$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa File: cb76e5e5-90cd-3772-b590-6b1405a26307.roa (raw, json) Hash identifier: +nBLgi8L6aifYhlOifk4Z0nypWJe6WA76dFIg1pMxLA= Subject key identifier: 5E:00:4D:90:32:1A:74:1A:C6:79:F3:00:A9:E9:85:11:FA:61:83:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707F06BFE61C05D71376C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2d80:7f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f0:6b:fe:61:c0:5d:71:37:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=28d821ea-3d7b-4807-905b-3c510348cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:f4:0d:1b:d9:bf:a9:aa:a6:ea:70:47:1f: ae:ea:05:73:90:71:5d:6f:72:01:18:9c:c3:ba:ad: da:c5:c6:56:e4:f4:af:47:0b:42:65:13:ae:0f:06: 5d:0b:c7:e3:53:25:b2:d0:00:78:78:1b:1d:7c:c5: 0a:48:81:bd:5b:0b:5c:52:3f:62:a6:51:cf:be:12: c3:da:fa:de:9f:8e:9f:02:f3:4b:99:88:af:7e:23: c3:74:4c:75:f3:5a:a3:02:41:55:fc:de:f6:52:a6: c8:87:84:dc:fe:2e:c2:68:9d:86:08:a4:39:9e:fc: 60:7e:02:9c:ab:93:d1:88:0f:17:69:13:64:40:fa: d9:fb:43:e0:f8:18:15:14:db:92:77:1d:58:c9:12: 8a:61:a4:81:be:2b:f8:e3:85:ac:7d:53:c8:a5:ee: dd:64:76:3f:e5:46:07:22:4a:21:c3:c2:a2:2a:37: 25:21:df:08:33:65:c3:bf:99:f0:b8:6e:26:7f:06: 66:1d:58:de:6f:32:34:ce:79:2e:63:5c:31:e6:00: 96:ad:83:da:24:22:1d:79:60:1d:24:22:ac:34:65: 6a:6c:45:9c:57:4d:36:fe:e1:f7:b9:f8:8b:d4:db: cf:15:af:4f:d7:f8:4d:d7:05:72:75:9b:06:5b:4a: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:00:4D:90:32:1A:74:1A:C6:79:F3:00:A9:E9:85:11:FA:61:83:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb76e5e5-90cd-3772-b590-6b1405a26307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:07:c1:cc:cd:9d:0a:92:3c:c7:26:5d:2a:9b:97:39:96:ea: ff:18:d6:a7:26:c8:76:97:05:b1:84:1f:81:08:b1:b3:db:69: 84:e4:12:2e:02:d1:58:87:f5:3b:d8:2a:e6:be:d9:7c:a3:e9: a4:89:62:71:ce:f1:ac:62:ca:c4:e1:fd:f7:77:2a:94:96:4f: 2e:2f:a0:53:b7:c3:fa:97:c1:ca:7e:85:88:ab:5f:46:5e:2e: 95:2c:a6:4f:91:32:92:f2:5c:ec:f4:ea:4a:da:32:71:63:fe: cd:fa:84:4c:53:78:76:3c:f9:df:b9:2b:16:70:ce:ff:ff:ee: 0d:b5:15:64:91:f3:80:0d:5b:9c:4e:90:8b:23:e1:4b:18:fd: aa:f1:f6:18:ec:5c:05:a1:1f:df:2f:c7:fe:1e:a1:fc:92:0f: 0b:69:18:24:cd:14:f6:6f:89:d7:5b:a8:72:9e:06:64:e9:4b: 05:a8:d3:c3:f8:6f:7a:56:e2:0e:dc:f8:33:62:03:b3:d8:1a: a6:8d:30:40:37:00:3b:3b:6c:35:3e:27:89:a5:24:ea:52:d3: 17:2a:e3:34:70:46:04:f5:76:ad:87:53:48:48:ea:6d:46:c0: 97:90:3d:95:9b:30:34:72:ac:64:1b:49:cd:eb:99:68:25:57: 0d:23:03:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0XB/Br/mHAXXE3bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MjhkODIxZWEtM2Q3Yi00ODA3LTkwNWItM2M1MTAzNDhjZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n70DRvZv6mqpupwRx+u6gVzkHFdb3IBGJzD uq3axcZW5PSvRwtCZROuDwZdC8fjUyWy0AB4eBsdfMUKSIG9WwtcUj9iplHPvhLD 2vren46fAvNLmYivfiPDdEx181qjAkFV/N72UqbIh4Tc/i7CaJ2GCKQ5nvxgfgKc q5PRiA8XaRNkQPrZ+0Pg+BgVFNuSdx1YyRKKYaSBviv444WsfVPIpe7dZHY/5UYH Ikohw8KiKjclId8IM2XDv5nwuG4mfwZmHVjebzI0znkuY1wx5gCWrYPaJCIdeWAd JCKsNGVqbEWcV002/uH3ufiL1NvPFa9P1/hN1wVydZsGW0p5RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4ATZAyGnQaxnnzAKnphRH6YYMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2I3NmU1ZTUtOTBjZC0z NzcyLWI1OTAtNmIxNDA1YTI2MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8HwczNnQqSPMcmXSqblzmW6v8Y1qcmyHaXBbGEH4EIsbPbaYTk Ei4C0ViH9TvYKua+2Xyj6aSJYnHO8axiysTh/fd3KpSWTy4voFO3w/qXwcp+hYir X0ZeLpUspk+RMpLyXOz06kraMnFj/s36hExTeHY8+d+5KxZwzv//7g21FWSR84AN W5xOkIsj4UsY/arx9hjsXAWhH98vx/4eofySDwtpGCTNFPZviddbqHKeBmTpSwWo 08P4b3pW4g7c+DNiA7PYGqaNMEA3ADs7bDU+J4mlJOpS0xcq4zRwRgT1dq2HU0hI 6m1GwJeQPZWbMDRyrGQbSc3rmWglVw0jAzg= -----END CERTIFICATE-----Generated at Thu Mar 12 06:36:37 2026 by rpki-client