$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa File: b3b36a6f-7823-353f-b2f2-01f7e007a168.roa (raw, json) Hash identifier: rteAvQgcHI7ccTkIKHmhpcQ+vaOOKgsDRE/O3J165os= Subject key identifier: 3F:6A:A1:7E:58:24:F8:07:13:5D:84:53:2A:BD:35:6A:4D:50:6E:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D4D0110D198E854EF258ECD48 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa Signing time: Thu 26 Mar 2026 22:00:58 +0000 ROA not before: Thu 26 Mar 2026 22:00:58 +0000 ROA not after: Wed 24 Jun 2026 22:00:58 +0000 asID: 30036 IP address blocks: 2604:2d80:d300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:01:10:d1:98:e8:54:ef:25:8e:cd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 26 22:00:58 2026 GMT Not After : Jun 24 22:00:58 2026 GMT Subject: CN=98f40ea2-8aab-4349-9ac2-7f9a4edf76d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:ac:0d:97:06:9e:5b:62:af:51:02:03:65: fe:b4:4d:7b:b7:05:3a:c4:07:e2:18:ed:fa:2e:e3: e2:77:98:ff:e6:71:27:ab:a3:0a:32:24:a1:64:70: 43:2a:13:d5:b3:c1:ae:81:92:86:8c:19:11:60:58: 1b:24:93:d2:24:f1:68:07:5f:39:c3:73:c5:56:fe: 10:64:c5:19:6e:96:51:72:c1:ba:85:3b:58:87:9d: 6d:72:33:20:a6:ab:8b:2e:8a:ea:5b:67:ac:dc:72: 27:57:91:de:65:0b:71:b2:d2:7e:e9:ea:eb:7f:36: e7:14:4e:52:c7:cc:27:25:b7:53:c8:a4:31:1f:df: 8a:f5:ad:e2:75:5e:e4:c8:e3:cf:4e:ed:1f:c9:fb: 1a:06:ec:68:60:44:fa:54:39:cf:55:e6:e1:e7:cc: 31:6a:a2:82:bd:da:31:bb:8a:36:bd:b0:ee:18:06: 9e:7e:a9:9a:d3:83:84:e6:28:3d:35:df:38:ae:cf: 51:07:90:34:c9:13:c0:02:0b:02:d8:15:03:5c:a1: e3:c0:c8:3c:85:27:69:ac:c3:e2:b0:c2:c7:d3:a6: 12:28:cc:79:ee:fa:de:16:e1:7b:dc:3f:7c:c1:b2: 36:8c:fd:a6:9b:24:d9:86:25:5b:32:15:b8:e6:35: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:A1:7E:58:24:F8:07:13:5D:84:53:2A:BD:35:6A:4D:50:6E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b3b36a6f-7823-353f-b2f2-01f7e007a168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d4:a1:96:7f:bb:b7:e0:2b:df:55:3b:c3:11:2e:4f:9b:28: d7:d1:01:37:49:ae:3a:20:f9:a6:d1:55:df:7b:9e:f8:8c:08: fb:7e:a0:98:1a:8f:c5:91:92:2b:6f:9f:a1:be:79:ba:33:7e: b4:4f:9d:fe:53:ce:e0:d8:ac:95:c8:e0:91:81:2f:e8:a2:41: 08:fa:1e:03:e3:34:9c:78:19:02:b8:ee:f1:e1:d1:cf:fb:53: 2c:55:c4:10:2e:66:60:e3:de:97:34:ab:cd:08:36:fa:3c:b6: 1d:83:07:8e:c9:53:d6:3d:f6:be:f0:f3:8b:2a:50:f5:81:21: 8a:50:80:81:cc:16:8d:65:05:16:fe:7e:e5:b0:65:0a:df:b6: da:89:62:2a:54:a1:e6:c2:38:db:91:34:94:53:98:98:d6:32: fe:9b:27:e8:76:8e:4a:71:10:5f:43:31:46:3d:18:ec:3e:45: e6:0a:7b:ff:27:5c:59:38:a2:d3:5f:2d:3f:f1:e4:06:6f:8a: 6f:6a:6b:6c:06:a5:cc:79:a7:eb:65:3f:7d:1e:b9:c4:22:ae: b2:ab:f4:a6:b0:27:54:ca:ac:3b:ed:9e:46:f1:7e:b7:bc:09: 8f:88:1c:45:7d:cb:4b:a3:39:7b:e7:0a:38:e9:b9:bd:86:6b: 22:7f:70:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NARDRmOhU7yWOzUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNjIyMDA1OFoXDTI2MDYyNDIyMDA1OFowLzEtMCsGA1UEAxMk OThmNDBlYTItOGFhYi00MzQ5LTlhYzItN2Y5YTRlZGY3NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/ysDZcGnltir1ECA2X+tE17twU6xAfiGO36 LuPid5j/5nEnq6MKMiShZHBDKhPVs8GugZKGjBkRYFgbJJPSJPFoB185w3PFVv4Q ZMUZbpZRcsG6hTtYh51tcjMgpquLLorqW2es3HInV5HeZQtxstJ+6errfzbnFE5S x8wnJbdTyKQxH9+K9a3idV7kyOPPTu0fyfsaBuxoYET6VDnPVebh58wxaqKCvdox u4o2vbDuGAaefqma04OE5ig9Nd84rs9RB5A0yRPAAgsC2BUDXKHjwMg8hSdprMPi sMLH06YSKMx57vreFuF73D98wbI2jP2mmyTZhiVbMhW45jVK2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9qoX5YJPgHE12EUyq9NWpNUG4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjNiMzZhNmYtNzgyMy0z NTNmLWIyZjItMDFmN2UwMDdhMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3UoZZ/u7fgK99VO8MRLk+bKNfRATdJrjog+abRVd97nviMCPt+ oJgaj8WRkitvn6G+ebozfrRPnf5TzuDYrJXI4JGBL+iiQQj6HgPjNJx4GQK47vHh 0c/7UyxVxBAuZmDj3pc0q80INvo8th2DB47JU9Y99r7w84sqUPWBIYpQgIHMFo1l BRb+fuWwZQrfttqJYipUoebCONuRNJRTmJjWMv6bJ+h2jkpxEF9DMUY9GOw+ReYK e/8nXFk4otNfLT/x5AZvim9qa2wGpcx5p+tlP30eucQirrKr9KawJ1TKrDvtnkbx fre8CY+IHEV9y0ujOXvnCjjpub2GayJ/cMg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:34 2026 by rpki-client