject key identifier: D8:66:24:CB:CE:5C:69:D1:CD:6C:90:39:6C:CF:88:81:00:A2:E7:8F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CCFD73F3AF253CFDF6D288DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2d81:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:3f:3a:f2:53:cf:df:6d:28:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=d10fe86b-b57c-476e-a4e7-a739333f5a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:c5:6c:36:3e:c8:a7:77:48:45:9f:a9:44: e8:1b:94:a5:cf:33:f4:fe:05:ab:f0:cb:50:54:58: 38:16:f2:51:19:1c:19:d7:09:eb:50:27:50:25:79: d8:d5:f6:52:ad:3c:e4:42:07:2d:b9:a7:83:50:6d: df:4f:53:ba:74:8c:6d:04:75:39:4e:cc:84:44:7d: 8f:e0:f4:cd:b4:f8:cb:9d:cc:4d:45:fe:8c:51:85: 32:59:18:46:37:80:f1:5e:f7:44:d9:65:38:99:25: ed:02:e1:3e:cb:f1:38:96:f2:56:74:ab:45:c9:f4: 0a:e4:e2:cc:c7:d1:2d:ca:5e:db:af:7a:cc:0b:d8: c7:87:ff:ce:8b:71:17:de:5c:7d:ab:8b:89:80:91: ae:f3:69:03:c3:ad:02:62:aa:36:b2:76:bd:85:d7: 16:bf:c0:18:4c:11:72:bd:f2:e0:0f:c8:1b:a1:93: d3:31:11:d9:50:3a:f7:de:82:91:64:e7:ec:eb:17: 1a:56:54:ec:c3:be:9c:da:1c:42:33:aa:d3:55:6f: 06:e2:6f:e2:03:32:73:45:aa:6e:83:67:54:a7:4b: 38:4b:db:95:ed:86:07:de:da:3b:48:44:ac:59:aa: e5:a6:37:a4:18:7a:51:57:73:2a:3b:c2:10:0c:fb: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:66:24:CB:CE:5C:69:D1:CD:6C:90:39:6C:CF:88:81:00:A2:E7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d1:ff:f6:9d:cb:b6:a8:4b:56:a6:a0:e3:3e:f2:36:c0:08: ad:41:7c:e3:43:97:5e:5c:2f:9d:46:7a:b8:5c:1d:ff:62:1f: 47:c3:07:62:3c:b8:69:c3:f4:b6:57:d3:f0:25:9c:18:99:3c: 7c:87:9d:d4:ae:e0:1b:fe:d7:f5:6c:25:de:d2:76:e1:fc:c5: fe:fd:f9:d3:3b:4d:eb:f0:41:df:b6:15:ad:e1:7d:20:8e:b9: 69:f4:0f:9c:e0:90:21:20:10:54:31:15:0d:55:ae:a5:9d:26: f2:04:43:bb:a5:92:ce:fb:c9:3f:0a:65:b5:e2:fc:7a:7e:53: 05:67:8e:07:5b:99:34:09:dc:68:5b:a8:32:2f:6d:83:16:7a: e4:a3:10:04:e8:37:cf:00:4e:d6:57:1a:ac:27:ef:01:1e:c1: 02:09:70:3b:36:40:f1:a4:6e:02:ca:e4:7a:d9:6d:44:9e:d5: a0:81:69:b5:2f:c0:e4:c7:3c:4c:9a:7b:6a:2f:3a:8f:d4:3e: 68:b1:4b:c3:a6:4b:cb:16:90:a6:5e:86:d8:dd:06:68:1e:fe: 70:92:cb:c4:3d:31:f0:1f:60:7a:30:10:1e:b4:be:ec:f4:b1: ed:63:b6:2c:82:1a:dd:cb:6f:8a:88:73:28:f6:4a:2d:42:81: a5:2a:cb:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzP1z868lPP320ojcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDEwZmU4NmItYjU3Yy00NzZlLWE0ZTctYTczOTMzM2Y1YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fFbDY+yKd3SEWfqUToG5SlzzP0/gWr8MtQ VFg4FvJRGRwZ1wnrUCdQJXnY1fZSrTzkQgctuaeDUG3fT1O6dIxtBHU5TsyERH2P 4PTNtPjLncxNRf6MUYUyWRhGN4DxXvdE2WU4mSXtAuE+y/E4lvJWdKtFyfQK5OLM x9Etyl7br3rMC9jHh//Oi3EX3lx9q4uJgJGu82kDw60CYqo2sna9hdcWv8AYTBFy vfLgD8gboZPTMRHZUDr33oKRZOfs6xcaVlTsw76c2hxCM6rTVW8G4m/iAzJzRapu g2dUp0s4S9uV7YYH3to7SESsWarlpjekGHpRV3MqO8IQDPvU6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhmJMvOXGnRzWyQOWzPiIEAouePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzUyNWI5NDYtZTA4OC0z MGEwLTgwYTgtMDI0MmVlYWMxZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjR//ady7aoS1amoOM+8jbACK1BfONDl15cL51GerhcHf9iH0fD B2I8uGnD9LZX0/AlnBiZPHyHndSu4Bv+1/VsJd7SduH8xf79+dM7TevwQd+2Fa3h fSCOuWn0D5zgkCEgEFQxFQ1VrqWdJvIEQ7ulks77yT8KZbXi/Hp+UwVnjgdbmTQJ 3GhbqDIvbYMWeuSjEAToN88ATtZXGqwn7wEewQIJcDs2QPGkbgLK5HrZbUSe1aCB abUvwOTHPEyae2ovOo/UPmixS8OmS8sWkKZehtjdBmge/nCSy8Q9MfAfYHowEB60 vuz0se1jtiyCGt3Lb4qIcyj2Si1CgaUqy/0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:14:19 2026 by rpki-client