$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa File: 3980d51d-07db-3b1f-965c-cd48b27da63d.roa (raw, json) Hash identifier: r54oc+TwoTUNQmXiBLWfPHJ1JM3UiykeaLgJGvt7asQ= Subject key identifier: F1:93:EC:A5:9E:FB:60:82:73:FE:75:9C:61:6D:A3:F8:F8:87:3A:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C7761D0902D1C5FB4F000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 2604:2d80:7680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:77:61:d0:90:2d:1c:5f:b4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=88b029e7-8821-488d-88de-6443b882c798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:f3:f0:4f:1a:d7:d2:c2:5e:9a:76:6f:e7: c9:f0:94:f4:28:17:18:ec:95:66:10:8f:ac:0c:0f: 0f:bb:cf:e8:68:7e:bb:96:e3:a7:1f:a5:f3:ed:0c: f9:5b:a5:64:19:73:31:b7:95:f2:ee:54:4e:c6:f7: 5c:ff:b4:1d:64:6f:b7:61:8e:cd:54:76:e8:33:f3: 63:ac:fb:48:01:21:2f:0c:13:2e:07:e7:85:a7:6c: 08:09:03:8b:92:01:2e:81:c6:be:38:62:0d:19:79: 8f:9a:80:e0:34:0a:36:5f:79:c5:c3:b3:e3:89:4b: 32:af:53:dd:bc:b1:45:84:65:39:ee:11:20:ad:b8: 3a:45:f2:ff:1b:6e:45:85:03:87:3f:79:1f:26:90: 6d:1d:07:ae:59:a1:46:04:aa:0d:b1:a2:62:5c:b8: 9e:b6:35:f4:06:e7:3f:09:92:2c:83:b0:54:22:0e: b4:b7:dd:95:40:f2:90:59:da:c2:65:84:02:31:32: bb:3b:73:59:89:de:38:05:4f:00:47:87:e1:33:d2: 52:0e:58:1a:9b:fb:6e:32:8e:e6:e6:96:c8:b6:92: e7:e9:9a:5a:31:42:f2:19:fa:ea:1c:a5:94:75:ec: 47:1f:0a:d9:b9:fb:de:4b:dd:ec:45:eb:61:1b:a7: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:EC:A5:9E:FB:60:82:73:FE:75:9C:61:6D:A3:F8:F8:87:3A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3980d51d-07db-3b1f-965c-cd48b27da63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7a:cd:e6:15:75:4f:90:0e:29:0d:f3:ce:95:53:c5:83:b9: 50:32:1c:e2:20:05:5a:30:89:0d:71:61:3d:41:77:b6:78:05: 12:49:e5:1d:f5:cf:21:6f:41:80:05:47:2c:e2:a7:78:a8:b4: f9:8b:d8:37:1e:4b:aa:e7:2b:e4:4e:de:18:ed:72:7f:9c:36: 8f:18:23:e5:20:59:97:36:b6:b7:e8:bc:fc:e4:c9:9c:7a:94: 64:96:ae:26:a7:3d:47:37:db:17:60:a1:48:9d:c0:80:c2:cd: 0a:a7:7e:09:47:27:3b:89:62:27:cb:9f:e4:97:a9:23:2d:79: 3f:44:97:ca:03:5d:57:02:52:41:95:f7:fd:9a:4c:c9:35:cc: aa:95:69:c0:58:24:8e:4b:82:87:26:67:31:43:06:aa:c6:2d: 56:33:4a:56:c2:0d:36:5a:8b:d2:d1:57:bf:17:12:12:f9:f5: 3f:d1:55:f8:0d:2a:b2:11:24:a2:35:ac:e3:ed:82:70:4f:4f: b5:73:d9:33:ab:c6:30:13:fc:ba:0e:28:c4:66:15:38:5a:5d: 3e:51:aa:2f:b0:64:06:62:ac:6f:48:b5:22:8a:b8:25:a2:91: bc:9c:45:e2:cf:1d:c0:34:6b:74:dd:69:17:77:e3:29:3c:e1: 94:5f:e2:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnHdh0JAtHF+08AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODhiMDI5ZTctODgyMS00ODhkLTg4ZGUtNjQ0M2I4ODJjNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGjz8E8a19LCXpp2b+fJ8JT0KBcY7JVmEI+s DA8Pu8/oaH67luOnH6Xz7Qz5W6VkGXMxt5Xy7lROxvdc/7QdZG+3YY7NVHboM/Nj rPtIASEvDBMuB+eFp2wICQOLkgEugca+OGINGXmPmoDgNAo2X3nFw7PjiUsyr1Pd vLFFhGU57hEgrbg6RfL/G25FhQOHP3kfJpBtHQeuWaFGBKoNsaJiXLietjX0Buc/ CZIsg7BUIg60t92VQPKQWdrCZYQCMTK7O3NZid44BU8AR4fhM9JSDlgam/tuMo7m 5pbItpLn6ZpaMULyGfrqHKWUdexHHwrZufveS93sRethG6fJEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGT7KWe+2CCc/51nGFto/j4hzoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzk4MGQ1MWQtMDdkYi0z YjFmLTk2NWMtY2Q0OGIyN2RhNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF16zeYVdU+QDikN886VU8WDuVAyHOIgBVowiQ1xYT1Bd7Z4BRJJ 5R31zyFvQYAFRyzip3iotPmL2DceS6rnK+RO3hjtcn+cNo8YI+UgWZc2trfovPzk yZx6lGSWrianPUc32xdgoUidwIDCzQqnfglHJzuJYifLn+SXqSMteT9El8oDXVcC UkGV9/2aTMk1zKqVacBYJI5LgocmZzFDBqrGLVYzSlbCDTZai9LRV78XEhL59T/R VfgNKrIRJKI1rOPtgnBPT7Vz2TOrxjAT/LoOKMRmFThaXT5Rqi+wZAZirG9ItSKK uCWikbycReLPHcA0a3TdaRd34yk84ZRf4t8= -----END CERTIFICATE-----Generated at Sat Jun 13 16:02:03 2026 by rpki-client