$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa File: 628a1e81-1f9a-3aa4-a9ab-b91409298406.roa (raw, json) Hash identifier: Cer+0GHU2p6upzcyE6R41LyKKDv3iCcz7F8k7hUNXJU= Subject key identifier: 02:F7:09:C1:44:B2:9A:85:E2:46:95:E1:3C:B0:50:A1:66:53:2B:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379F94E0AB7C7C43FBA4100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d80:2300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f9:4e:0a:b7:c7:c4:3f:ba:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a9337ac6-0ed0-4495-9f42-9582ad9df540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:74:86:1a:13:37:0e:02:73:c8:a0:ee:f7: e4:37:26:d6:48:b8:51:0d:7c:da:d5:8e:40:ef:40: bb:7e:6a:cb:72:f0:ce:ab:31:ec:e7:31:cc:6b:d5: fd:1a:cf:e5:de:41:a1:6d:23:cc:fa:4b:e8:67:f2: 15:46:f5:59:c5:10:c0:6d:46:94:48:1b:45:c0:66: d8:8c:8b:c8:2e:a3:32:62:da:a4:51:33:55:8e:77: c9:78:ec:b7:b5:e6:e6:57:b3:3a:35:3e:c4:ec:63: d3:2f:c5:aa:44:6b:d9:b2:71:d6:93:bd:86:b8:46: b4:2c:0a:ce:71:f3:f1:11:a0:ad:3c:2d:73:fd:94: d8:30:25:d2:ab:1b:25:c1:fa:bb:f3:63:97:e7:eb: 7f:3f:8d:cc:35:dd:67:7c:52:85:33:92:a4:9a:19: f2:08:8b:01:52:ef:57:f0:e4:98:5c:d7:8d:04:84: a6:14:06:28:b9:42:6f:c1:e7:b3:a3:e1:19:3a:ee: f5:bd:c0:2c:4b:23:6c:20:d0:bc:f5:cd:7e:a6:bd: 49:b1:e1:e7:f8:4b:63:4c:57:98:db:43:8f:62:bb: 42:61:67:5d:60:69:8a:9c:e7:c8:97:8c:24:6b:fe: ba:c6:58:41:0b:48:bb:55:f9:02:93:8f:99:9a:c7: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:09:C1:44:B2:9A:85:E2:46:95:E1:3C:B0:50:A1:66:53:2B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a7:a3:6c:be:89:de:f7:4c:5a:ef:b0:9c:09:de:a8:d9:01: 87:2e:e1:a8:23:06:9c:d0:c4:61:3a:00:aa:7c:65:44:0c:11: 6f:b6:a2:c0:9b:ad:36:4c:b3:20:54:c5:2c:c1:f1:b0:c6:f3: 8c:98:46:f2:cf:3d:c1:99:06:80:45:b5:0d:57:09:d0:78:16: a4:ed:9c:46:ad:2d:6e:41:05:7b:43:07:94:99:4e:6a:dc:29: 3b:97:c4:cb:b2:e7:30:7f:e1:58:1b:8c:c9:11:b5:35:66:75: a2:d2:6f:7d:54:9b:12:57:22:de:0a:44:e1:69:94:3c:a3:cd: a9:2c:8b:0b:37:9c:11:1e:95:35:6b:6d:82:08:ae:12:4f:32: a7:33:d2:8a:18:e6:7f:18:c3:6a:fd:74:ab:a5:38:58:26:94: 3d:c5:35:52:a0:6b:7b:c9:bd:7e:a4:98:ec:81:91:8d:3a:ff: 75:be:50:4d:91:88:5b:28:74:76:1c:9a:f5:44:f3:ac:94:cf: c8:6a:83:19:b1:cc:c8:df:14:3f:a9:31:eb:9b:b1:7c:59:d4: 65:ac:e0:7b:be:5f:1f:f3:af:a6:01:be:a6:07:a0:aa:4a:d6: 9a:ca:44:d1:ae:cb:33:cd:08:23:38:39:8b:0f:01:ed:8a:8f: 0c:44:6d:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeflOCrfHxD+6QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTkzMzdhYzYtMGVkMC00NDk1LTlmNDItOTU4MmFkOWRmNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5F0hhoTNw4Cc8ig7vfkNybWSLhRDXza1Y5A 70C7fmrLcvDOqzHs5zHMa9X9Gs/l3kGhbSPM+kvoZ/IVRvVZxRDAbUaUSBtFwGbY jIvILqMyYtqkUTNVjnfJeOy3tebmV7M6NT7E7GPTL8WqRGvZsnHWk72GuEa0LArO cfPxEaCtPC1z/ZTYMCXSqxslwfq782OX5+t/P43MNd1nfFKFM5KkmhnyCIsBUu9X 8OSYXNeNBISmFAYouUJvweezo+EZOu71vcAsSyNsINC89c1+pr1JseHn+EtjTFeY 20OPYrtCYWddYGmKnOfIl4wka/66xlhBC0i7VfkCk4+ZmscvXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAL3CcFEspqF4kaV4TywUKFmUytGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI4YTFlODEtMWY5YS0z YWE0LWE5YWItYjkxNDA5Mjk4NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCno2y+id73TFrvsJwJ3qjZAYcu4agjBpzQxGE6AKp8ZUQMEW+2 osCbrTZMsyBUxSzB8bDG84yYRvLPPcGZBoBFtQ1XCdB4FqTtnEatLW5BBXtDB5SZ TmrcKTuXxMuy5zB/4VgbjMkRtTVmdaLSb31UmxJXIt4KROFplDyjzaksiws3nBEe lTVrbYIIrhJPMqcz0ooY5n8Yw2r9dKulOFgmlD3FNVKga3vJvX6kmOyBkY06/3W+ UE2RiFsodHYcmvVE86yUz8hqgxmxzMjfFD+pMeubsXxZ1GWs4Hu+Xx/zr6YBvqYH oKpK1prKRNGuyzPNCCM4OYsPAe2KjwxEbVQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:43:22 2026 by rpki-client