$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa File: 9d520890-b526-3c50-b3ff-deef74d89924.roa (raw, json) Hash identifier: np5XD7BO9k0OieGi5Ti90lhOG4MbDkI3GkQC5G1Xh1I= Subject key identifier: 12:04:B6:E6:16:A0:30:12:CC:D7:19:4F:50:19:D4:87:9E:69:B5:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647A5FBC8DC02CB5A056C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 2604:2d80:6e80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a5:fb:c8:dc:02:cb:5a:05:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=91a1901c-73e7-4997-b354-e71ba126ff38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:34:62:e3:61:b1:bf:5c:72:29:5a:6b:a4: 82:e3:be:bb:14:4a:41:b8:9c:f6:fc:1e:bd:cb:2d: e4:82:0c:a7:0b:ed:3f:b0:dc:5e:98:ef:d6:47:e1: 20:4f:7e:07:d2:6a:de:fe:fe:b3:3e:37:6d:10:35: 24:c2:2c:7d:59:19:5b:4e:32:0b:95:59:1e:94:c6: 89:b4:7e:e4:23:a0:51:ac:ef:e4:4d:37:0a:8a:ba: a9:9b:2f:29:2a:f8:d2:23:97:80:06:0c:78:97:41: 42:50:ed:36:94:35:3a:72:64:68:07:da:b2:9e:8d: 42:6b:17:73:aa:21:ac:75:74:7e:10:3c:d1:b5:95: af:88:30:14:10:09:e4:e5:87:87:20:f5:ef:ad:39: 0e:a3:7a:ec:44:f7:67:47:77:9b:23:49:c3:e0:78: de:b4:54:30:ab:92:70:7b:d7:b2:35:ee:b2:bb:14: 08:80:e1:84:90:e7:b8:72:82:9c:7d:13:f8:bb:13: 8d:df:31:07:91:03:f3:bf:1a:51:d3:72:12:a2:f6: 27:80:ca:6d:48:7e:4c:18:61:3e:3f:36:4b:f2:58: b9:fa:f4:07:70:d7:b6:d7:d9:be:da:3e:05:48:f7: fb:9d:d9:ee:ce:0e:a8:c2:d9:d8:1b:fe:b0:f8:81: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:B6:E6:16:A0:30:12:CC:D7:19:4F:50:19:D4:87:9E:69:B5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d520890-b526-3c50-b3ff-deef74d89924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6e80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fc:50:d6:44:60:81:f2:13:70:39:52:25:0f:48:e6:ef:5e: 0e:43:79:6a:ff:d6:86:ef:63:6f:56:ca:86:c5:77:35:b3:e8: 60:f2:06:e8:5a:84:3a:12:ad:b7:c8:6d:7d:ae:8d:ee:27:71: 55:5b:3a:90:83:f4:7e:f5:83:fd:cf:42:35:1f:02:bc:d3:f1: 75:0e:b6:fe:68:cd:d4:e2:27:9b:36:42:23:b1:9e:98:98:50: 4b:cf:5d:bc:de:1b:b1:95:16:56:0f:d4:81:82:e5:da:32:01: ee:b1:b0:ae:6b:20:e9:d8:83:1e:2d:bd:22:37:3d:9b:b6:e5: 53:05:03:81:5f:f8:c8:a6:fa:b9:13:e6:d3:94:2e:7a:f8:20: 6e:4e:79:ed:f4:a2:56:4b:0a:70:12:01:40:a0:29:da:a3:7b: c6:cf:28:9a:c0:39:31:e4:78:e7:c6:3b:57:d2:06:c1:ae:90: 40:82:cb:cd:88:7f:a7:2b:d4:01:54:d8:6c:0c:dd:a0:b6:da: 90:e9:e2:f7:f5:46:d9:c8:7b:68:58:8b:c3:8b:2f:2c:8c:3b: e2:94:88:2e:ce:2e:6e:58:d3:69:74:d6:2d:42:eb:3c:c3:4e: 38:f9:55:a4:ef:72:e5:62:2c:ea:59:91:01:d0:0e:74:ec:da: 10:a5:70:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR6X7yNwCy1oFbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTFhMTkwMWMtNzNlNy00OTk3LWIzNTQtZTcxYmExMjZmZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3M0YuNhsb9ccilaa6SC4767FEpBuJz2/B69 yy3kggynC+0/sNxemO/WR+EgT34H0mre/v6zPjdtEDUkwix9WRlbTjILlVkelMaJ tH7kI6BRrO/kTTcKirqpmy8pKvjSI5eABgx4l0FCUO02lDU6cmRoB9qyno1Caxdz qiGsdXR+EDzRtZWviDAUEAnk5YeHIPXvrTkOo3rsRPdnR3ebI0nD4HjetFQwq5Jw e9eyNe6yuxQIgOGEkOe4coKcfRP4uxON3zEHkQPzvxpR03ISovYngMptSH5MGGE+ PzZL8li5+vQHcNe219m+2j4FSPf7ndnuzg6owtnYG/6w+IHfFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIEtuYWoDASzNcZT1AZ1IeeabVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWQ1MjA4OTAtYjUyNi0z YzUwLWIzZmYtZGVlZjc0ZDg5OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgG6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACf8UNZEYIHyE3A5UiUPSObvXg5DeWr/1obvY29WyobFdzWz6GDy BuhahDoSrbfIbX2uje4ncVVbOpCD9H71g/3PQjUfArzT8XUOtv5ozdTiJ5s2QiOx npiYUEvPXbzeG7GVFlYP1IGC5doyAe6xsK5rIOnYgx4tvSI3PZu25VMFA4Ff+Mim +rkT5tOULnr4IG5Oee30olZLCnASAUCgKdqje8bPKJrAOTHkeOfGO1fSBsGukECC y82If6cr1AFU2GwM3aC22pDp4vf1RtnIe2hYi8OLLyyMO+KUiC7OLm5Y02l01i1C 6zzDTjj5VaTvcuViLOpZkQHQDnTs2hClcD0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:31 2026 by rpki-client