$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa File: 86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa (raw, json) Hash identifier: T/K0sgephxfJR+wIsw0ibtOAT1s8QTLIvQddgjYrB3g= Subject key identifier: 16:06:7E:6A:A3:D2:FC:36:43:51:38:55:8D:32:2D:E0:72:B3:88:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A4044F351FB813F617980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 2604:2d80:3a00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:44:f3:51:fb:81:3f:61:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4a4db7ad-50b4-4b94-b57c-282fb694560b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:d2:9a:e5:95:01:27:bc:ec:d1:a2:ec:cf: 2a:4f:ee:ea:94:51:e6:27:23:9d:47:e8:b5:9c:54: 6e:f6:c0:85:b7:5f:ba:f7:13:02:7d:78:7d:d1:03: ff:e4:ec:9e:d6:e8:24:c6:11:06:d8:ae:a0:84:cd: 09:c0:e1:9b:bd:c7:21:d4:72:88:02:6d:26:03:38: e3:31:cd:62:f1:ec:16:e2:0e:86:44:c2:d2:b3:34: 97:2d:03:f3:92:f8:50:25:e9:91:78:3f:3a:b5:a1: fc:64:ee:c3:b7:d1:76:31:36:f8:50:c7:5c:20:b2: d1:56:46:d2:58:a0:41:ee:3c:3f:ba:da:e5:68:31: 91:18:2e:f3:ce:b5:14:68:8e:fc:fc:75:66:a8:b8: 63:4d:69:22:8d:2d:70:b4:5f:2d:09:5f:8a:b7:d5: 83:25:05:bc:28:bf:f8:f0:ec:8a:df:7e:54:6c:c4: b4:25:07:f1:73:9b:2d:ab:0c:3a:e7:82:91:b3:83: 34:33:61:02:89:18:b0:4c:d0:01:f9:dc:0a:98:a6: 20:55:92:49:47:3c:d7:f7:dd:1e:90:97:9d:09:08: a2:02:5e:a3:e3:89:a9:4a:d7:b1:51:80:a3:55:b1: c0:68:3b:41:9e:91:56:c2:93:e4:d3:7f:d7:c6:eb: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:7E:6A:A3:D2:FC:36:43:51:38:55:8D:32:2D:E0:72:B3:88:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86affc0d-f127-3c5b-980e-e0a9b4a24afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3a00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b1:11:d0:0c:ce:18:f2:73:3d:4d:5f:be:d7:29:d5:b2:6a: d5:b6:bd:07:f9:e1:98:79:a4:00:e4:e5:ed:47:fb:d6:13:b2: 57:06:b5:65:20:db:cb:9e:4c:00:20:3a:e8:c1:6f:b4:ec:4f: 04:36:71:dc:9e:8b:89:b7:8f:ec:30:90:23:12:a1:e2:6f:d1: 15:4d:c6:50:33:1d:77:9e:11:74:7c:4a:2f:ec:9b:f4:74:c5: e4:a7:e6:39:98:62:d9:d4:28:73:dd:1a:3d:26:39:9b:52:e0: 68:e9:cb:b0:34:27:19:6b:4c:6e:fb:3b:70:58:cf:3c:3f:80: cb:38:0b:6a:f0:b2:ff:aa:15:36:22:18:14:3f:72:f0:a1:e6: 48:14:15:86:4e:50:f1:d7:c0:09:0d:4b:3e:f9:3e:03:bc:2a: ea:cb:5e:07:6d:9c:73:ba:9e:99:e3:cd:58:99:96:62:aa:09: 71:f7:f5:65:43:b2:47:9d:c7:ba:c8:74:df:70:15:32:1a:8c: e6:99:f4:17:a1:7d:0d:72:13:4c:b8:58:65:17:8b:16:1a:61: 24:b1:41:ac:3c:b9:91:09:90:c2:e9:41:a3:bc:d1:fd:b5:9f: a5:45:23:51:39:cb:39:95:97:dc:96:d8:13:dc:89:de:61:fa: 31:8b:fc:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekBE81H7gT9heYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGE0ZGI3YWQtNTBiNC00Yjk0LWI1N2MtMjgyZmI2OTQ1NjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqXSmuWVASe87NGi7M8qT+7qlFHmJyOdR+i1 nFRu9sCFt1+69xMCfXh90QP/5Oye1ugkxhEG2K6ghM0JwOGbvcch1HKIAm0mAzjj Mc1i8ewW4g6GRMLSszSXLQPzkvhQJemReD86taH8ZO7Dt9F2MTb4UMdcILLRVkbS WKBB7jw/utrlaDGRGC7zzrUUaI78/HVmqLhjTWkijS1wtF8tCV+Kt9WDJQW8KL/4 8OyK335UbMS0JQfxc5stqww654KRs4M0M2ECiRiwTNAB+dwKmKYgVZJJRzzX990e kJedCQiiAl6j44mpStexUYCjVbHAaDtBnpFWwpPk03/XxuvZVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYGfmqj0vw2Q1E4VY0yLeBys4gRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZhZmZjMGQtZjEyNy0z YzViLTk4MGUtZTBhOWI0YTI0YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuxEdAMzhjycz1NX77XKdWyatW2vQf54Zh5pADk5e1H+9YTslcG tWUg28ueTAAgOujBb7TsTwQ2cdyei4m3j+wwkCMSoeJv0RVNxlAzHXeeEXR8Si/s m/R0xeSn5jmYYtnUKHPdGj0mOZtS4Gjpy7A0JxlrTG77O3BYzzw/gMs4C2rwsv+q FTYiGBQ/cvCh5kgUFYZOUPHXwAkNSz75PgO8KurLXgdtnHO6npnjzViZlmKqCXH3 9WVDskedx7rIdN9wFTIajOaZ9BehfQ1yE0y4WGUXixYaYSSxQaw8uZEJkMLpQaO8 0f21n6VFI1E5yzmVl9yW2BPcid5h+jGL/Nw= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:18 2026 by rpki-client