$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67b1a4c2-634c-3f29-850e-62d38f6494ba.roa File: 67b1a4c2-634c-3f29-850e-62d38f6494ba.roa (raw, json) Hash identifier: EZEYM6uJpIhEWJzEhej3K1OUVpObSYd7FkQiTAdFF2o= Subject key identifier: 22:AA:1A:18:32:80:35:8A:A1:94:DB:8C:81:2F:D6:BD:07:47:5E:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707D5711B23B5A112E4F980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67b1a4c2-634c-3f29-850e-62d38f6494ba.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80:4c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d5:71:1b:23:b5:a1:12:e4:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=ba01dc75-25ca-44f9-b653-2712cc128b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:12:42:5b:b9:42:6d:84:d3:be:51:22:ce: 6c:11:86:a1:17:64:ed:fd:e8:7f:10:2f:a3:02:29: 9c:73:51:ed:d9:11:5d:3c:a3:4e:dd:40:ee:4e:7d: 2b:1c:b0:ad:0b:02:45:1c:44:7f:cc:db:6b:91:d3: a3:da:10:4f:fd:23:9c:14:3c:c6:45:75:a8:17:6f: b9:f2:db:2d:29:60:3d:3a:ac:69:7a:e9:39:6a:b0: da:03:c0:51:50:6c:40:33:60:a9:72:ed:1a:05:fc: c3:78:37:db:29:51:0a:20:1c:f9:c5:ce:cf:1e:97: 22:b7:97:77:7e:a9:a2:20:02:37:2e:60:74:24:3b: 82:ed:05:f5:8a:1e:ef:68:3f:31:4f:9f:54:22:cb: 10:35:09:65:73:fd:91:68:ff:1b:b2:91:37:cf:bd: f1:02:e7:2a:42:c6:12:66:44:48:c0:f4:b3:26:1a: 66:8a:5a:93:fa:0d:1d:73:f2:e7:37:e8:e5:15:f5: ce:7a:9c:b9:ed:aa:7f:23:51:17:95:2e:74:5f:9e: e1:54:0a:94:76:e9:10:45:9d:f1:6a:52:fd:48:98: 61:00:f5:f4:0c:e8:4f:79:fc:1e:8d:bd:2f:a5:ac: 81:44:4c:e8:bb:35:6d:b1:1a:af:48:4f:5b:9a:4a: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:1A:18:32:80:35:8A:A1:94:DB:8C:81:2F:D6:BD:07:47:5E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67b1a4c2-634c-3f29-850e-62d38f6494ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ee:93:41:dd:3c:f4:0f:a4:3a:93:b0:34:0b:fd:95:3e:86: ad:ad:52:18:67:d8:10:dd:96:5d:db:9a:d3:c3:60:22:6a:81: d4:ab:60:c6:e5:bd:07:97:50:39:cd:46:14:7e:88:83:f8:7a: 67:37:34:40:8d:0b:db:54:c3:08:7a:7b:15:6a:f7:eb:5d:99: da:ed:c5:2d:17:49:a9:2d:30:ab:28:18:ab:d9:57:22:03:e5: 94:f9:07:12:79:ea:d6:2b:7f:df:04:f1:b8:9a:b6:5b:c2:2f: 94:b6:60:c8:65:1d:9f:89:31:15:0a:4a:94:32:7f:2d:12:79: 9f:da:13:2a:62:d3:50:11:e6:93:96:cb:84:c7:23:c6:aa:b5: 1b:57:89:c6:00:a3:4c:18:52:ca:bb:52:21:79:a2:21:44:8c: aa:65:25:ea:bd:d7:b8:f9:81:2a:78:ec:7b:32:a8:57:f0:c2: 3b:73:19:34:be:af:59:93:b4:08:d5:eb:34:ed:fc:5b:ed:cd: ae:90:41:58:c4:a4:a7:cb:7f:28:c5:32:ab:a3:5e:d7:29:40: d2:7e:63:d3:5d:ce:6d:4d:d5:e3:cf:ca:0a:9c:13:26:04:36: 03:85:40:03:f1:81:00:7f:9f:2d:99:e2:6f:5d:e5:24:bf:d6: 9a:ba:e1:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0XB9VxGyO1oRLk+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YmEwMWRjNzUtMjVjYS00NGY5LWI2NTMtMjcxMmNjMTI4Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHASQlu5Qm2E075RIs5sEYahF2Tt/eh/EC+j Aimcc1Ht2RFdPKNO3UDuTn0rHLCtCwJFHER/zNtrkdOj2hBP/SOcFDzGRXWoF2+5 8tstKWA9Oqxpeuk5arDaA8BRUGxAM2Cpcu0aBfzDeDfbKVEKIBz5xc7PHpcit5d3 fqmiIAI3LmB0JDuC7QX1ih7vaD8xT59UIssQNQllc/2RaP8bspE3z73xAucqQsYS ZkRIwPSzJhpmilqT+g0dc/LnN+jlFfXOepy57ap/I1EXlS50X57hVAqUdukQRZ3x alL9SJhhAPX0DOhPefwejb0vpayBREzouzVtsRqvSE9bmkrcOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKqGhgygDWKoZTbjIEv1r0HR161MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdiMWE0YzItNjM0Yy0z ZjI5LTg1MGUtNjJkMzhmNjQ5NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPuk0HdPPQPpDqTsDQL/ZU+hq2tUhhn2BDdll3bmtPDYCJqgdSr YMblvQeXUDnNRhR+iIP4emc3NECNC9tUwwh6exVq9+tdmdrtxS0XSaktMKsoGKvZ VyID5ZT5BxJ56tYrf98E8biatlvCL5S2YMhlHZ+JMRUKSpQyfy0SeZ/aEypi01AR 5pOWy4THI8aqtRtXicYAo0wYUsq7UiF5oiFEjKplJeq917j5gSp47HsyqFfwwjtz GTS+r1mTtAjV6zTt/Fvtza6QQVjEpKfLfyjFMqujXtcpQNJ+Y9Ndzm1N1ePPygqc EyYENgOFQAPxgQB/ny2Z4m9d5SS/1pq64eg= -----END CERTIFICATE-----Generated at Thu Mar 12 03:43:02 2026 by rpki-client