$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa File: 8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa (raw, json) Hash identifier: mjz+izokq0PG01WqQruKG8LIL1ZeLTk03TfHHNuZc4E= Subject key identifier: 4F:7A:1A:10:64:D2:60:07:0C:4A:BD:D3:A5:CB:75:26:FD:B2:53:9E Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584D55BA43938077CBACD87DF940 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 64236 IP address blocks: 2604:2d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:43:93:80:77:cb:ac:d8:7d:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=86fdab3b-8633-4bae-8f59-09e6e56a8676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:dd:dd:81:e1:60:07:33:e2:fa:ba:40:78: d1:1a:b5:bd:d9:a6:fd:63:ab:f5:d8:08:69:7b:1e: f5:f0:aa:d8:a2:c1:4a:9c:da:8a:f4:ce:78:6d:78: 56:4e:93:a3:74:b4:45:64:a8:91:04:4b:5d:f7:b1: 0e:5d:3d:c5:e9:cd:8b:a1:09:ba:b8:16:4f:d9:54: 22:6c:74:45:de:e1:56:5b:69:13:59:5f:85:aa:9a: b9:66:66:59:cc:83:b9:9c:5d:f8:4d:6d:3d:74:bd: 2e:8c:0e:f3:1b:34:4b:22:98:83:96:4e:6c:56:2a: a8:31:53:68:e1:d3:28:73:e4:04:7b:dd:98:ff:2e: c4:ff:d9:49:c3:9d:e6:3b:88:cd:8c:9e:d2:2e:cf: 1f:bf:d9:1d:52:ce:98:0b:a1:c6:7c:76:a4:10:b8: e5:84:c7:bb:23:44:39:d9:5a:c8:0d:a5:d1:b6:9f: 64:88:69:5f:8a:4b:6c:61:37:b3:02:38:8b:dc:b6: 66:18:e9:e7:73:3f:45:b8:23:83:18:4e:5d:4b:b8: f6:68:1c:82:b6:13:e7:d5:fb:01:56:ae:28:5d:79: be:33:24:22:1b:c2:9d:8e:79:0e:13:78:c4:3d:8c: 0d:5b:ad:8e:e5:53:e4:12:03:38:12:b5:52:8e:39: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:1A:10:64:D2:60:07:0C:4A:BD:D3:A5:CB:75:26:FD:B2:53:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d00::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4f:a0:68:39:8d:22:a8:a0:fc:d0:85:8e:46:3d:bc:e9:4e: 7d:cb:e9:af:46:76:b5:94:e0:a0:a3:26:5d:77:2b:e2:ec:d7: f9:35:de:cc:dc:5c:4f:29:4b:04:e7:d6:a0:4a:90:39:40:65: b9:49:aa:d9:5a:3a:49:ad:73:ad:db:66:4a:ae:9c:c3:8c:46: 52:98:85:6a:a0:59:ef:3b:d1:cd:03:9f:c4:ee:08:b8:8a:a8: 01:a7:27:d6:52:ef:28:7d:81:f5:b7:af:a9:9d:2e:f5:ae:3f: d1:74:6a:83:01:d3:30:f6:a9:84:2d:8a:88:26:f8:48:9b:50: 42:24:50:dd:79:a9:29:2b:56:8e:f0:e1:04:4e:e0:39:85:91: 18:8d:14:bd:5f:8b:b9:3b:45:fe:68:db:22:d9:fa:5d:d3:92: 4c:b9:6c:39:c7:37:b4:12:15:d4:19:e1:d3:08:1a:f7:4a:80: 24:fc:f7:6f:a4:1e:83:d2:0b:ca:3d:19:43:6a:3d:23:8a:95: dd:a6:a0:66:a0:37:42:32:24:48:10:08:9a:31:da:23:ed:ae: 43:b2:f0:1c:ab:3c:bd:a3:53:7f:4b:34:6c:dc:06:3e:b9:96: 11:7c:14:cf:10:6b:97:95:eb:42:34:dc:2e:55:89:9d:6a:d7: f5:96:dc:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1VukOTgHfLrNh9+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODZmZGFiM2ItODYzMy00YmFlLThmNTktMDllNmU1NmE4Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllHd3YHhYAcz4vq6QHjRGrW92ab9Y6v12Ahp ex718KrYosFKnNqK9M54bXhWTpOjdLRFZKiRBEtd97EOXT3F6c2LoQm6uBZP2VQi bHRF3uFWW2kTWV+Fqpq5ZmZZzIO5nF34TW09dL0ujA7zGzRLIpiDlk5sViqoMVNo 4dMoc+QEe92Y/y7E/9lJw53mO4jNjJ7SLs8fv9kdUs6YC6HGfHakELjlhMe7I0Q5 2VrIDaXRtp9kiGlfiktsYTezAjiL3LZmGOnncz9FuCODGE5dS7j2aByCthPn1fsB Vq4oXXm+MyQiG8KdjnkOE3jEPYwNW62O5VPkEgM4ErVSjjnwlwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE96GhBk0mAHDEq906XLdSb9slOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvOGQwNTBkNjYtMGU3MS0z MjVlLWE0N2ItYjBiOTRlNmFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQtAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAj0+gaDmNIqig/NCFjkY9vOlOfcvpr0Z2tZTgoKMmXXcr4uzX+TXe zNxcTylLBOfWoEqQOUBluUmq2Vo6Sa1zrdtmSq6cw4xGUpiFaqBZ7zvRzQOfxO4I uIqoAacn1lLvKH2B9bevqZ0u9a4/0XRqgwHTMPaphC2KiCb4SJtQQiRQ3XmpKStW jvDhBE7gOYWRGI0UvV+LuTtF/mjbItn6XdOSTLlsOcc3tBIV1Bnh0wga90qAJPz3 b6Qeg9ILyj0ZQ2o9I4qV3aagZqA3QjIkSBAImjHaI+2uQ7LwHKs8vaNTf0s0bNwG PrmWEXwUzxBrl5XrQjTcLlWJnWrX9Zbc9A== -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:04 2026 by rpki-client