$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa File: 89c6ef32-d0ed-3e70-9774-17aba56579b2.roa (raw, json) Hash identifier: BXQKqPNXB8ne76vHGbGooj6dlay1VxfCg5Ath29XkRQ= Subject key identifier: 1D:FC:3E:AC:79:29:77:D8:C7:01:79:A2:E0:B1:95:55:31:BD:EF:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D20AF429949B2618C6F6BCD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2d80:eb00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:42:99:49:b2:61:8c:6f:6b:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=250b1a12-aeb2-451a-b77e-06fb6191c135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:5f:2d:0e:a3:cc:14:0d:47:28:e9:9f:11: 55:f4:bb:28:9d:ed:19:2f:8e:ed:59:d0:5b:de:bb: 7b:27:70:fc:5f:47:a3:e2:a4:b6:1a:f4:0f:8e:64: 14:9e:a4:3d:dd:a6:1a:6c:50:0b:ab:7a:27:52:75: 1f:18:b0:1e:75:4c:49:60:7e:58:8c:a9:5f:44:e9: 50:54:e1:78:ee:af:72:4a:10:94:38:80:a5:2c:fd: 66:de:13:d2:5e:45:d6:88:4a:92:aa:cc:0f:07:17: e7:71:bf:ba:d0:0e:1b:2d:6a:b2:6c:d7:24:86:9d: d7:45:aa:3d:e1:d5:1d:49:64:4f:dd:22:4c:18:6d: 26:ed:0a:a6:29:fd:6e:31:fe:b8:28:53:eb:e7:eb: 0c:3c:ac:a6:78:d4:00:8c:89:e6:e9:5b:ac:a0:c9: 69:cd:67:31:86:40:d6:3a:73:dd:57:3f:15:d8:90: 9d:74:72:e4:12:88:fb:05:cc:1f:ad:86:a3:e9:0c: 59:03:08:91:5c:dc:72:19:ab:9d:0b:65:50:03:9c: b0:0b:37:f0:55:1b:54:66:b0:d6:7a:2a:31:ab:b6: 1c:01:a6:76:37:d4:db:c2:05:24:92:57:61:56:d0: c9:0e:b0:d9:f3:3b:0c:2e:af:81:10:16:78:f0:5b: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FC:3E:AC:79:29:77:D8:C7:01:79:A2:E0:B1:95:55:31:BD:EF:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c6ef32-d0ed-3e70-9774-17aba56579b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:eb00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:b0:a4:04:6f:c9:c0:a2:c6:7d:b1:e4:6f:37:c9:ba:0d: d9:66:1d:09:17:20:3b:8d:1d:76:17:cf:ed:cc:d2:41:87:ab: 92:fc:35:82:1f:e3:24:ab:65:2a:32:1f:98:4b:68:0e:ca:11: 11:bb:6c:52:ed:03:c7:93:cc:58:5d:13:35:1a:1a:db:59:c1: c7:c9:7a:2e:3b:a2:cc:81:96:d0:5d:cd:33:53:f1:f2:91:bb: e4:be:b0:92:01:3b:7e:07:d5:6b:2c:2f:e4:05:14:12:af:66: 98:7b:b2:ed:a1:15:bf:c4:fe:8c:ad:75:cf:9b:69:1d:65:db: c8:9d:b8:89:52:41:cd:a3:48:fe:2a:c0:29:39:ac:69:4b:d3: 20:d9:2d:d3:6f:ad:ba:90:d3:e5:30:9e:c3:1b:69:ab:f5:0f: 97:02:d3:d0:5b:8e:e5:d4:86:16:f3:98:3c:80:20:44:88:c8: 57:ad:57:56:80:6d:eb:d2:a8:8c:ff:a5:2d:c3:04:c8:8c:bc: 74:11:ef:cf:17:53:57:f9:ae:d2:d2:b4:64:3f:24:fb:1b:b3: 34:ad:20:42:a4:66:0a:f1:9b:45:ba:08:2a:b7:d2:1e:e7:7b: b4:ea:cb:86:c9:5e:8c:c8:fa:44:31:28:cd:90:d7:93:c6:d2: 4a:05:a6:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0gr0KZSbJhjG9rzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MjUwYjFhMTItYWViMi00NTFhLWI3N2UtMDZmYjYxOTFjMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtklfLQ6jzBQNRyjpnxFV9Lsone0ZL47tWdBb 3rt7J3D8X0ej4qS2GvQPjmQUnqQ93aYabFALq3onUnUfGLAedUxJYH5YjKlfROlQ VOF47q9yShCUOIClLP1m3hPSXkXWiEqSqswPBxfncb+60A4bLWqybNckhp3XRao9 4dUdSWRP3SJMGG0m7QqmKf1uMf64KFPr5+sMPKymeNQAjInm6VusoMlpzWcxhkDW OnPdVz8V2JCddHLkEoj7BcwfrYaj6QxZAwiRXNxyGaudC2VQA5ywCzfwVRtUZrDW eioxq7YcAaZ2N9TbwgUkkldhVtDJDrDZ8zsMLq+BEBZ48Fsu0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB38Pqx5KXfYxwF5ouCxlVUxve9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODljNmVmMzItZDBlZC0z ZTcwLTk3NzQtMTdhYmE1NjU3OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgOsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxgsKQEb8nAosZ9seRvN8m6DdlmHQkXIDuNHXYXz+3M0kGHq5L8 NYIf4ySrZSoyH5hLaA7KERG7bFLtA8eTzFhdEzUaGttZwcfJei47osyBltBdzTNT 8fKRu+S+sJIBO34H1WssL+QFFBKvZph7su2hFb/E/oytdc+baR1l28iduIlSQc2j SP4qwCk5rGlL0yDZLdNvrbqQ0+UwnsMbaav1D5cC09BbjuXUhhbzmDyAIESIyFet V1aAbevSqIz/pS3DBMiMvHQR788XU1f5rtLStGQ/JPsbszStIEKkZgrxm0W6CCq3 0h7ne7Tqy4bJXozI+kQxKM2Q15PG0koFpj8= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:42 2026 by rpki-client