$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa File: 7a1b3853-7749-3113-8c0f-5fa5698c4241.roa (raw, json) Hash identifier: TFgSkRWXn5VU3b/WZtlXFYeXr+e1w0IlfY0HG3A2ulw= Subject key identifier: A5:B1:04:FF:BF:53:B5:A8:97:7D:7C:35:8E:55:B2:DC:4A:41:25:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DB075828C5CE7423E81A440D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 19905 IP address blocks: 2604:2d81:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:82:8c:5c:e7:42:3e:81:a4:40:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=d434ccbd-964e-4433-86a2-fad2587901d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:35:ef:3e:80:e1:e5:ec:94:61:e7:06:f8: 92:27:e4:13:72:df:75:cf:36:97:ad:50:55:d5:b7: 38:8d:81:f8:2a:a5:b4:b1:a5:f1:ee:3f:5b:96:7b: 13:be:db:fd:8f:bd:ea:17:2f:42:49:bd:49:64:f0: cf:b7:8a:95:09:db:77:76:7b:23:23:6e:f3:5e:52: 66:4a:da:ed:be:23:fb:61:4b:66:ca:9f:71:a0:29: 70:7b:ed:c2:4f:03:f4:b2:b9:05:14:0f:19:41:f8: f0:32:70:59:db:8e:95:61:0c:71:e1:94:27:34:39: 88:6b:c4:f5:1c:5a:8a:0d:19:0d:7f:44:fe:74:53: 2c:e6:2b:d8:64:d9:e7:32:8a:78:01:35:bc:a9:fe: 21:f4:98:5d:ee:f7:24:b9:4f:f6:ed:4a:99:07:bf: 76:3f:a3:6a:fc:c0:1f:4f:6c:eb:f0:cf:d1:00:96: be:b9:8b:1d:93:5a:46:7e:a0:a8:df:25:64:44:4a: 53:44:a7:6c:c5:1f:04:4c:07:0a:31:6c:2f:48:c0: 07:3d:10:d0:62:a4:1b:cb:17:e1:e3:ff:0e:98:45: cb:2b:e1:2a:d3:c1:ca:b4:2a:05:c4:84:34:17:8d: f6:c4:fe:7d:48:ad:bf:6b:58:7d:2a:09:34:71:3a: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B1:04:FF:BF:53:B5:A8:97:7D:7C:35:8E:55:B2:DC:4A:41:25:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a1b3853-7749-3113-8c0f-5fa5698c4241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:91:e9:d6:44:1a:0c:86:33:8d:b7:56:7c:ec:2f:49:12:66: 1f:83:a5:2a:09:e3:97:9b:e3:31:c7:14:04:3c:cf:6b:9b:f9: 60:ab:59:a9:13:a1:d7:5d:a5:aa:3f:a2:b3:2b:cb:0c:e3:27: ac:50:07:1f:6e:7e:eb:38:cd:92:15:95:c6:22:12:c7:da:35: a7:6b:9f:9c:12:9c:f5:dd:87:d2:62:09:b4:a9:2b:5b:6d:d5: 9b:0c:a3:fb:59:fc:4b:14:63:17:4a:96:d6:09:88:23:1b:26: 4e:55:10:81:e5:2a:c5:5f:f1:37:6d:db:44:07:ce:86:18:68: f6:70:d6:4c:70:01:4f:5c:1e:38:59:a6:d6:f3:a2:4d:f0:d5: e9:70:8e:ae:59:ab:97:9d:41:ee:7d:8f:f5:d6:68:48:01:2a: 66:93:87:0e:06:b6:4f:cf:0c:72:f5:dc:f0:46:d6:37:25:91: 70:cd:f8:d9:09:f3:fb:ab:43:3c:fd:db:0b:f3:93:3e:d3:b9: df:f3:e9:5b:6b:e3:42:b6:6b:ed:76:20:15:cf:8f:78:82:96: 95:3c:9e:6d:a7:6a:1b:e7:78:e9:33:99:99:04:5a:02:b6:2f: 2a:b5:cf:27:b4:82:4c:6e:8f:c2:19:8d:1c:d2:86:3c:81:6a: 27:04:a8:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2wdYKMXOdCPoGkQNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk ZDQzNGNjYmQtOTY0ZS00NDMzLTg2YTItZmFkMjU4NzkwMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45c17z6A4eXslGHnBviSJ+QTct91zzaXrVBV 1bc4jYH4KqW0saXx7j9blnsTvtv9j73qFy9CSb1JZPDPt4qVCdt3dnsjI27zXlJm StrtviP7YUtmyp9xoClwe+3CTwP0srkFFA8ZQfjwMnBZ246VYQxx4ZQnNDmIa8T1 HFqKDRkNf0T+dFMs5ivYZNnnMop4ATW8qf4h9Jhd7vckuU/27UqZB792P6Nq/MAf T2zr8M/RAJa+uYsdk1pGfqCo3yVkREpTRKdsxR8ETAcKMWwvSMAHPRDQYqQbyxfh 4/8OmEXLK+Eq08HKtCoFxIQ0F432xP59SK2/a1h9Kgk0cTp1hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWxBP+/U7Wol318NY5VstxKQSVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2ExYjM4NTMtNzc0OS0z MTEzLThjMGYtNWZhNTY5OGM0MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqR6dZEGgyGM423VnzsL0kSZh+DpSoJ45eb4zHHFAQ8z2ub+WCr WakTodddpao/orMrywzjJ6xQBx9ufus4zZIVlcYiEsfaNadrn5wSnPXdh9JiCbSp K1tt1ZsMo/tZ/EsUYxdKltYJiCMbJk5VEIHlKsVf8Tdt20QHzoYYaPZw1kxwAU9c HjhZptbzok3w1elwjq5Zq5edQe59j/XWaEgBKmaThw4Gtk/PDHL13PBG1jclkXDN +NkJ8/urQzz92wvzkz7Tud/z6Vtr40K2a+12IBXPj3iClpU8nm2nahvneOkzmZkE WgK2Lyq1zye0gkxuj8IZjRzShjyBaicEqM0= -----END CERTIFICATE-----Generated at Fri May 8 20:29:22 2026 by rpki-client