$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa File: 876cd901-f77b-3bef-b6a4-45e8de312927.roa (raw, json) Hash identifier: 8RC52WdBr8r/jr1Vgnt2JjVclYkMp+QFmlqbVrOw2to= Subject key identifier: 9E:CE:D6:A1:27:C3:48:11:62:3F:8F:5C:7C:C1:8A:32:F9:81:94:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CC77726D064E7519F0FA50980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2d81:3600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:26:d0:64:e7:51:9f:0f:a5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=7b87471b-e635-47fc-845d-a3c94c1ee733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:83:20:84:da:2f:e1:97:b1:99:be:61:c8: 74:b3:d9:d5:90:aa:e5:ab:b9:69:f7:57:e6:cd:73: 8f:7d:39:38:d2:f5:6e:85:15:d6:f3:f5:14:1b:97: 5c:b9:e5:10:7c:7b:60:e7:c0:b8:52:c7:92:2f:3f: 80:df:3e:5c:1e:23:a6:6e:f9:1c:4f:f3:ee:e4:6c: 45:8f:aa:33:4c:7d:e0:91:f9:76:ee:e5:ed:d9:62: 96:c3:1b:95:d7:81:33:03:44:3b:c7:b0:1d:b5:e9: 68:c4:8c:aa:6f:86:9f:aa:ed:e3:a3:1a:b8:5f:e3: 70:cb:43:6b:f1:69:3f:21:94:fc:1f:cb:4f:e9:64: de:3b:6b:d1:61:13:2b:be:a2:12:62:ce:fa:97:1c: c8:e2:e1:8e:ec:56:85:5b:ee:b8:09:1e:52:dc:dc: 59:dc:49:5c:45:db:8d:3d:d0:f0:e1:c2:5c:7c:71: 46:56:3f:57:d3:42:49:47:02:1a:dc:67:da:87:06: 42:38:6a:85:29:f6:f7:e2:78:28:ca:ab:c0:67:90: 09:f8:42:1b:1b:80:c7:a1:ab:cb:80:a7:b3:75:7e: 43:b9:7d:16:0d:06:41:e5:74:f9:39:20:09:ee:fb: 8b:65:cb:d1:cc:ef:16:05:5a:f9:e4:b9:13:90:c9: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:D6:A1:27:C3:48:11:62:3F:8F:5C:7C:C1:8A:32:F9:81:94:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/876cd901-f77b-3bef-b6a4-45e8de312927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b1:ae:8e:31:25:3c:ce:3b:2f:7c:41:8b:62:49:6e:55:ec: 10:97:fb:e6:4b:67:4f:47:85:54:a0:43:71:e4:d7:83:d2:0a: 86:df:ac:81:1c:43:82:cd:38:74:82:2e:d1:3b:19:8b:86:e6: 40:b5:a7:bf:30:1c:34:f9:56:1d:a4:19:2f:f0:c4:ca:55:d6: 2f:e1:8f:68:8b:97:7e:56:c5:82:18:b7:d0:2d:c8:38:59:5a: bf:55:5c:04:ba:4c:41:1b:4a:0f:38:e5:d1:5f:d2:3f:0f:da: 30:7c:72:19:1d:3f:1b:c8:75:d4:dc:5a:b1:76:db:6a:e0:08: dd:c4:f3:a0:8e:98:e3:0c:f8:a2:39:63:13:0a:00:e8:12:58: 90:60:f5:15:ea:75:1c:12:44:68:33:e5:2a:ea:14:33:0c:a2: 3a:14:be:c4:5e:0a:b7:bc:0e:0d:c0:8a:a8:9c:8a:c4:91:a0: b0:96:b2:42:80:34:17:a6:51:20:76:1b:e7:41:a6:e9:a6:ec: 64:87:2b:4f:e4:3e:a1:9e:31:c6:40:ee:4f:1e:7c:0a:a5:d1: 86:9a:f4:be:ec:5b:85:b9:0e:f3:8d:56:fa:99:09:c7:a7:a7: 13:64:f8:b6:12:bb:53:62:42:c2:e6:b2:91:7b:94:29:63:29: 6c:a9:d7:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzHdybQZOdRnw+lCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk N2I4NzQ3MWItZTYzNS00N2ZjLTg0NWQtYTNjOTRjMWVlNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GeDIITaL+GXsZm+Ych0s9nVkKrlq7lp91fm zXOPfTk40vVuhRXW8/UUG5dcueUQfHtg58C4UseSLz+A3z5cHiOmbvkcT/Pu5GxF j6ozTH3gkfl27uXt2WKWwxuV14EzA0Q7x7AdteloxIyqb4afqu3joxq4X+Nwy0Nr 8Wk/IZT8H8tP6WTeO2vRYRMrvqISYs76lxzI4uGO7FaFW+64CR5S3NxZ3ElcRduN PdDw4cJcfHFGVj9X00JJRwIa3GfahwZCOGqFKfb34ngoyqvAZ5AJ+EIbG4DHoavL gKezdX5DuX0WDQZB5XT5OSAJ7vuLZcvRzO8WBVr55LkTkMlquwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7O1qEnw0gRYj+PXHzBijL5gZTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc2Y2Q5MDEtZjc3Yi0z YmVmLWI2YTQtNDVlOGRlMzEyOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuxro4xJTzOOy98QYtiSW5V7BCX++ZLZ09HhVSgQ3Hk14PSCobf rIEcQ4LNOHSCLtE7GYuG5kC1p78wHDT5Vh2kGS/wxMpV1i/hj2iLl35WxYIYt9At yDhZWr9VXAS6TEEbSg845dFf0j8P2jB8chkdPxvIddTcWrF222rgCN3E86COmOMM +KI5YxMKAOgSWJBg9RXqdRwSRGgz5SrqFDMMojoUvsReCre8Dg3AiqicisSRoLCW skKANBemUSB2G+dBpumm7GSHK0/kPqGeMcZA7k8efAql0Yaa9L7sW4W5DvONVvqZ CcenpxNk+LYSu1NiQsLmspF7lCljKWyp164= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:52 2026 by rpki-client