$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa File: cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa (raw, json) Hash identifier: Nio1SwXLa3RaYAER0h3eFjf5hzygTIDaCTwMsGC3saY= Subject key identifier: 5B:AC:8B:0C:E7:42:AD:05:E3:52:F5:79:16:E1:E4:35:2F:82:65:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D905A9E8CA9804A4DE0C63B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 2604:2d81:2000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9e:8c:a9:80:4a:4d:e0:c6:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=3ccef2c1-957c-46db-8c54-9c401a08d997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:a7:af:73:cb:56:bb:f3:3b:74:3a:5e:76: 57:bf:bf:f1:e8:4f:45:40:44:82:b0:83:27:60:37: 81:a9:c2:3f:24:ea:2f:7e:4a:02:fe:fa:cb:c5:7f: ad:61:58:e2:ce:be:ca:18:02:47:f2:80:5f:b5:04: 52:3b:5c:22:cd:f2:69:72:68:e4:d0:54:c4:0f:f8: 69:9a:53:74:45:d7:e6:2e:ba:c7:66:e3:e7:1a:f8: 40:51:a6:76:32:37:75:d6:f9:7f:b0:da:59:c4:ce: fa:ad:9e:b0:50:52:e3:90:f1:b1:cd:e3:bc:23:d4: 8a:e3:9f:24:21:8f:b9:b3:ba:a7:db:92:ba:cf:95: 03:a6:c7:e2:41:73:a8:4d:bb:27:82:c8:a6:1b:d7: f9:aa:70:77:91:f5:0a:48:54:17:e1:d0:a8:32:d4: 91:3d:c6:a0:f9:9c:fd:63:ab:fa:3b:9d:d7:8e:a6: 52:a4:6a:9c:8b:62:61:ad:06:4b:11:da:f4:af:1e: 56:1d:51:f5:b8:05:72:af:ea:c9:3e:e0:d6:3f:8b: 9f:01:92:31:23:6e:83:e0:ed:a8:6d:5c:5e:1a:62: 07:74:49:61:ce:81:a5:4f:19:21:7e:38:c7:3b:09: 9c:c0:b9:60:3c:bc:0e:db:02:53:99:28:ab:e8:6c: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:8B:0C:E7:42:AD:05:E3:52:F5:79:16:E1:E4:35:2F:82:65:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:73:ef:0f:e7:67:d9:c6:6d:ef:9c:c3:eb:17:73:e4:c3:82: 5f:76:6a:5c:a5:c4:4b:f1:de:02:91:a4:d7:fd:20:d5:5e:20: b3:b6:c2:c5:2a:af:7b:da:8d:42:aa:c7:97:64:15:f8:3a:8b: 3e:4f:62:c2:93:44:b5:4e:05:da:f2:e9:36:16:3f:4c:0a:6f: 64:ad:2c:9c:95:8e:4f:ab:e3:61:48:3d:a6:ae:72:03:b5:57: 85:ad:2c:04:07:64:19:1d:c4:72:3d:81:ee:f5:24:a3:19:39: 7e:70:51:4e:50:d9:fa:ce:1e:a2:d1:68:d2:38:e4:95:d8:89: 56:8b:31:57:b8:60:51:40:c2:b5:96:bc:d0:cc:02:2f:36:d2: c2:0b:d5:6e:31:ef:91:d4:da:7c:68:a8:67:99:0a:37:68:3d: 6d:73:f1:72:76:95:de:ff:fa:ab:f6:b5:19:cc:52:10:0b:3f: 76:df:7e:aa:33:f7:06:d6:25:f1:22:dd:fe:7c:ea:40:54:95: 67:3d:1c:bf:36:c2:81:2d:d5:40:c7:a1:9d:7e:3e:f8:ae:4c: 5d:a7:36:bd:17:c6:44:af:70:68:fa:14:aa:c0:36:87:6f:71: e4:71:dc:73:67:53:59:34:37:82:5c:11:61:c3:7b:dd:66:b2: 05:cc:1b:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWp6MqYBKTeDGO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk M2NjZWYyYzEtOTU3Yy00NmRiLThjNTQtOWM0MDFhMDhkOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRynr3PLVrvzO3Q6XnZXv7/x6E9FQESCsIMn YDeBqcI/JOovfkoC/vrLxX+tYVjizr7KGAJH8oBftQRSO1wizfJpcmjk0FTED/hp mlN0RdfmLrrHZuPnGvhAUaZ2Mjd11vl/sNpZxM76rZ6wUFLjkPGxzeO8I9SK458k IY+5s7qn25K6z5UDpsfiQXOoTbsngsimG9f5qnB3kfUKSFQX4dCoMtSRPcag+Zz9 Y6v6O53XjqZSpGqci2JhrQZLEdr0rx5WHVH1uAVyr+rJPuDWP4ufAZIxI26D4O2o bVxeGmIHdElhzoGlTxkhfjjHOwmcwLlgPLwO2wJTmSir6GwU7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFusiwznQq0F41L1eRbh5DUvgmVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2NlMWFjZWMtOWVlZS0z YjdkLTllZDQtZTVhOTA3M2I3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRz7w/nZ9nGbe+cw+sXc+TDgl92alylxEvx3gKRpNf9INVeILO2 wsUqr3vajUKqx5dkFfg6iz5PYsKTRLVOBdry6TYWP0wKb2StLJyVjk+r42FIPaau cgO1V4WtLAQHZBkdxHI9ge71JKMZOX5wUU5Q2frOHqLRaNI45JXYiVaLMVe4YFFA wrWWvNDMAi820sIL1W4x75HU2nxoqGeZCjdoPW1z8XJ2ld7/+qv2tRnMUhALP3bf fqoz9wbWJfEi3f586kBUlWc9HL82woEt1UDHoZ1+PviuTF2nNr0XxkSvcGj6FKrA NodvceRx3HNnU1k0N4JcEWHDe91msgXMG+g= -----END CERTIFICATE-----Generated at Fri May 8 19:27:41 2026 by rpki-client