$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8be9bc3e-8360-34fd-85e3-a7f8ead4f4b1.roa File: 8be9bc3e-8360-34fd-85e3-a7f8ead4f4b1.roa (raw, json) Hash identifier: Zo8PlZbBdmZ54zbDWz2tehwsCKtporRoLUR4KHbc7kY= Subject key identifier: 53:F1:F2:ED:06:52:A6:BE:40:09:33:D8:49:29:9D:AE:2C:5D:BB:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647B9FC6E2EC790E1D347C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8be9bc3e-8360-34fd-85e3-a7f8ead4f4b1.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 2604:2d80:5100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b9:fc:6e:2e:c7:90:e1:d3:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=46e7e8e8-5a57-497a-aac0-11ec12417aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:fc:d7:59:98:3f:7f:fe:36:08:c1:80:0c: 51:fc:4c:74:68:17:45:65:59:ca:8a:b8:57:68:2b: a7:a6:12:7b:f0:e3:13:36:8c:88:45:39:33:51:30: 43:0b:b9:e7:f1:01:a9:72:9a:0c:bb:b6:0d:21:e8: 09:b8:b2:04:bb:8b:35:85:b8:cc:1b:b8:5b:43:81: 1b:43:72:97:8a:18:b7:f5:5d:e3:7f:94:0d:87:87: 24:8c:c1:bb:bf:96:fa:99:93:d4:6f:9d:99:50:5b: 52:a9:c7:35:49:84:0a:b5:ec:14:61:c1:94:95:97: 6c:54:41:39:16:0a:8b:5b:c9:4c:67:20:c3:9c:cf: 42:a0:c6:ed:43:53:42:c2:51:5d:e4:e6:4d:1c:59: 29:91:76:6c:13:f4:8f:ec:a7:11:86:64:99:78:75: 18:10:e8:2f:d4:c3:45:5f:b6:ad:85:77:33:90:ca: 93:a9:00:ad:e5:3e:1a:e8:c2:17:31:be:2d:ed:79: 5f:4f:2d:64:0f:09:02:cb:14:b0:96:d8:ce:eb:48: 0b:75:a6:ab:ed:35:12:63:31:35:38:a8:b4:b3:49: 30:b3:f2:60:17:5f:1e:b7:e0:8f:c1:7c:cd:22:28: 3f:d6:80:cf:55:2a:92:95:77:22:f2:c8:d9:e6:24: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F1:F2:ED:06:52:A6:BE:40:09:33:D8:49:29:9D:AE:2C:5D:BB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8be9bc3e-8360-34fd-85e3-a7f8ead4f4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e4:8f:2b:a9:95:3e:ab:d9:1e:00:99:03:48:72:ba:39:cc: 21:3e:e8:24:be:d1:48:7d:53:80:39:cc:c4:0b:cd:d3:2f:27: 1c:9e:26:c5:42:64:e3:14:39:a3:09:bf:60:6f:52:a3:34:d3: 24:03:55:b8:9b:5c:70:5a:0c:4b:bc:a0:73:08:d6:60:73:33: a1:db:2f:e1:12:09:f7:59:8e:55:b7:ea:47:15:9b:79:e0:8a: 39:b2:f8:8b:40:fe:50:2e:8b:97:43:3a:ab:3f:85:dc:98:80: 29:51:e6:99:3e:59:89:f2:54:8a:ad:cf:d4:3b:f2:18:3d:ed: a5:f3:98:8f:50:0c:7f:49:7e:58:a0:f6:da:68:4a:c5:dc:aa: 61:22:de:e2:70:9e:87:3f:8a:54:63:2a:72:42:ed:c1:e8:dd: 89:58:ea:1b:89:03:7e:96:75:b4:91:b7:33:d7:a2:20:f2:2b: 98:21:02:08:49:b8:40:7e:54:58:07:36:e4:2d:c7:e3:74:ab: 78:71:26:46:2a:96:f6:4d:72:3e:7a:81:51:b8:c9:da:7a:72: b3:7c:e7:99:9b:f1:86:e1:cd:cb:0b:75:f3:d7:af:a6:1d:55: 34:ac:7a:89:57:6b:57:da:0f:22:12:8d:88:1a:c3:20:c3:aa: 24:d6:69:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR7n8bi7HkOHTR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NDZlN2U4ZTgtNWE1Ny00OTdhLWFhYzAtMTFlYzEyNDE3YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsID811mYP3/+NgjBgAxR/Ex0aBdFZVnKirhX aCunphJ78OMTNoyIRTkzUTBDC7nn8QGpcpoMu7YNIegJuLIEu4s1hbjMG7hbQ4Eb Q3KXihi39V3jf5QNh4ckjMG7v5b6mZPUb52ZUFtSqcc1SYQKtewUYcGUlZdsVEE5 FgqLW8lMZyDDnM9CoMbtQ1NCwlFd5OZNHFkpkXZsE/SP7KcRhmSZeHUYEOgv1MNF X7athXczkMqTqQCt5T4a6MIXMb4t7XlfTy1kDwkCyxSwltjO60gLdaar7TUSYzE1 OKi0s0kws/JgF18et+CPwXzNIig/1oDPVSqSlXci8sjZ5iSipQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPx8u0GUqa+QAkz2Ekpna4sXbsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGJlOWJjM2UtODM2MC0z NGZkLTg1ZTMtYTdmOGVhZDRmNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnkjyuplT6r2R4AmQNIcro5zCE+6CS+0Uh9U4A5zMQLzdMvJxye JsVCZOMUOaMJv2BvUqM00yQDVbibXHBaDEu8oHMI1mBzM6HbL+ESCfdZjlW36kcV m3ngijmy+ItA/lAui5dDOqs/hdyYgClR5pk+WYnyVIqtz9Q78hg97aXzmI9QDH9J flig9tpoSsXcqmEi3uJwnoc/ilRjKnJC7cHo3YlY6huJA36WdbSRtzPXoiDyK5gh AghJuEB+VFgHNuQtx+N0q3hxJkYqlvZNcj56gVG4ydp6crN855mb8YbhzcsLdfPX r6YdVTSseolXa1faDyISjYgawyDDqiTWaTE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:52 2026 by rpki-client