$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a858894-78a9-3f13-a470-c32e6075e8e0.roa File: 5a858894-78a9-3f13-a470-c32e6075e8e0.roa (raw, json) Hash identifier: 9edBEvKVLDZUvgJZp224UIexPlbvGdQQI3N7VLFDZ5k= Subject key identifier: 96:D1:CC:F8:6D:F5:91:91:51:45:33:7B:4E:3E:6B:DC:EE:69:B0:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1B1A62CD5BA8694FD2DE8AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a858894-78a9-3f13-a470-c32e6075e8e0.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d80:6100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:62:cd:5b:a8:69:4f:d2:de:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=dff100ae-f60b-449e-9320-3c994fcbdc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:82:c2:d0:07:7e:21:b5:da:83:67:e4:4f: 6b:0b:8b:e9:1a:dc:61:21:78:27:e7:a0:87:57:05: 61:fe:75:78:31:c4:54:3a:78:78:44:aa:b5:f2:ce: 03:cb:21:39:b1:c8:28:76:18:7a:5b:21:fd:27:3a: 15:50:ba:0f:79:98:d2:2c:f3:a8:46:60:ef:06:bf: f0:e5:2e:dd:6f:95:89:cb:c8:99:d2:09:97:1d:e5: 31:83:17:e4:3f:04:57:8d:94:30:58:43:e6:53:ae: cc:7c:8b:c9:4b:27:2c:99:c6:24:34:e1:6c:b8:50: 13:5a:c3:92:13:bf:ec:ac:07:46:42:82:28:7f:e8: 18:a6:a2:b5:dd:92:8c:23:4a:65:b2:af:45:81:ae: 16:80:e2:d7:fa:3a:cf:e6:d3:1a:e5:fd:1f:80:88: 07:ba:9c:00:81:e4:50:73:59:48:30:e2:70:6c:1a: 42:3a:d0:2a:4c:ac:42:b8:29:3d:ad:ce:e6:b0:a1: d3:8b:d2:e7:26:08:de:7f:5d:4d:6a:43:7b:bd:65: 2b:82:f6:53:7f:67:89:2b:1d:da:b1:62:fb:fe:21: 1e:ba:fb:6b:20:66:aa:59:80:43:47:e0:6e:50:5d: d0:2e:78:f5:37:29:20:dc:22:dd:9b:11:d4:10:cf: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:CC:F8:6D:F5:91:91:51:45:33:7B:4E:3E:6B:DC:EE:69:B0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a858894-78a9-3f13-a470-c32e6075e8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d4:69:fd:66:fa:e3:7d:2f:cc:9d:3f:8b:f8:96:10:5b:9f: 60:b3:70:ac:73:5b:21:d2:13:ea:65:bd:9f:24:b0:9d:73:46: 90:d4:03:3f:d9:4e:8a:1a:e0:14:af:54:3d:93:fc:2a:a3:3a: 71:ed:35:c6:de:70:ed:df:6a:f3:67:36:da:57:20:51:fc:f6: 90:ba:39:87:3c:36:51:22:47:e3:3d:cf:46:c4:0b:9e:fb:4f: 4d:cd:0d:c5:7b:97:2e:88:6c:d9:fd:71:91:2a:4d:91:aa:0e: 70:89:1b:b7:6a:8a:36:2d:30:45:db:7b:c4:fc:91:dd:2c:ec: 7e:be:6a:db:c4:27:02:cd:66:a3:e3:1a:64:f3:f6:af:c5:bd: 7a:35:20:66:45:f9:5e:97:a0:00:c9:da:2b:6d:fb:a2:e3:e0: 6d:61:39:85:b5:a6:87:62:a0:ad:b0:c2:00:20:25:7c:a8:e8: 3a:6a:73:14:ff:f1:fc:f1:c0:a2:4a:c9:82:6a:1c:2c:8c:ee: 11:29:59:6f:11:4e:4e:7e:43:0c:4c:99:d2:2b:1d:3a:51:d7: 02:23:a0:1f:60:2a:ab:2e:d1:4e:1f:48:2b:d0:32:30:21:e7: 25:ec:62:22:3d:15:fe:ad:cf:d1:44:7f:bb:7c:98:94:9d:ed: 29:4d:b0:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGmLNW6hpT9LeisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGZmMTAwYWUtZjYwYi00NDllLTkzMjAtM2M5OTRmY2JkYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKqCwtAHfiG12oNn5E9rC4vpGtxhIXgn56CH VwVh/nV4McRUOnh4RKq18s4DyyE5scgodhh6WyH9JzoVULoPeZjSLPOoRmDvBr/w 5S7db5WJy8iZ0gmXHeUxgxfkPwRXjZQwWEPmU67MfIvJSycsmcYkNOFsuFATWsOS E7/srAdGQoIof+gYpqK13ZKMI0plsq9Fga4WgOLX+jrP5tMa5f0fgIgHupwAgeRQ c1lIMOJwbBpCOtAqTKxCuCk9rc7msKHTi9LnJgjef11NakN7vWUrgvZTf2eJKx3a sWL7/iEeuvtrIGaqWYBDR+BuUF3QLnj1Nykg3CLdmxHUEM9JJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbRzPht9ZGRUUUze04+a9zuabA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWE4NTg4OTQtNzhhOS0z ZjEzLWE0NzAtYzMyZTYwNzVlOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnUaf1m+uN9L8ydP4v4lhBbn2CzcKxzWyHSE+plvZ8ksJ1zRpDU Az/ZTooa4BSvVD2T/CqjOnHtNcbecO3favNnNtpXIFH89pC6OYc8NlEiR+M9z0bE C577T03NDcV7ly6IbNn9cZEqTZGqDnCJG7dqijYtMEXbe8T8kd0s7H6+atvEJwLN ZqPjGmTz9q/FvXo1IGZF+V6XoADJ2itt+6Lj4G1hOYW1podioK2wwgAgJXyo6Dpq cxT/8fzxwKJKyYJqHCyM7hEpWW8RTk5+QwxMmdIrHTpR1wIjoB9gKqsu0U4fSCvQ MjAh5yXsYiI9Ff6tz9FEf7t8mJSd7SlNsL0= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:30 2026 by rpki-client