$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa File: bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa (raw, json) Hash identifier: yb2NktJds1lA470zlCmN53O5a1q7JBpngEAqKK1vxnM= Subject key identifier: 16:03:01:A7:76:77:ED:69:30:1C:0E:91:2C:78:F2:54:DA:F5:BB:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D04E236F7F4BE86929EF66950 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2d81:380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:36:f7:f4:be:86:92:9e:f6:69:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=9e8faf21-40ab-4218-bd89-32fcdcd86741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:59:8b:0b:ed:16:8b:35:27:39:ac:ca:60: 72:37:ba:30:77:73:14:d6:04:78:8b:c9:f6:92:8e: 5c:e1:c3:af:b8:4f:d3:58:a5:0c:94:a9:ed:b8:39: 0e:d1:51:10:97:1e:96:08:7c:97:f3:67:70:c3:b3: 8d:f1:4d:e2:54:af:2e:07:4c:b0:10:dd:3e:e5:50: a7:15:ab:3a:f4:00:62:84:2e:c6:b2:f5:64:cf:c3: 8f:58:e7:2f:d0:bb:98:ca:04:42:b6:c7:8c:11:fc: df:fe:b7:64:0b:eb:80:aa:bf:f0:1d:0f:67:ca:e3: a0:d4:d2:08:71:f9:77:20:0f:e1:45:4b:05:3c:a0: b4:01:1e:3c:30:43:54:45:9c:04:b7:0e:4b:b4:ef: b7:03:ae:36:db:98:bd:e5:dd:30:55:22:05:3e:2d: 89:7f:63:b5:ac:8a:6a:3f:c5:33:13:29:cc:10:01: bf:15:70:47:65:88:d2:b9:c7:63:8d:ee:94:e0:3d: ca:82:ff:bf:76:38:5d:b4:bc:e4:af:b3:a2:fd:8a: 4a:ba:80:27:79:18:e2:38:33:f4:86:37:0a:82:d3: c5:4e:a7:a3:f4:a2:8a:0d:4d:b3:17:e0:81:99:bc: d0:16:7c:a0:cc:ad:44:d0:dc:86:be:7c:44:dc:21: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:01:A7:76:77:ED:69:30:1C:0E:91:2C:78:F2:54:DA:F5:BB:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0a:45:1b:e1:4e:5e:1c:d7:ec:c3:99:99:30:3c:74:07:8b: 7c:77:d7:f2:eb:a2:30:8b:2f:2f:fd:b5:2d:23:93:c5:83:a8: a2:f5:9e:a8:91:45:8c:55:8f:ab:c7:ba:4b:97:6c:38:ac:23: ec:31:23:f7:7c:a7:bf:b4:29:3f:a8:0a:a9:a8:96:c5:c3:fb: c6:5f:bc:5b:df:2d:f6:e2:11:03:be:2b:e9:56:fa:3e:67:f8: 84:db:1f:d4:fe:f0:a9:98:a1:8b:93:ad:fb:18:2f:87:2f:ca: 2c:b5:5c:2e:52:6f:06:08:77:f1:67:38:26:09:9d:b4:13:e7: 86:82:92:f0:b6:60:5c:b0:41:c8:48:8e:18:37:61:f1:b4:1e: 47:1a:20:d2:87:43:1b:2d:cf:b3:f0:90:38:8e:f8:00:81:d2: 89:4d:d0:c5:bf:c7:6e:65:88:f2:2e:b6:17:7d:d1:73:7d:5f: bb:42:e7:3d:e0:e4:e4:60:73:c5:84:97:77:df:92:0f:b0:3c: 9c:c6:aa:2b:30:54:8d:d1:48:58:3b:e2:ae:bf:93:19:97:63: fb:67:4b:6a:0e:d0:1f:00:5c:74:c1:a9:ab:26:1e:55:4d:db: 05:11:e7:02:b1:3c:0f:2f:75:ff:64:d1:78:83:cc:43:39:37: e9:9d:d5:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0E4jb39L6Gkp72aVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWU4ZmFmMjEtNDBhYi00MjE4LWJkODktMzJmY2RjZDg2NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIZZiwvtFos1JzmsymByN7owd3MU1gR4i8n2 ko5c4cOvuE/TWKUMlKntuDkO0VEQlx6WCHyX82dww7ON8U3iVK8uB0ywEN0+5VCn Fas69ABihC7GsvVkz8OPWOcv0LuYygRCtseMEfzf/rdkC+uAqr/wHQ9nyuOg1NII cfl3IA/hRUsFPKC0AR48MENURZwEtw5LtO+3A64225i95d0wVSIFPi2Jf2O1rIpq P8UzEynMEAG/FXBHZYjSucdjje6U4D3Kgv+/djhdtLzkr7Oi/YpKuoAneRjiODP0 hjcKgtPFTqej9KKKDU2zF+CBmbzQFnygzK1E0NyGvnxE3CHbQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYDAad2d+1pMBwOkSx48lTa9btLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZkOWJmOGQtYjZlMy0z ZDAzLTliODQtMGY3NDgwN2ZmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQKRRvhTl4c1+zDmZkwPHQHi3x31/LrojCLLy/9tS0jk8WDqKL1 nqiRRYxVj6vHukuXbDisI+wxI/d8p7+0KT+oCqmolsXD+8ZfvFvfLfbiEQO+K+lW +j5n+ITbH9T+8KmYoYuTrfsYL4cvyiy1XC5SbwYId/FnOCYJnbQT54aCkvC2YFyw QchIjhg3YfG0HkcaINKHQxstz7PwkDiO+ACB0olN0MW/x25liPIuthd90XN9X7tC 5z3g5ORgc8WEl3ffkg+wPJzGqiswVI3RSFg74q6/kxmXY/tnS2oO0B8AXHTBqasm HlVN2wUR5wKxPA8vdf9k0XiDzEM5N+md1Zc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:38:40 2026 by rpki-client