$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40fe36b0-444a-370d-95b6-f0d60b331408.roa File: 40fe36b0-444a-370d-95b6-f0d60b331408.roa (raw, json) Hash identifier: o+W4t16sGmPYo+C3jQLsk4BZ5RqxPaVNbg91p5WKs/w= Subject key identifier: 13:E8:90:7A:20:F6:35:42:82:68:AB:7C:B9:9E:0F:07:AD:ED:3A:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CC0CA3D78A2A167F149AE1E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40fe36b0-444a-370d-95b6-f0d60b331408.roa Signing time: Wed 04 Feb 2026 16:37:20 +0000 ROA not before: Wed 04 Feb 2026 16:37:20 +0000 ROA not after: Tue 05 May 2026 15:37:20 +0000 asID: 19905 IP address blocks: 2604:2d80:c080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:ca:3d:78:a2:a1:67:f1:49:ae:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 16:37:20 2026 GMT Not After : May 5 15:37:20 2026 GMT Subject: CN=64e38101-136d-4275-8876-1a85702d30f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:8c:46:51:d3:52:42:63:3d:02:43:13:43: 34:59:67:a5:7e:d1:d5:51:55:06:03:28:d3:31:f8: a0:6f:c8:cb:33:4b:1f:42:b6:34:c2:e5:a9:46:fc: 38:75:1b:c6:28:b2:a0:dd:20:c8:ce:41:f1:53:e3: ca:62:44:dc:f4:b3:b8:e3:9c:0a:3e:9e:5c:10:3b: 73:7a:8f:b6:b2:d6:5f:db:64:67:61:a5:47:4e:67: 42:0d:03:6c:c2:4a:96:a0:71:e6:41:13:62:16:1b: 32:5c:ea:c4:93:33:6d:2a:ab:1a:7b:7e:33:23:84: df:a1:03:82:17:e7:ea:ba:cb:2e:74:89:bc:25:71: 9a:23:b8:6a:2e:c5:95:22:7b:7b:f9:31:76:ca:87: a6:eb:45:ff:f0:b3:95:cc:5e:28:49:fd:24:13:5e: d3:72:c5:c1:35:5e:69:e0:0c:4c:b3:55:a2:fb:4b: b3:0b:b0:79:1a:f6:6e:e9:b2:54:33:34:64:66:78: b6:7d:93:6c:18:76:a5:97:8f:11:56:66:ad:ee:bf: 63:31:9d:3d:2c:33:8e:87:8a:9f:fa:4d:69:7a:2b: 3d:2e:ca:4c:02:3d:b5:64:1b:dd:e0:93:78:a3:ce: 0f:33:a1:2e:83:2e:ef:83:6e:2f:d5:9a:94:b0:71: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E8:90:7A:20:F6:35:42:82:68:AB:7C:B9:9E:0F:07:AD:ED:3A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40fe36b0-444a-370d-95b6-f0d60b331408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:00:26:cd:91:b9:51:77:4a:54:8e:01:ca:5d:50:40:45:ba: 69:5d:58:91:60:ce:37:27:d0:3c:23:d7:b7:bc:37:3a:fb:85: f9:40:df:4c:39:cc:af:d6:a8:bc:6b:08:25:d8:d7:a3:6b:b1: 23:1c:67:89:90:d9:9c:54:5d:c7:83:56:92:92:0c:1d:10:b0: e8:f9:58:53:67:0a:17:98:23:49:70:e9:cc:45:cb:54:37:67: 7a:59:1e:48:2f:64:39:61:11:17:a1:1e:19:8e:f0:ad:be:00: 3b:4d:3c:39:20:15:22:b7:a8:b2:5b:c6:3e:14:84:b5:76:25: 39:dd:15:e5:c2:64:b5:9a:bd:2f:53:86:55:c6:25:f1:82:53: 35:af:db:b3:09:de:9d:2a:46:dc:2a:25:69:dc:6b:6e:23:db: ad:7a:e1:5c:a1:e9:a6:2b:43:c7:52:8a:af:ee:e1:cb:8a:a9: 3b:9f:30:1f:6b:83:f7:43:8c:7d:5b:15:ac:9f:8a:37:4e:9a: b9:c7:b4:bf:58:88:9a:dd:73:c0:48:65:5b:7b:08:55:8c:05: 06:02:bd:db:c8:7a:c4:a7:aa:b1:cf:01:d0:51:80:88:bc:af: 80:0b:54:c4:42:02:2d:ff:41:03:76:32:6f:33:91:34:aa:1d: b2:19:1f:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAyj14oqFn8UmuHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwNDE2MzcyMFoXDTI2MDUwNTE1MzcyMFowLzEtMCsGA1UEAxMk NjRlMzgxMDEtMTM2ZC00Mjc1LTg4NzYtMWE4NTcwMmQzMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubqMRlHTUkJjPQJDE0M0WWelftHVUVUGAyjT Mfigb8jLM0sfQrY0wuWpRvw4dRvGKLKg3SDIzkHxU+PKYkTc9LO445wKPp5cEDtz eo+2stZf22RnYaVHTmdCDQNswkqWoHHmQRNiFhsyXOrEkzNtKqsae34zI4TfoQOC F+fqussudIm8JXGaI7hqLsWVInt7+TF2yoem60X/8LOVzF4oSf0kE17TcsXBNV5p 4AxMs1Wi+0uzC7B5GvZu6bJUMzRkZni2fZNsGHall48RVmat7r9jMZ09LDOOh4qf +k1peis9LspMAj21ZBvd4JN4o84PM6Eugy7vg24v1ZqUsHFRfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPokHog9jVCgmirfLmeDwet7TrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDBmZTM2YjAtNDQ0YS0z NzBkLTk1YjYtZjBkNjBiMzMxNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgMCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkAJs2RuVF3SlSOAcpdUEBFumldWJFgzjcn0Dwj17e8Nzr7hflA 30w5zK/WqLxrCCXY16NrsSMcZ4mQ2ZxUXceDVpKSDB0QsOj5WFNnCheYI0lw6cxF y1Q3Z3pZHkgvZDlhERehHhmO8K2+ADtNPDkgFSK3qLJbxj4UhLV2JTndFeXCZLWa vS9ThlXGJfGCUzWv27MJ3p0qRtwqJWnca24j26164Vyh6aYrQ8dSiq/u4cuKqTuf MB9rg/dDjH1bFayfijdOmrnHtL9YiJrdc8BIZVt7CFWMBQYCvdvIesSnqrHPAdBR gIi8r4ALVMRCAi3/QQN2Mm8zkTSqHbIZH6s= -----END CERTIFICATE-----Generated at Mon Mar 2 14:18:08 2026 by rpki-client