$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7ab8b80-2c90-305e-8e88-401c840b317c.roa File: d7ab8b80-2c90-305e-8e88-401c840b317c.roa (raw, json) Hash identifier: pONQQjnMli+ysxLgd7pdAFWc5vWSaVlPEyoG8NfuyD4= Subject key identifier: 58:6E:04:B1:EA:77:3C:72:F6:54:6B:4F:66:2A:E8:AB:D5:67:2B:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CCFD73FB45FE3CA096F6CE350 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7ab8b80-2c90-305e-8e88-401c840b317c.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 19905 IP address blocks: 2604:2d80:f380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:3f:b4:5f:e3:ca:09:6f:6c:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=ed0ecec2-352e-485e-85ac-1dabd4435b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:03:16:e2:93:eb:76:eb:00:bc:c5:c3:70: 2d:af:69:21:a1:7a:17:b5:38:df:e1:48:ff:8b:c5: 1e:27:dd:83:40:ea:71:fb:5f:26:7c:21:ac:93:4f: 28:3e:8c:fb:e3:72:16:32:db:33:2a:7f:ce:a5:38: c5:a3:40:9a:81:a8:eb:f0:6f:0b:fd:05:5f:70:3f: 85:d8:94:fb:ae:4e:70:fb:e6:47:9c:2b:96:fc:dd: ad:a2:c2:b2:50:80:68:62:63:90:75:61:82:6c:85: ad:f7:b0:5b:30:ee:7f:0f:7b:50:48:e8:00:6c:ba: 3e:bd:b1:b3:c4:e1:95:29:10:c8:cd:3e:67:26:36: 84:21:a8:0c:41:88:0b:4e:35:e4:f4:05:72:c9:f6: 04:2e:d1:ac:6c:f1:9d:36:e0:e5:22:8c:8a:8c:8a: a9:c7:ae:fe:5d:89:6f:b8:24:7a:a0:05:0d:42:24: e0:72:bb:5f:a9:a4:b6:6a:d4:3b:16:f0:f1:b7:19: 89:91:36:4d:09:20:27:5f:db:e4:b2:8a:d7:4d:a5: bd:8f:6f:29:0a:e9:56:fa:87:5a:0b:aa:d0:84:70: f5:82:cd:63:98:73:e2:18:70:5e:76:de:ec:bb:2e: f3:67:6e:c7:68:5a:69:da:18:16:b2:77:fe:c8:c3: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6E:04:B1:EA:77:3C:72:F6:54:6B:4F:66:2A:E8:AB:D5:67:2B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d7ab8b80-2c90-305e-8e88-401c840b317c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:f380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:da:ba:25:49:45:7d:7b:11:33:1c:ab:5d:4d:eb:d3:ab:38: a0:66:00:df:c5:7e:54:8b:d6:1e:33:dd:6b:2b:dc:5c:94:84: aa:d5:fb:c3:d8:74:df:a3:b3:73:bd:9e:62:45:f2:f5:7d:84: c4:dd:8e:35:c7:88:2f:b5:1c:c5:44:2a:86:6c:2a:20:f8:7f: fd:f5:38:61:7c:c2:00:c7:25:83:5f:2e:e6:c5:26:e4:01:95: a2:3d:c4:13:ae:d4:ca:1d:26:15:e1:6a:77:38:9b:73:fe:a8: 1a:65:dd:8e:62:65:25:15:dc:ff:62:7f:5a:18:9d:b4:84:a3: d8:f1:b4:c4:a8:f4:3a:97:a4:4a:c1:02:e9:a5:f0:4f:fc:6f: 8d:e0:ef:c4:a0:e3:25:87:88:f4:ff:f9:b0:14:52:b1:ad:87: 3b:2b:2c:17:99:97:a4:0e:a9:ae:f7:eb:45:63:80:82:81:47: 36:f8:18:3c:2a:9c:3d:73:b2:7e:1d:46:99:8e:03:9f:6c:1d: 06:5a:44:b0:1e:97:2a:42:24:29:44:91:6e:50:f5:e0:a0:4e: ec:7a:0b:f6:a0:38:8a:9f:2e:77:f7:dd:f9:2d:5e:58:3d:c7: 22:ea:40:2b:a3:b4:4c:09:59:02:ea:7b:11:10:14:47:9a:88: 26:df:dc:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzP1z+0X+PKCW9s41AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZWQwZWNlYzItMzUyZS00ODVlLTg1YWMtMWRhYmQ0NDM1YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCUDFuKT63brALzFw3Atr2khoXoXtTjf4Uj/ i8UeJ92DQOpx+18mfCGsk08oPoz743IWMtszKn/OpTjFo0Cagajr8G8L/QVfcD+F 2JT7rk5w++ZHnCuW/N2tosKyUIBoYmOQdWGCbIWt97BbMO5/D3tQSOgAbLo+vbGz xOGVKRDIzT5nJjaEIagMQYgLTjXk9AVyyfYELtGsbPGdNuDlIoyKjIqpx67+XYlv uCR6oAUNQiTgcrtfqaS2atQ7FvDxtxmJkTZNCSAnX9vksorXTaW9j28pCulW+oda C6rQhHD1gs1jmHPiGHBedt7suy7zZ27HaFpp2hgWsnf+yMPY1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFhuBLHqdzxy9lRrT2Yq6KvVZyuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDdhYjhiODAtMmM5MC0z MDVlLThlODgtNDAxYzg0MGIzMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnauiVJRX17ETMcq11N69OrOKBmAN/FflSL1h4z3Wsr3FyUhKrV +8PYdN+js3O9nmJF8vV9hMTdjjXHiC+1HMVEKoZsKiD4f/31OGF8wgDHJYNfLubF JuQBlaI9xBOu1ModJhXhanc4m3P+qBpl3Y5iZSUV3P9if1oYnbSEo9jxtMSo9DqX pErBAuml8E/8b43g78Sg4yWHiPT/+bAUUrGthzsrLBeZl6QOqa7360VjgIKBRzb4 GDwqnD1zsn4dRpmOA59sHQZaRLAelypCJClEkW5Q9eCgTux6C/agOIqfLnf33fkt Xlg9xyLqQCujtEwJWQLqexEQFEeaiCbf3IA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:25 2026 by rpki-client