$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa File: 3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa (raw, json) Hash identifier: kLuLMdjkBcVSZsR+n2ac2A516Q3Kc4U1W6Lgc8cIJ6I= Subject key identifier: A0:25:DE:BB:1B:0A:1E:90:D2:E5:E5:AA:B9:9E:09:C7:BF:7E:49:1D Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584D2644B5DD2B38FD4619181200 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 400097 IP address blocks: 2606:3d40:5d02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b5:dd:2b:38:fd:46:19:18:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ff237f3b-4bf5-4313-a960-49ad26a225ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:45:50:b8:44:2d:d6:e1:39:bd:1c:0d:b4: 27:ff:b9:89:d9:ab:6d:43:1e:3a:d8:48:e0:ff:59: 06:e8:b2:31:c2:ee:fe:9e:ec:61:68:da:ef:5c:f8: 81:64:0d:75:73:63:58:6d:ed:2b:4f:c9:9a:b9:db: 59:ca:df:f5:81:ba:ba:f2:ea:8f:1a:eb:97:db:7a: 32:a1:a7:14:91:78:8d:6a:eb:05:21:50:05:2c:21: 81:4f:0f:05:f6:55:a4:d2:18:30:f8:f9:38:6d:2d: 4a:0f:2d:24:17:e2:2b:77:bc:7a:c0:10:e2:6e:52: cd:e3:4e:59:d7:2f:5c:0a:d1:e2:d6:30:fb:9c:07: 39:fc:33:2a:ca:1c:ad:f4:c0:5f:d7:06:50:62:1f: 38:9c:b7:66:33:59:a7:47:f5:fc:0d:d5:d9:6b:f2: 16:bd:20:41:4f:cd:f6:22:00:9c:6b:0e:4b:a7:cd: 3a:0b:0a:66:09:bd:8b:ba:7d:14:6e:08:b9:fc:91: 65:57:62:b8:4d:dc:ba:fe:06:ca:eb:05:ed:78:4d: 37:ed:29:2c:13:7c:f7:7a:77:81:c8:e6:09:26:d2: e3:ba:c1:1d:67:e8:9e:c0:88:69:b9:85:60:5d:bc: c6:c3:63:a8:36:d1:ee:56:80:c7:f6:de:31:4e:54: d3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:DE:BB:1B:0A:1E:90:D2:E5:E5:AA:B9:9E:09:C7:BF:7E:49:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/3cfbbbb1-60cf-3af4-8523-f3b26265aa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d02::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f8:9f:f4:f8:57:79:e7:2f:31:92:e4:d9:46:8e:f0:2a:47: a9:6b:5f:db:a9:03:71:c8:57:ff:50:6d:62:33:a8:28:85:2b: bc:8b:db:2e:91:2a:39:9e:f4:86:12:5d:64:33:24:c7:73:8e: 59:7f:76:19:55:33:62:30:bb:bd:60:26:06:c8:3c:af:63:cf: 5b:b5:11:19:c2:0c:d1:09:e9:87:3f:18:05:f6:77:0d:72:33: f3:25:d3:80:0e:fd:91:7a:9a:70:0a:b9:6a:7a:6e:0a:be:d8: c1:01:0c:85:46:85:9b:6b:df:05:e8:34:af:8d:4a:00:a6:bb: bd:0e:33:3f:9e:60:9d:e5:c3:25:c6:dc:0b:dc:d3:b6:79:f7: 9d:c1:23:27:40:d8:55:98:c0:48:db:31:cb:4e:de:3f:a9:8a: ae:d9:63:7f:ef:e6:85:1c:22:95:68:7f:80:4e:96:17:f0:0c: 74:ff:c3:69:78:4e:ed:66:8f:89:b4:d0:b5:05:52:72:bf:1c: aa:d4:c6:92:72:91:aa:aa:39:1b:ae:10:98:ec:54:cb:09:52: c7:16:30:5d:e8:f9:c9:e4:40:26:05:c1:d2:88:86:99:35:db: 67:38:eb:a5:e2:94:80:cb:1a:68:4d:48:be:db:2d:b1:53:0c: 5f:2f:5f:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRLXdKzj9RhkYEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZmYyMzdmM2ItNGJmNS00MzEzLWE5NjAtNDlhZDI2YTIyNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojFFULhELdbhOb0cDbQn/7mJ2attQx462Ejg /1kG6LIxwu7+nuxhaNrvXPiBZA11c2NYbe0rT8maudtZyt/1gbq68uqPGuuX23oy oacUkXiNausFIVAFLCGBTw8F9lWk0hgw+Pk4bS1KDy0kF+Ird7x6wBDiblLN405Z 1y9cCtHi1jD7nAc5/DMqyhyt9MBf1wZQYh84nLdmM1mnR/X8DdXZa/IWvSBBT832 IgCcaw5Lp806CwpmCb2Lun0Ubgi5/JFlV2K4Tdy6/gbK6wXteE037SksE3z3eneB yOYJJtLjusEdZ+iewIhpuYVgXbzGw2OoNtHuVoDH9t4xTlTTbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKAl3rsbCh6Q0uXlqrmeCce/fkkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvM2NmYmJiYjEtNjBjZi0z YWY0LTg1MjMtZjNiMjYyNjVhYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr4n/T4V3nnLzGS5NlGjvAqR6lrX9upA3HIV/9QbWIzqCiFK7yL 2y6RKjme9IYSXWQzJMdzjll/dhlVM2Iwu71gJgbIPK9jz1u1ERnCDNEJ6Yc/GAX2 dw1yM/Ml04AO/ZF6mnAKuWp6bgq+2MEBDIVGhZtr3wXoNK+NSgCmu70OMz+eYJ3l wyXG3Avc07Z5953BIydA2FWYwEjbMctO3j+piq7ZY3/v5oUcIpVof4BOlhfwDHT/ w2l4Tu1mj4m00LUFUnK/HKrUxpJykaqqORuuEJjsVMsJUscWMF3o+cnkQCYFwdKI hpk122c466XilIDLGmhNSL7bLbFTDF8vX/A= -----END CERTIFICATE-----Generated at Sat Mar 14 13:54:14 2026 by rpki-client