$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d6214a1-4c1a-337a-81a8-9d7c5ce5de0c.roa File: 3d6214a1-4c1a-337a-81a8-9d7c5ce5de0c.roa (raw, json) Hash identifier: m9QPGBGt7IXEODNrJeA8IreCqmOJwMuH1a8ecdndBm8= Subject key identifier: 94:7C:2D:D2:B8:B5:6C:CB:88:B4:4B:BD:B6:22:D6:55:31:37:BF:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D5CB4F28F47CE147F84CF3500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d6214a1-4c1a-337a-81a8-9d7c5ce5de0c.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 19905 IP address blocks: 2604:2d80:80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f2:8f:47:ce:14:7f:84:cf:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=4f432f51-2045-4bbc-91f2-8833cbf9c2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0b:8d:3c:f6:d9:45:01:6a:78:41:54:a9:c7: 0d:49:e7:c2:d7:7b:72:21:38:ca:06:13:7e:da:a9: c6:97:be:c4:c6:20:17:d5:97:5d:a2:de:89:41:a5: da:be:f1:b5:33:48:49:3a:ce:84:8a:04:00:6a:1a: 0c:a9:6d:10:28:06:c6:cd:d4:b9:ea:2c:66:08:28: 31:23:c2:da:32:d7:57:42:85:55:ac:55:67:06:ab: 01:c0:e2:13:9d:e1:3e:bf:cd:e9:ec:a2:c6:10:7e: 7e:d4:24:c6:fc:fe:e8:58:6f:d7:bb:42:dd:62:d0: c8:b0:48:fb:9f:cc:b9:93:98:10:c8:a5:ee:78:3c: 70:c4:87:13:4c:2b:0d:12:6a:52:75:e7:72:69:d4: c6:df:71:a9:7e:33:2c:2c:83:33:82:79:1c:8e:ff: 59:59:f7:b4:85:42:f8:89:17:03:11:81:9e:93:5c: 81:78:9e:d6:e8:81:21:9b:28:d3:d6:8b:89:5c:b7: cb:f7:8e:22:78:f8:c6:e1:98:47:49:ce:54:ac:7d: 78:ea:b9:07:34:c8:6f:97:6e:43:ac:84:cf:01:88: 96:54:89:87:e0:8a:66:cc:11:51:c0:5c:63:1a:00: f4:c9:df:09:da:05:ea:18:65:c9:6e:53:5a:4c:a0: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7C:2D:D2:B8:B5:6C:CB:88:B4:4B:BD:B6:22:D6:55:31:37:BF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d6214a1-4c1a-337a-81a8-9d7c5ce5de0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8c:41:77:38:5b:e4:82:60:7f:76:42:7b:54:35:1a:fd:01: b8:9b:81:20:43:25:a2:90:b0:8a:b2:f4:5d:ce:ae:fa:49:35: 29:43:73:79:b3:62:0d:22:1a:48:83:d4:fc:9a:d4:51:7f:bd: 22:b3:28:1f:78:b8:6f:36:fa:d0:3f:ef:5c:5d:4d:e7:11:47: 8c:00:bd:91:00:b5:c2:a9:14:bd:8b:3a:fa:d2:10:f7:dc:07: 06:71:52:d0:2c:eb:5d:94:39:38:15:bd:4d:dd:85:e2:9f:6a: 6d:ab:eb:ed:31:92:74:b1:42:3d:7f:e2:49:b5:0e:76:b7:6d: ed:35:33:40:f9:52:16:ab:fb:4a:a1:c3:a9:0b:92:38:9b:a0: c7:da:51:99:6d:d6:55:5a:79:1a:3d:8f:ce:2d:8f:95:55:cd: 3c:f4:56:cb:48:c9:32:36:fd:35:5d:b1:43:2b:90:fa:c4:16: fe:3f:77:f6:b8:8f:8c:ed:db:f1:b3:75:43:12:9b:6b:82:dc: b3:b2:8d:eb:5c:90:20:b8:79:00:5a:2c:cc:28:24:ef:dd:d1: 59:83:ba:90:0d:ec:04:7d:6a:f5:9a:8a:9d:14:01:10:97:39: 7c:66:d4:43:7b:a6:f9:50:f5:bf:e0:92:f2:e3:3c:96:6e:ce: 51:02:c0:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPKPR84Uf4TPNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk NGY0MzJmNTEtMjA0NS00YmJjLTkxZjItODgzM2NiZjljMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAuNPPbZRQFqeEFUqccNSefC13tyITjKBhN+ 2qnGl77ExiAX1Zddot6JQaXavvG1M0hJOs6EigQAahoMqW0QKAbGzdS56ixmCCgx I8LaMtdXQoVVrFVnBqsBwOITneE+v83p7KLGEH5+1CTG/P7oWG/Xu0LdYtDIsEj7 n8y5k5gQyKXueDxwxIcTTCsNEmpSdedyadTG33GpfjMsLIMzgnkcjv9ZWfe0hUL4 iRcDEYGek1yBeJ7W6IEhmyjT1ouJXLfL944iePjG4ZhHSc5UrH146rkHNMhvl25D rITPAYiWVImH4IpmzBFRwFxjGgD0yd8J2gXqGGXJblNaTKAK9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJR8LdK4tWzLiLRLvbYi1lUxN7/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q2MjE0YTEtNGMxYS0z MzdhLTgxYTgtOWQ3YzVjZTVkZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSMQXc4W+SCYH92QntUNRr9AbibgSBDJaKQsIqy9F3OrvpJNSlD c3mzYg0iGkiD1Pya1FF/vSKzKB94uG82+tA/71xdTecRR4wAvZEAtcKpFL2LOvrS EPfcBwZxUtAs612UOTgVvU3dheKfam2r6+0xknSxQj1/4km1Dna3be01M0D5Uhar +0qhw6kLkjiboMfaUZlt1lVaeRo9j84tj5VVzTz0VstIyTI2/TVdsUMrkPrEFv4/ d/a4j4zt2/GzdUMSm2uC3LOyjetckCC4eQBaLMwoJO/d0VmDupAN7AR9avWaip0U ARCXOXxm1EN7pvlQ9b/gkvLjPJZuzlECwGs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:20 2026 by rpki-client