$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa File: 3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa (raw, json) Hash identifier: bcO+PuwwlYKZ+L70Kiio7j4tv/4xBT3whREg/V5QXdA= Subject key identifier: 54:4A:0D:75:F1:8B:D4:2E:D9:E1:7F:07:89:D4:C4:5A:DC:17:6A:ED Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584C470BBA2E1034AE47FABC4980 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 400097 IP address blocks: 2606:3d40:5d02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:ba:2e:10:34:ae:47:fa:bc:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=3d710fdd-b964-42f3-a6aa-1bb956957ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:91:da:06:4d:a5:04:a7:c9:76:a8:6a:0a: c4:33:b2:93:7e:3f:ea:db:e4:d8:ce:cb:1e:9d:6a: 5d:5d:20:30:fd:dd:94:36:be:9e:12:5f:57:5b:e4: da:ba:42:02:dd:a4:9e:a2:0d:67:e2:4a:24:6f:ce: 34:8e:7d:bd:a0:7a:b3:8c:e9:01:41:81:5a:14:4d: 59:f7:db:c2:84:18:d6:70:9e:41:d5:71:7c:97:ba: db:2a:be:44:b3:ac:d7:8d:a9:ee:82:53:51:a7:5e: a8:73:41:9c:ec:a9:14:6e:51:86:71:a2:7c:91:dd: 09:fe:c4:11:48:ef:a5:0e:52:18:31:41:09:2b:2c: e3:e9:36:3a:24:38:99:5a:17:06:6b:7c:5c:33:9b: 92:6b:a7:97:1e:a7:38:e5:85:a8:47:08:06:55:82: 18:11:02:32:4b:ce:16:3f:1e:d9:92:88:75:5b:de: 6c:26:ee:71:8f:ef:d1:a0:37:a2:f7:2a:ed:ac:13: 9f:3f:b9:03:64:47:76:25:c4:df:cf:da:67:cb:8f: 8c:6d:6a:38:fe:57:70:0d:b2:7c:c6:79:de:71:a4: 12:0b:3e:59:37:ad:64:ea:3c:9f:f8:8c:30:65:fb: 18:61:04:a1:3e:40:2b:45:2d:7c:10:6a:ab:2d:3c: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:0D:75:F1:8B:D4:2E:D9:E1:7F:07:89:D4:C4:5A:DC:17:6A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d02::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:41:80:e3:1a:4d:4d:e0:1f:69:8e:81:aa:7a:23:d6:6e:06: cb:5a:eb:b9:f3:6a:8f:23:0c:07:25:18:aa:4c:94:f7:12:b1: 0a:5f:1c:4f:a1:28:f1:7c:34:7c:f2:d5:af:f3:cf:cb:89:9d: 87:cf:63:f3:e1:8f:58:04:8e:a3:35:d9:08:a7:5f:03:ef:f8: bf:bb:0a:c3:a7:1b:0b:34:8f:94:28:74:f4:73:b6:16:c0:f5: 38:28:53:5f:7d:68:15:62:a8:df:58:72:a5:77:14:9a:bc:a3: 62:64:a3:16:cd:18:45:34:c6:11:9c:12:ae:ed:a5:0b:30:dd: 10:30:06:a6:ea:e1:f4:79:f4:f6:54:32:2a:e7:37:64:4c:2f: 5b:c8:23:89:c7:75:4e:eb:26:39:a1:6c:9f:f7:c5:55:de:28: c4:48:c5:71:f4:80:27:a6:30:02:4f:73:30:c4:09:5e:9e:37: b5:1d:f3:23:e6:b1:d7:44:ad:d7:e7:f0:d7:1c:66:a3:94:0b: 14:63:24:68:0f:08:10:c1:f0:86:7c:09:a8:b7:0d:83:01:d3: a7:23:a8:34:72:f0:72:b8:b9:c7:4a:f4:8d:04:c3:4b:d8:33: 79:de:ee:18:97:22:fd:1c:0a:ea:db:76:a6:05:cb:d1:9e:fd: 1d:a3:d5:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExHC7ouEDSuR/q8SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk M2Q3MTBmZGQtYjk2NC00MmYzLWE2YWEtMWJiOTU2OTU3ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodKR2gZNpQSnyXaoagrEM7KTfj/q2+TYzsse nWpdXSAw/d2UNr6eEl9XW+TaukIC3aSeog1n4kokb840jn29oHqzjOkBQYFaFE1Z 99vChBjWcJ5B1XF8l7rbKr5Es6zXjanuglNRp16oc0Gc7KkUblGGcaJ8kd0J/sQR SO+lDlIYMUEJKyzj6TY6JDiZWhcGa3xcM5uSa6eXHqc45YWoRwgGVYIYEQIyS84W Px7Zkoh1W95sJu5xj+/RoDei9yrtrBOfP7kDZEd2JcTfz9pny4+MbWo4/ldwDbJ8 xnnecaQSCz5ZN61k6jyf+IwwZfsYYQShPkArRS18EGqrLTyArwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFRKDXXxi9Qu2eF/B4nUxFrcF2rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvM2NmYmJiYjEtNjBjZi0z YWY0LTg1MjMtZjNiMjYyNjVhYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxBgOMaTU3gH2mOgap6I9ZuBsta67nzao8jDAclGKpMlPcSsQpf HE+hKPF8NHzy1a/zz8uJnYfPY/Phj1gEjqM12QinXwPv+L+7CsOnGws0j5QodPRz thbA9TgoU199aBViqN9YcqV3FJq8o2JkoxbNGEU0xhGcEq7tpQsw3RAwBqbq4fR5 9PZUMirnN2RML1vII4nHdU7rJjmhbJ/3xVXeKMRIxXH0gCemMAJPczDECV6eN7Ud 8yPmsddErdfn8NccZqOUCxRjJGgPCBDB8IZ8Cai3DYMB06cjqDRy8HK4ucdK9I0E w0vYM3ne7hiXIv0cCurbdqYFy9Ge/R2j1Zg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:22 2026 by rpki-client