$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa File: 3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa (raw, json) Hash identifier: p173uuef6WOOD4UwhNLtVTyqRV4l6tp/1O9YMgQRphM= Subject key identifier: FB:31:CF:50:0D:F7:AF:23:6C:8E:9A:B4:32:51:CD:EE:B9:61:0E:0A Certificate issuer: /CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Certificate serial: 010D0C9F4328584D5024E7CA796E7B1CE098B000 Authority key identifier: 91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 20382 IP address blocks: 2604:2da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:e7:ca:79:6e:7b:1c:e0:98:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=28a872a9-2acc-4bc7-a29f-b60217321641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:27:0b:97:2f:3b:b3:b3:4d:fd:3a:31:b8: cb:08:64:e5:69:6a:b6:57:2c:7c:c9:5b:09:db:97: e6:c0:e9:17:e0:59:c0:b8:74:50:73:4d:f2:3c:15: 95:7b:88:a6:fc:2d:18:b2:6a:b7:a7:4c:d1:71:00: e8:e9:f7:95:12:a4:c6:f9:fb:a0:c5:b1:91:16:13: f1:24:4b:7d:53:8b:6d:f6:00:27:bf:77:3e:a0:49: 6f:fb:8a:67:d4:57:8c:f6:34:39:23:80:09:6a:60: e8:7f:bb:75:ac:5e:8b:2e:71:6c:30:3d:d6:42:f2: f4:7f:3f:63:a2:e1:aa:08:bd:c1:2e:9b:87:b5:c8: b3:29:68:c4:84:b6:03:1a:61:74:52:92:f5:02:ce: 7c:3d:1e:01:08:ee:99:56:4b:e7:aa:34:b6:db:20: ce:df:87:1c:45:ae:19:40:e2:39:88:76:4f:33:f7: 46:00:d8:f1:df:e6:a8:79:9e:88:0b:a7:f0:7f:99: a7:75:b4:85:80:6d:eb:69:43:5a:76:01:1e:c7:ed: 9a:9a:10:9a:f5:34:12:2e:f7:03:23:78:20:f5:48: 65:44:5d:ab:82:9a:26:ff:6b:46:b8:70:fb:47:b4: ba:ca:56:42:56:57:88:b5:2c:3c:ec:28:a0:5a:1e: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:CF:50:0D:F7:AF:23:6C:8E:9A:B4:32:51:CD:EE:B9:61:0E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl X509v3 Authority Key Identifier: keyid:91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer sbgp-ipAddrBlock: critical IPv6: 2604:2da0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:49:4d:cc:b7:b6:ee:aa:66:c1:8b:a1:4c:6c:29:9f:76:c7: 1d:bc:d9:3d:df:1f:7a:72:c7:45:d9:98:2f:26:e1:ad:e2:e0: ac:b5:bc:3d:c0:fd:cf:a7:68:3c:7a:c9:40:2c:4a:6c:bc:65: 45:fa:b2:2b:cb:cc:b0:dd:40:f0:d5:52:bb:32:9d:1b:15:6b: a4:31:18:99:a0:3f:41:85:cf:24:1e:3e:f2:55:89:74:e1:af: bf:44:79:df:a1:66:b1:4d:1a:80:a8:2e:d2:34:d5:f3:41:12: 77:01:bd:c1:8d:84:23:1f:fe:c9:3e:4d:f2:20:d1:1b:bf:ed: 59:9c:9f:91:21:0c:9e:d4:24:2f:6d:65:87:30:90:a5:55:bb: 77:cf:0c:47:e4:3b:50:66:e8:88:27:1a:65:29:82:82:32:7a: d8:a4:97:d9:fd:03:7b:61:43:48:91:c3:10:d4:61:78:a2:c4: f2:6e:10:49:40:80:4e:0b:62:e7:05:b1:e3:39:4a:b6:15:65: 98:af:93:d5:f2:00:c6:f1:25:09:ef:2e:2c:eb:0b:7d:5c:02: 7c:24:4b:ba:45:39:1f:88:5c:c3:2c:4b:5a:7a:af:68:d9:42: 75:5e:6e:6d:82:db:d6:d6:84:73:c4:da:90:03:3e:6a:59:7d: 08:64:68:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1QJOfKeW57HOCYsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1NWFkODQtZjlmMi00NjRiLWI1MGEtYTlkMjY4YzVi YjRlMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk MjhhODcyYTktMmFjYy00YmM3LWEyOWYtYjYwMjE3MzIxNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGcnC5cvO7OzTf06MbjLCGTlaWq2Vyx8yVsJ 25fmwOkX4FnAuHRQc03yPBWVe4im/C0Ysmq3p0zRcQDo6feVEqTG+fugxbGRFhPx JEt9U4tt9gAnv3c+oElv+4pn1FeM9jQ5I4AJamDof7t1rF6LLnFsMD3WQvL0fz9j ouGqCL3BLpuHtcizKWjEhLYDGmF0UpL1As58PR4BCO6ZVkvnqjS22yDO34ccRa4Z QOI5iHZPM/dGANjx3+aoeZ6IC6fwf5mndbSFgG3raUNadgEex+2amhCa9TQSLvcD I3gg9UhlRF2rgpom/2tGuHD7R7S6ylZCVleItSw87CigWh7CrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPsxz1AN968jbI6atDJRze65YQ4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1 YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQyNjhjNWJiNGUvM2JmZGU5MmMtMjhmNC0z MDc0LThlNTQtYjZlYTVkN2Y3M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTI1NWFkODQtZjlmMi00NjRiLWI1 MGEtYTlkMjY4YzViYjRlLzEyNTVhZDg0LWY5ZjItNDY0Yi1iNTBhLWE5ZDI2OGM1 YmI0ZS5jcmwwHwYDVR0jBBgwFoAUkXTnzCE/SkbK1XASPRpJ3ydGTiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQy NjhjNWJiNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQtoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALSU3Mt7buqmbBi6FMbCmfdscdvNk93x96csdF2ZgvJuGt4uCstbw9 wP3Pp2g8eslALEpsvGVF+rIry8yw3UDw1VK7Mp0bFWukMRiZoD9Bhc8kHj7yVYl0 4a+/RHnfoWaxTRqAqC7SNNXzQRJ3Ab3BjYQjH/7JPk3yINEbv+1ZnJ+RIQye1CQv bWWHMJClVbt3zwxH5DtQZuiIJxplKYKCMnrYpJfZ/QN7YUNIkcMQ1GF4osTybhBJ QIBOC2LnBbHjOUq2FWWYr5PV8gDG8SUJ7y4s6wt9XAJ8JEu6RTkfiFzDLEtaeq9o 2UJ1Xm5tgtvW1oRzxNqQAz5qWX0IZGh1 -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:10 2026 by rpki-client