$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa File: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (raw, json) Hash identifier: Jzxn5pk9pZkEiCqVOqXR25Ds+5wQNt9NEqj88W0uPRw= Subject key identifier: C7:08:65:90:BD:7D:DB:C0:30:53:0B:25:AD:16:86:85:F8:05:D2:8E Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584D869558B44381A528DF913F00 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 62915 IP address blocks: 2607:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:58:b4:43:81:a5:28:df:91:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=81a1e427-2ae0-4117-87c9-dc29139d15e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:1c:9c:eb:40:39:72:8a:d0:6e:00:79:8d: e1:7c:f5:5e:c2:97:5a:ef:38:f5:a6:ef:f8:de:f4: 9d:c1:a7:03:9c:b1:a5:f4:0e:fb:52:16:ef:28:6a: 4d:08:aa:af:4b:f3:66:b4:9f:89:08:18:b3:64:6e: a4:ce:a4:48:7a:a9:2a:e1:05:e3:65:8d:45:41:3c: d9:d7:17:7b:fb:fa:67:b3:7c:04:88:06:35:83:8e: fb:18:12:28:6e:23:e8:7c:bb:be:40:60:29:c5:b5: 36:dd:0d:ab:35:c4:2c:86:3e:f6:e4:56:a8:6b:95: 76:72:d5:e8:30:f8:a9:1d:f1:33:2f:b3:5b:76:33: be:da:c7:c5:a0:e6:0e:68:d2:08:4e:f4:0a:4b:72: 83:57:fd:6c:70:1c:4f:e8:c9:1e:35:50:8e:b2:a6: f4:91:15:1a:6b:e8:76:f1:a6:89:ea:ac:0b:ca:02: 9b:8f:12:e6:3a:69:df:31:9a:7f:48:ab:93:95:e6: fa:5b:d7:3f:58:de:61:9c:82:0b:68:f5:09:28:10: bb:3c:b5:d5:72:cd:35:e4:75:46:9e:92:89:c2:40: 83:a0:4d:d1:9b:43:9e:1c:2a:2a:78:10:8f:76:89: 50:21:fd:5f:88:ce:6d:a7:2b:51:81:26:c6:cb:52: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:65:90:BD:7D:DB:C0:30:53:0B:25:AD:16:86:85:F8:05:D2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3541c324-e433-371b-be7a-faaf22fea4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv6: 2607:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:33:f0:d6:b2:6d:92:af:b2:44:e1:e6:b8:7f:4b:83:18:a9: fb:97:17:d6:bc:0a:d6:77:c3:61:d7:8a:eb:df:db:d5:a3:b2: 71:b1:d6:f6:d2:85:9e:2e:45:37:cc:81:3c:3e:7f:8a:9c:39: ca:07:78:44:90:c4:60:80:86:d9:53:a9:f3:96:4a:f4:0d:1e: 9b:43:ce:af:1d:60:ac:fe:d2:d6:a6:89:46:a9:88:0d:49:ef: 67:37:45:76:70:55:4c:17:b0:b3:32:20:02:0e:1e:be:67:9d: 67:60:74:5c:66:d9:ed:b5:38:1b:47:7f:5a:e0:10:1c:b9:9d: 61:25:1e:35:5b:0b:30:86:a3:76:ff:98:7d:f1:17:88:c9:dc: ca:7c:29:d1:52:61:81:e9:e1:98:5e:84:dd:0a:e6:3b:6e:2a: 1e:d7:42:1a:01:35:7e:a4:88:b6:47:88:ea:38:f7:bd:06:84: a8:be:72:a0:d3:38:e3:4b:53:c5:f3:61:88:3a:27:81:08:39: 07:3c:91:3b:0e:c2:2c:66:61:41:a0:5c:8b:76:3d:c0:9f:1e: 63:57:de:68:44:3b:46:a2:79:93:d7:31:60:d6:1b:e6:b3:04: ee:40:d6:c8:fe:de:cc:31:15:49:4b:9e:23:2e:3b:2f:fa:7c: e0:1f:a9:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2GlVi0Q4GlKN+RPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODFhMWU0MjctMmFlMC00MTE3LTg3YzktZGMyOTEzOWQxNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn0cnOtAOXKK0G4AeY3hfPVewpda7zj1pu/4 3vSdwacDnLGl9A77UhbvKGpNCKqvS/NmtJ+JCBizZG6kzqRIeqkq4QXjZY1FQTzZ 1xd7+/pns3wEiAY1g477GBIobiPofLu+QGApxbU23Q2rNcQshj725Faoa5V2ctXo MPipHfEzL7NbdjO+2sfFoOYOaNIITvQKS3KDV/1scBxP6MkeNVCOsqb0kRUaa+h2 8aaJ6qwLygKbjxLmOmnfMZp/SKuTleb6W9c/WN5hnIILaPUJKBC7PLXVcs015HVG npKJwkCDoE3Rm0OeHCoqeBCPdolQIf1fiM5tpytRgSbGy1IgfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMcIZZC9fdvAMFMLJa0WhoX4BdKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMzU0MWMzMjQtZTQzMy0z NzFiLWJlN2EtZmFhZjIyZmVhNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcM/DWsm2Sr7JE4ea4f0uDGKn7lxfWvArWd8Nh14rr39vVo7Jxsdb2 0oWeLkU3zIE8Pn+KnDnKB3hEkMRggIbZU6nzlkr0DR6bQ86vHWCs/tLWpolGqYgN Se9nN0V2cFVMF7CzMiACDh6+Z51nYHRcZtnttTgbR39a4BAcuZ1hJR41WwswhqN2 /5h98ReIydzKfCnRUmGB6eGYXoTdCuY7bioe10IaATV+pIi2R4jqOPe9BoSovnKg 0zjjS1PF82GIOieBCDkHPJE7DsIsZmFBoFyLdj3Anx5jV95oRDtGonmT1zFg1hvm swTuQNbI/t7MMRVJS54jLjsv+nzgH6mE -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:33 2026 by rpki-client