$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c759c19-bb1e-3396-8569-2daa90392794.roa File: 3c759c19-bb1e-3396-8569-2daa90392794.roa (raw, json) Hash identifier: Vjmi4ITj8RzyPRhbIAHNNuCR9PEyVMMxTPfLSxCKokA= Subject key identifier: A3:CA:D6:C0:28:3E:07:21:C2:02:83:15:E6:E3:75:B4:4F:8A:A0:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CACF1BE1DCBCF8DEAC1B2FA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c759c19-bb1e-3396-8569-2daa90392794.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 30036 IP address blocks: 2604:2d81:2a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:be:1d:cb:cf:8d:ea:c1:b2:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=8fa1b687-870c-43eb-910b-756e59f63259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3c:b4:b1:f7:4e:ca:53:1f:d4:a9:bf:43:7d: db:6a:e9:fa:85:e4:df:9b:5a:eb:3c:75:1c:67:7a: b6:96:a6:17:ce:4d:9c:a8:04:4d:65:a8:c1:bc:25: 24:81:42:39:41:dd:1f:65:3e:2e:1e:02:7b:cf:9c: ce:9a:f6:c5:53:1e:16:eb:bb:ef:c0:71:62:ad:c8: df:2d:45:1d:aa:71:f5:11:b8:96:68:7f:e4:9c:58: 87:a8:57:a0:32:20:1d:a8:2b:da:c8:b1:08:1c:f7: 62:8c:ca:b0:db:fa:46:58:64:f9:88:b7:47:f9:ef: d0:e6:e4:ac:4d:26:a8:94:51:41:e9:03:05:bf:6c: 40:07:37:07:a0:04:5b:be:cc:15:50:90:b9:d7:a4: 4a:33:93:48:53:dd:d4:1d:ed:65:94:78:8f:79:a9: 8f:f4:d5:c9:83:1a:d6:76:4e:92:fd:98:96:93:ed: 4d:5d:ba:b6:f4:f4:b1:0e:b5:d2:83:1b:4d:d0:2c: 5f:59:ec:0c:84:f4:76:57:41:ac:cb:77:b2:13:e5: d8:43:79:88:3f:93:33:e0:6e:cb:44:84:2e:da:33: ed:f6:6e:b3:33:be:ab:00:fc:64:73:0f:d8:f2:ee: 6f:8f:45:c7:53:1f:fb:15:41:cd:fb:88:42:05:0d: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:D6:C0:28:3E:07:21:C2:02:83:15:E6:E3:75:B4:4F:8A:A0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c759c19-bb1e-3396-8569-2daa90392794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d2:05:02:fc:b6:59:cd:d1:37:30:b7:5e:be:a3:fe:a1:17: 2f:24:00:04:01:90:3a:62:d5:7a:be:f2:3d:9f:00:55:a3:7a: f2:36:5f:ae:71:82:a4:af:95:e8:09:15:6a:7d:05:e7:99:f2: 00:e0:3e:f0:fc:7f:16:41:2c:01:60:ef:47:e7:45:b8:49:d4: a9:02:93:83:13:48:57:02:ad:80:cf:58:ba:bc:16:35:3b:d5: ad:29:de:02:6f:61:86:1a:b9:fe:1a:8e:23:ad:94:54:6f:04: 3e:3e:9a:78:00:83:79:b8:8f:eb:d2:dc:bb:d2:06:a3:6f:52: 2b:eb:21:f8:70:40:e5:86:8d:1a:29:8b:80:14:09:be:f9:f1: 3d:80:f9:fc:f5:40:dc:12:3e:0b:e1:b5:af:70:16:cb:55:bb: ea:e2:4b:65:78:e7:7e:d7:c0:20:bf:a6:7f:ca:ec:45:14:e2: 51:25:68:53:8a:f4:15:b1:40:a7:c4:be:ba:7c:47:60:ba:be: 35:a3:11:17:b6:79:2b:d4:88:12:82:a5:4b:fd:bf:a7:e0:b5: 7b:3f:19:38:09:18:fd:1c:db:79:f9:5c:c7:25:8c:82:91:f6: c3:85:6a:f6:93:4a:4c:bd:2d:f5:b0:b7:37:65:44:42:95:d6: fd:c3:2b:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEys8b4dy8+N6sGy+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk OGZhMWI2ODctODcwYy00M2ViLTkxMGItNzU2ZTU5ZjYzMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zy0sfdOylMf1Km/Q33baun6heTfm1rrPHUc Z3q2lqYXzk2cqARNZajBvCUkgUI5Qd0fZT4uHgJ7z5zOmvbFUx4W67vvwHFircjf LUUdqnH1EbiWaH/knFiHqFegMiAdqCvayLEIHPdijMqw2/pGWGT5iLdH+e/Q5uSs TSaolFFB6QMFv2xABzcHoARbvswVUJC516RKM5NIU93UHe1llHiPeamP9NXJgxrW dk6S/ZiWk+1NXbq29PSxDrXSgxtN0CxfWewMhPR2V0Gsy3eyE+XYQ3mIP5Mz4G7L RIQu2jPt9m6zM76rAPxkcw/Y8u5vj0XHUx/7FUHN+4hCBQ2tnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKPK1sAoPgchwgKDFebjdbRPiqAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M3NTljMTktYmIxZS0z Mzk2LTg1NjktMmRhYTkwMzkyNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/SBQL8tlnN0Tcwt16+o/6hFy8kAAQBkDpi1Xq+8j2fAFWjevI2 X65xgqSvlegJFWp9BeeZ8gDgPvD8fxZBLAFg70fnRbhJ1KkCk4MTSFcCrYDPWLq8 FjU71a0p3gJvYYYauf4ajiOtlFRvBD4+mngAg3m4j+vS3LvSBqNvUivrIfhwQOWG jRopi4AUCb758T2A+fz1QNwSPgvhta9wFstVu+riS2V4537XwCC/pn/K7EUU4lEl aFOK9BWxQKfEvrp8R2C6vjWjERe2eSvUiBKCpUv9v6fgtXs/GTgJGP0c23n5XMcl jIKR9sOFavaTSky9LfWwtzdlREKV1v3DK/0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:46 2026 by rpki-client