$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa File: 8af02d33-3818-363b-9ae2-bd31488eab24.roa (raw, json) Hash identifier: hR+3/aDN7Ot+JV9zg6tyZ/L6/xuk86SqbqVh32kDhVM= Subject key identifier: 36:27:1B:F4:F4:A2:F9:A7:29:F9:73:32:46:08:55:34:E3:E0:AA:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D5E1A5CA36C7784F274700600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 19905 IP address blocks: 2604:2d81:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5c:a3:6c:77:84:f2:74:70:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=4159b4c6-6bc5-4244-8e61-bf0d03da390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:70:5a:b2:ed:a5:a8:2e:0d:4a:c8:07:0c: 49:f8:39:55:32:5a:5f:28:1d:1a:07:9f:51:4b:59: 8c:94:39:9e:84:79:c2:09:86:10:7c:db:49:d3:cf: 18:7d:31:b4:ee:e7:a6:17:15:00:55:87:0a:33:76: ea:70:4a:a3:5a:a0:bf:42:97:02:49:e4:40:17:15: ea:2f:d0:ed:57:e7:f1:ba:ba:49:2c:7d:a4:8a:24: db:be:fc:43:e0:39:80:25:71:a0:e3:5f:e4:8c:45: 67:ef:da:72:61:dc:f9:c8:f1:bc:70:d1:73:5a:5d: 89:7b:ba:02:e1:a2:a1:30:d9:8c:33:e1:96:74:b7: 08:fa:52:a6:63:bd:70:f8:cd:1b:79:f4:05:d8:f1: 55:5f:4e:d7:05:6e:75:85:df:79:c5:12:65:8d:7e: f0:c4:0d:27:91:76:70:69:25:f7:db:6b:0c:42:db: d7:d0:61:32:e9:35:24:f9:17:42:6a:c3:81:d2:80: 56:56:21:56:ca:3f:fc:1e:19:ca:23:86:85:c8:d5: c7:40:ee:3b:4a:84:f2:25:49:b1:36:51:b5:84:d6: a7:18:12:25:99:97:0e:b2:df:6d:76:b9:ce:3b:7c: 1a:49:77:88:70:53:ed:8b:db:d3:64:64:4b:d9:ba: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:27:1B:F4:F4:A2:F9:A7:29:F9:73:32:46:08:55:34:E3:E0:AA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af02d33-3818-363b-9ae2-bd31488eab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:65:0b:91:8e:97:81:40:f5:83:6e:2b:d5:a3:63:f7:6e:8a: 5b:78:b2:f4:a1:c0:7c:15:0b:29:cd:75:aa:a2:23:3e:10:fb: a5:c7:90:4a:f3:f5:33:ef:47:93:f0:06:86:02:af:2b:b2:ff: 93:96:73:26:5d:13:a7:09:25:43:82:85:38:ce:f1:ee:f3:9f: 08:d8:9e:e1:6e:1e:3d:b2:54:ae:c4:71:be:74:0a:55:7d:e5: 60:d7:d6:eb:d6:ba:a3:8d:8b:fd:2b:e5:00:0b:86:ae:26:69: d3:80:54:1b:d0:58:02:14:3c:e5:ce:1d:50:dc:0b:31:9c:5b: d5:02:91:83:37:07:8c:19:52:7c:5e:26:a5:03:07:01:f8:16: 9b:6e:88:db:50:6d:7f:99:e4:a5:40:a2:6e:03:1d:84:d5:6d: 6d:87:dd:06:35:b2:d2:d8:25:f7:33:a3:75:69:1c:c1:f2:3b: 1a:f8:6e:dd:0f:df:ac:4a:64:9f:20:d7:06:e2:99:86:db:fa: 95:0b:67:55:fa:9b:d0:f4:20:ae:1f:da:6e:bb:f2:06:58:11: f4:34:79:98:ee:73:ba:75:3f:d7:fa:f8:c3:15:aa:72:2f:ec: 7e:cf:ca:16:9d:9a:7f:e3:77:37:06:d2:d9:73:93:70:1b:2f: 5b:df:be:13 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1eGlyjbHeE8nRwBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NDE1OWI0YzYtNmJjNS00MjQ0LThlNjEtYmYwZDAzZGEzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSNwWrLtpaguDUrIBwxJ+DlVMlpfKB0aB59R S1mMlDmehHnCCYYQfNtJ088YfTG07uemFxUAVYcKM3bqcEqjWqC/QpcCSeRAFxXq L9DtV+fxurpJLH2kiiTbvvxD4DmAJXGg41/kjEVn79pyYdz5yPG8cNFzWl2Je7oC 4aKhMNmMM+GWdLcI+lKmY71w+M0befQF2PFVX07XBW51hd95xRJljX7wxA0nkXZw aSX322sMQtvX0GEy6TUk+RdCasOB0oBWViFWyj/8HhnKI4aFyNXHQO47SoTyJUmx NlG1hNanGBIlmZcOst9tdrnOO3waSXeIcFPti9vTZGRL2bq4VQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDYnG/T0ovmnKflzMkYIVTTj4Ko0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMDJkMzMtMzgxOC0z NjNiLTlhZTItYmQzMTQ4OGVhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAmULkY6XgUD1g24r1aNj926KW3iy9KHAfBULKc11qqIjPhD7pceQ SvP1M+9Hk/AGhgKvK7L/k5ZzJl0TpwklQ4KFOM7x7vOfCNie4W4ePbJUrsRxvnQK VX3lYNfW69a6o42L/SvlAAuGriZp04BUG9BYAhQ85c4dUNwLMZxb1QKRgzcHjBlS fF4mpQMHAfgWm26I21Btf5nkpUCibgMdhNVtbYfdBjWy0tgl9zOjdWkcwfI7Gvhu 3Q/frEpknyDXBuKZhtv6lQtnVfqb0PQgrh/abrvyBlgR9DR5mO5zunU/1/r4wxWq ci/sfs/KFp2af+N3NwbS2XOTcBsvW9++Ew== -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:36 2026 by rpki-client