$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa File: af258b90-914b-332d-8f1a-c71ceb351383.roa (raw, json) Hash identifier: kI9/Rwjj9IwvZkmPOVZ+zbnDlZ4cLN4z02pO2/fw3TI= Subject key identifier: 32:7E:AA:96:FD:12:C4:7C:73:9F:49:23:FA:E6:99:29:12:B5:5B:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAE5E7145425901174ED28C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d81:d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:71:45:42:59:01:17:4e:d2:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c0d9bf1a-50b2-47fb-8784-cf3a7ce8c26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:db:63:1b:5e:d8:ea:aa:93:59:cf:2f:28: aa:e3:8e:90:14:ca:88:bd:42:bd:10:e7:68:14:7b: ac:c1:54:4d:84:ae:19:36:9f:7b:20:31:97:fa:36: 5b:b3:ae:13:c4:df:9e:77:79:03:ac:bf:73:5f:ab: 4f:be:8a:fe:1f:18:46:fd:ab:7d:d4:23:19:d3:ac: b2:4c:24:bc:5a:87:06:0c:a4:41:e0:50:20:59:11: a4:e2:e6:e3:07:a4:6f:fa:a6:71:8f:2c:77:ce:30: 91:de:79:57:c3:5f:3b:67:3f:4e:b1:6c:0f:e5:b3: 8e:dd:57:6d:a0:7c:c9:7f:79:fe:e1:74:75:b5:8c: e2:15:29:14:40:a2:96:ad:ec:d5:ff:81:ce:51:57: 32:21:e5:2f:43:cb:91:ac:bd:01:c2:52:a1:27:cb: f6:a3:c7:9e:43:8a:04:8c:4b:5d:33:4a:7a:1d:f2: a1:96:5a:17:d3:90:e6:a8:1b:07:a6:06:c8:b8:55: 3e:3a:7c:60:1b:5f:32:d9:1c:b9:ea:e1:04:60:7a: 77:d4:ee:b8:6a:f9:b3:a4:46:f1:93:7c:ec:48:28: 34:fe:1e:e9:24:95:2f:3c:e9:95:23:5d:31:fb:5c: c8:a3:6c:1c:87:fe:4f:21:84:61:9e:d5:56:9f:48: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:AA:96:FD:12:C4:7C:73:9F:49:23:FA:E6:99:29:12:B5:5B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af258b90-914b-332d-8f1a-c71ceb351383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:85:aa:37:f3:c3:fe:4e:a1:63:f4:18:e0:86:cb:d1:4a:24: 64:75:45:fb:b6:4a:5c:98:3e:d4:3e:a3:af:0a:d7:1e:5e:8e: fd:d6:5a:84:48:96:61:7a:ef:a4:91:d2:f6:44:8f:30:1d:43: 5d:f8:cf:b6:5c:11:a7:f4:6c:91:1b:18:6d:62:97:f6:a5:46: da:52:4d:b4:03:1b:18:62:17:fe:a1:5d:da:27:0a:29:ba:ea: 5b:12:bb:34:6a:47:1b:8c:57:eb:b1:cb:da:d6:10:4b:5d:dd: d7:4b:4b:2a:30:34:ce:e3:47:58:29:ff:65:15:08:50:53:75: bd:66:a9:c5:b1:8c:6f:f0:5c:55:87:40:be:c4:27:23:35:59: c1:f6:e9:12:2b:93:90:08:00:cb:88:8e:3e:24:21:3b:78:86: 06:ef:a9:fc:39:35:01:bd:e8:cf:c7:ce:18:46:b1:73:94:e4: 13:3e:f9:a7:7b:0a:a1:01:47:b5:5c:37:97:da:a0:2d:1a:55: 86:33:c9:a7:a7:f7:16:cd:e8:9f:34:61:d6:df:86:2f:32:31: bf:67:6c:ab:b7:e6:14:81:19:24:02:f5:ee:9e:bc:82:e8:75: d8:05:eb:bf:a7:cd:6a:7f:0c:07:ac:5b:97:1d:b2:af:41:c5: 51:ad:fc:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuXnFFQlkBF07SjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzBkOWJmMWEtNTBiMi00N2ZiLTg3ODQtY2YzYTdjZThjMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ivbYxte2Oqqk1nPLyiq446QFMqIvUK9EOdo FHuswVRNhK4ZNp97IDGX+jZbs64TxN+ed3kDrL9zX6tPvor+HxhG/at91CMZ06yy TCS8WocGDKRB4FAgWRGk4ubjB6Rv+qZxjyx3zjCR3nlXw187Zz9OsWwP5bOO3Vdt oHzJf3n+4XR1tYziFSkUQKKWrezV/4HOUVcyIeUvQ8uRrL0BwlKhJ8v2o8eeQ4oE jEtdM0p6HfKhlloX05DmqBsHpgbIuFU+OnxgG18y2Ry56uEEYHp31O64avmzpEbx k3zsSCg0/h7pJJUvPOmVI10x+1zIo2wch/5PIYRhntVWn0gt0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJ+qpb9EsR8c59JI/rmmSkStVsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYyNThiOTAtOTE0Yi0z MzJkLThmMWEtYzcxY2ViMzUxMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQ0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6Fqjfzw/5OoWP0GOCGy9FKJGR1Rfu2SlyYPtQ+o68K1x5ejv3W WoRIlmF676SR0vZEjzAdQ134z7ZcEaf0bJEbGG1il/alRtpSTbQDGxhiF/6hXdon Cim66lsSuzRqRxuMV+uxy9rWEEtd3ddLSyowNM7jR1gp/2UVCFBTdb1mqcWxjG/w XFWHQL7EJyM1WcH26RIrk5AIAMuIjj4kITt4hgbvqfw5NQG96M/HzhhGsXOU5BM+ +ad7CqEBR7VcN5faoC0aVYYzyaen9xbN6J80Ydbfhi8yMb9nbKu35hSBGSQC9e6e vILoddgF67+nzWp/DAesW5cdsq9BxVGt/Js= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:22 2026 by rpki-client