$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa File: cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa (raw, json) Hash identifier: aKQv3T0SFciITC8+Yo9XLvuKgZkQ7AqsJPpUahKf9RU= Subject key identifier: 50:A0:51:10:F4:C3:CF:0A:A3:C7:44:71:E3:B2:29:75:F0:5E:30:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAFBC847E16CC89827A1D1680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d81:2000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:84:7e:16:cc:89:82:7a:1d:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=ea694857-9ebb-491c-8e2c-5bcbe0ccbf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ab:3e:ed:eb:aa:8a:25:26:55:f0:5d:87:99: 3a:54:da:38:42:27:b9:93:e1:ea:04:e3:b0:59:11: b2:56:9b:81:5e:e5:7b:7b:6a:83:23:e8:11:29:9f: 04:01:ce:b9:77:ae:75:8d:07:c0:17:18:8c:19:55: 01:e1:a0:86:55:4d:0e:5e:b6:58:d6:74:71:9a:86: c6:36:d1:4c:17:b1:00:e2:e0:01:a1:72:aa:dd:f9: cb:c2:bb:cb:77:bd:36:65:52:ba:10:cd:45:94:77: b4:4f:47:f2:67:5b:f6:c0:ab:2c:e3:7c:7d:f5:6b: d7:88:7f:63:ca:d3:fe:0e:e4:53:47:27:9d:55:06: ec:1f:e1:48:17:8e:10:95:d8:55:2a:de:ba:7e:56: c7:ca:a1:56:9b:8f:97:c7:6f:5c:fb:9a:f6:45:db: af:fe:5e:ef:75:9e:84:e4:c5:e2:a5:ab:8c:68:24: d0:f4:24:0e:10:ab:be:64:ab:03:b2:54:f7:f3:45: 0c:4d:c7:e8:cc:f9:ee:1e:d2:27:12:42:6c:a2:41: bf:49:b0:8e:d9:ad:08:61:42:21:5a:63:95:65:73: 79:51:df:80:82:fd:3b:24:58:c6:a7:8a:b5:45:0a: 43:f0:90:6a:bb:5e:8d:be:e1:9c:0c:cc:c4:4f:34: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A0:51:10:F4:C3:CF:0A:A3:C7:44:71:E3:B2:29:75:F0:5E:30:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0a:b8:97:a9:d9:10:e1:cf:d1:9b:e5:d0:d8:aa:af:8a:c9: dd:38:36:44:6b:00:89:61:73:f0:08:59:89:b3:76:94:6b:b8: 64:0f:eb:4c:5b:e3:5d:a0:8d:b8:3f:01:a7:66:97:2d:cd:ab: da:bf:04:7c:2b:98:ed:a7:1d:10:e6:aa:2d:a9:31:5e:0d:5f: 2b:f9:c1:93:1f:40:23:98:a7:98:b8:21:44:32:5b:1f:b9:0f: 3c:d9:19:7c:9b:17:05:30:0e:aa:fc:aa:04:93:68:e4:d1:b7: 00:40:84:66:ed:43:b0:3d:17:05:8c:61:ef:d6:2d:12:9a:c0: 2f:36:75:11:e1:e5:9f:b3:29:48:64:bb:48:79:46:e5:6f:23: 30:51:01:6f:82:ca:eb:a0:eb:17:be:65:c9:b3:65:06:68:24: 10:76:98:fc:e3:bf:64:73:74:08:01:94:7f:4d:df:44:49:14: da:e2:1e:b3:ae:01:d0:79:35:5b:4d:c8:92:bf:2e:26:65:0b: 14:6a:05:f1:a1:9d:00:cd:c2:9a:c7:db:c8:5c:f4:f4:5c:1b: 71:89:c4:69:59:65:b6:9f:f6:5e:10:37:f8:9d:c1:9f:bf:dd: e6:22:60:67:d4:2a:f7:c5:a5:20:a6:e6:fc:03:36:ff:4d:9c: b9:da:ec:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyvvIR+FsyJgnodFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZWE2OTQ4NTctOWViYi00OTFjLThlMmMtNWJjYmUwY2NiZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqs+7euqiiUmVfBdh5k6VNo4Qie5k+HqBOOw WRGyVpuBXuV7e2qDI+gRKZ8EAc65d651jQfAFxiMGVUB4aCGVU0OXrZY1nRxmobG NtFMF7EA4uABoXKq3fnLwrvLd702ZVK6EM1FlHe0T0fyZ1v2wKss43x99WvXiH9j ytP+DuRTRyedVQbsH+FIF44QldhVKt66flbHyqFWm4+Xx29c+5r2Rduv/l7vdZ6E 5MXipauMaCTQ9CQOEKu+ZKsDslT380UMTcfozPnuHtInEkJsokG/SbCO2a0IYUIh WmOVZXN5Ud+Agv07JFjGp4q1RQpD8JBqu16NvuGcDMzETzTogQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCgURD0w88Ko8dEceOyKXXwXjDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2NlMWFjZWMtOWVlZS0z YjdkLTllZDQtZTVhOTA3M2I3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACsKuJep2RDhz9Gb5dDYqq+Kyd04NkRrAIlhc/AIWYmzdpRruGQP 60xb412gjbg/Aadmly3Nq9q/BHwrmO2nHRDmqi2pMV4NXyv5wZMfQCOYp5i4IUQy Wx+5DzzZGXybFwUwDqr8qgSTaOTRtwBAhGbtQ7A9FwWMYe/WLRKawC82dRHh5Z+z KUhku0h5RuVvIzBRAW+Cyuug6xe+ZcmzZQZoJBB2mPzjv2RzdAgBlH9N30RJFNri HrOuAdB5NVtNyJK/LiZlCxRqBfGhnQDNwprH28hc9PRcG3GJxGlZZbaf9l4QN/id wZ+/3eYiYGfUKvfFpSCm5vwDNv9NnLna7Ic= -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:21 2026 by rpki-client