$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa File: 3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa (raw, json) Hash identifier: hKjIMiqHkEnKy6NPjTmh8VziUEtc3/4aypBNQHN5I+E= Subject key identifier: 85:FB:D6:AE:9E:68:F4:21:28:A1:43:1C:93:A3:D6:73:13:CC:A8:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0866563FCEECD07CF27A3080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 2604:2d80:a500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:56:3f:ce:ec:d0:7c:f2:7a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=a0db0206-b5f0-485d-a2dc-8f1b00e92df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:af:b0:22:43:9b:bc:dc:1d:16:d8:a9:3a: 8f:b5:4c:8b:61:fd:6d:4e:33:19:1f:16:58:5d:13: c2:3d:55:25:4b:0d:17:20:3a:13:c0:27:b1:34:1b: 62:13:c6:e2:ab:cc:3f:2f:ea:c6:b6:25:99:02:0e: 4e:ab:dd:44:ce:1f:02:a7:7e:45:ff:de:17:24:01: 43:60:63:80:ec:5a:3e:b3:0f:56:a1:38:de:77:b7: f5:ca:5e:3b:47:d3:9c:21:16:2f:4a:ed:27:10:f3: 77:36:f1:57:73:97:15:55:1b:ec:ef:e5:ae:af:4e: 65:a1:b3:a5:88:57:a9:af:a6:36:f4:3b:80:38:e5: 74:45:c9:8a:a8:f7:13:23:8e:95:aa:2f:0b:da:a1: 97:dc:72:55:47:87:8c:57:fd:db:48:cd:25:15:61: 2d:9c:90:b2:16:6a:a1:e2:c8:69:37:cd:f5:c9:9c: cd:80:96:1e:f1:0b:73:ce:dc:40:04:5a:f4:94:0b: e2:26:cd:12:40:02:69:d2:4e:5b:a0:a5:7b:8b:e1: f6:68:96:10:e6:22:8f:29:ce:f7:d4:55:e2:1b:e0: 4b:a1:9b:74:80:4a:a8:b5:50:52:ee:f3:e8:93:2c: 45:29:67:e2:5c:a5:85:4a:6c:28:9e:36:1b:5e:7f: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:D6:AE:9E:68:F4:21:28:A1:43:1C:93:A3:D6:73:13:CC:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:43:3a:1d:80:c0:7e:5b:65:e4:33:4d:65:ae:a1:5f:75:4c: c8:2c:99:12:6f:6f:b0:ef:13:ed:e8:60:e3:1b:b5:4a:89:37: 03:46:ef:b1:13:d0:d1:68:14:df:9f:1a:9f:02:7f:35:4e:54: 69:9d:31:63:1b:91:f6:53:bb:fb:bb:e9:2e:59:61:29:69:03: 04:34:0c:63:90:27:36:86:78:b6:1e:c4:f2:33:c1:24:fd:a5: d3:27:ab:e8:de:fb:d1:4b:77:35:cd:f4:5d:28:42:bf:4c:19: 4a:47:11:c7:8d:1d:a1:cc:d1:20:93:77:dc:85:5b:72:e9:56: 66:8a:50:c8:03:e8:b9:9b:f1:c4:a0:3e:48:6f:c2:a7:55:fe: da:0b:ed:4b:9d:01:8a:0f:e3:92:11:f9:7b:19:e0:48:d8:c1: 28:94:e6:77:d2:4b:d0:14:ec:6c:51:cf:3d:d9:e6:4f:0e:dd: a8:2a:16:fd:41:b5:01:41:da:44:0a:0d:96:8c:61:48:65:61: 0b:cb:40:ac:72:3c:16:9f:1e:ed:0d:60:36:29:05:6d:ba:db: 9b:d6:e7:32:a7:47:8d:59:7a:1f:97:8e:9b:5a:50:e1:a6:db: 2e:d7:ee:d2:07:38:73:37:2b:3b:d3:f8:e4:18:77:5e:9f:fe: 78:08:f8:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4IZlY/zuzQfPJ6MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YTBkYjAyMDYtYjVmMC00ODVkLWEyZGMtOGYxYjAwZTkyZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv+vsCJDm7zcHRbYqTqPtUyLYf1tTjMZHxZY XRPCPVUlSw0XIDoTwCexNBtiE8biq8w/L+rGtiWZAg5Oq91Ezh8Cp35F/94XJAFD YGOA7Fo+sw9WoTjed7f1yl47R9OcIRYvSu0nEPN3NvFXc5cVVRvs7+Wur05lobOl iFepr6Y29DuAOOV0RcmKqPcTI46Vqi8L2qGX3HJVR4eMV/3bSM0lFWEtnJCyFmqh 4shpN831yZzNgJYe8QtzztxABFr0lAviJs0SQAJp0k5boKV7i+H2aJYQ5iKPKc73 1FXiG+BLoZt0gEqotVBS7vPokyxFKWfiXKWFSmwonjYbXn8qWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIX71q6eaPQhKKFDHJOj1nMTzKgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZkOGE3MGMtMGU4Mi0z NTE2LWIwOGQtYTlmYzVlNTUzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJDOh2AwH5bZeQzTWWuoV91TMgsmRJvb7DvE+3oYOMbtUqJNwNG 77ET0NFoFN+fGp8CfzVOVGmdMWMbkfZTu/u76S5ZYSlpAwQ0DGOQJzaGeLYexPIz wST9pdMnq+je+9FLdzXN9F0oQr9MGUpHEceNHaHM0SCTd9yFW3LpVmaKUMgD6Lmb 8cSgPkhvwqdV/toL7UudAYoP45IR+XsZ4EjYwSiU5nfSS9AU7GxRzz3Z5k8O3agq Fv1BtQFB2kQKDZaMYUhlYQvLQKxyPBafHu0NYDYpBW2625vW5zKnR41Zeh+Xjpta UOGm2y7X7tIHOHM3KzvT+OQYd16f/ngI+NY= -----END CERTIFICATE-----Generated at Sat Jun 13 17:10:40 2026 by rpki-client