$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa File: 3f960fbb-6b3e-3439-81cd-c697095f3666.roa (raw, json) Hash identifier: i8xbbSnDmul7SYeCULuUbM/zOLIgSszAPD4WeZUERJI= Subject key identifier: C2:3D:23:53:D4:F0:96:96:C3:09:16:4D:F5:2E:1E:4D:70:2F:8E:41 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D74700C47ECEE99BB31FC97A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397236 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:0c:47:ec:ee:99:bb:31:fc:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=895ddcb6-304b-46a0-be4b-c69459b47b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:35:f5:d9:c4:98:b9:b7:98:3d:b5:96:82: eb:85:76:6a:cb:f9:52:79:55:f9:83:57:04:ce:e7: 80:19:14:5e:9d:78:e5:39:0b:c7:32:4a:42:a6:6b: 2c:97:73:23:e2:df:bc:7d:75:f9:65:e6:d3:4f:4d: 45:54:8b:6e:f1:c6:e1:fb:d8:e0:89:e7:3f:00:ca: bb:3d:78:ec:15:e8:9e:c7:55:22:5a:89:60:23:3d: f6:20:76:2b:d5:08:af:75:74:2b:57:fa:e7:53:d2: cf:da:fa:b6:2c:27:fb:af:c8:3c:ea:b2:ab:75:b9: 25:60:4f:3d:76:b6:ca:3f:f6:30:eb:17:89:21:4e: f2:ca:f6:81:94:08:c7:0e:ab:83:d9:41:81:73:db: 49:38:9a:7b:2e:12:18:2c:66:a3:80:0a:52:8f:b2: 51:80:bc:e2:74:df:02:8d:1e:01:28:b3:08:5d:ff: bf:4e:98:7d:3c:78:2c:14:5f:74:7e:4c:51:f4:ba: 4e:e9:0b:fb:11:0c:66:19:74:ba:be:4b:b4:2d:3b: 16:3c:b4:fa:92:1e:2d:24:ef:d6:a3:2b:4e:e8:2f: b5:30:8a:92:db:49:05:ae:68:58:5a:70:0a:28:c9: d3:dc:e9:b7:e5:5a:52:a4:3f:43:68:ac:16:47:9d: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3D:23:53:D4:F0:96:96:C3:09:16:4D:F5:2E:1E:4D:70:2F:8E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f960fbb-6b3e-3439-81cd-c697095f3666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f0:33:0a:06:0f:b9:28:b5:b4:d0:68:23:f2:a2:c6:35:e8: 72:dc:b9:e5:29:a4:2e:ef:1e:3c:ca:bb:76:2b:32:27:62:24: 34:19:31:b1:87:58:ae:09:12:75:e2:ce:8c:1f:f5:b5:18:b7: 96:76:80:aa:71:b2:c5:71:97:cf:4d:e2:83:18:cf:85:ea:5a: 06:6a:c3:ce:d0:17:a6:7e:be:93:92:cd:d7:98:df:fa:96:b6: 19:89:5e:af:f1:21:34:b2:bd:1c:11:2b:6f:e2:14:03:62:cc: 4e:51:20:14:db:ae:08:36:b4:d8:2c:c6:5c:40:26:66:ee:fe: 73:11:f8:e1:61:7b:f3:47:68:5e:f6:38:d1:7e:8d:b3:71:b4: ad:05:16:82:e2:8e:06:37:af:ac:6a:f1:57:de:c3:34:c6:06: 34:48:c8:44:07:f5:2a:26:24:0a:4d:42:b9:73:87:b4:59:9b: f2:d3:73:4a:c6:7f:7a:18:cd:bf:04:55:28:28:b2:db:b9:97: 08:aa:b1:29:af:31:33:a7:70:1d:7d:fc:5e:f8:9c:04:40:85: d6:cd:c0:20:27:53:b8:57:69:18:8e:96:19:75:b8:27:3d:f8: 09:a9:41:dc:3a:61:69:a5:df:6e:60:3a:32:5b:99:1d:68:f1: 8a:0c:e1:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cAxH7O6ZuzH8l6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ODk1ZGRjYjYtMzA0Yi00NmEwLWJlNGItYzY5NDU5YjQ3Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hc19dnEmLm3mD21loLrhXZqy/lSeVX5g1cE zueAGRRenXjlOQvHMkpCpmssl3Mj4t+8fXX5ZebTT01FVItu8cbh+9jgiec/AMq7 PXjsFeiex1UiWolgIz32IHYr1QivdXQrV/rnU9LP2vq2LCf7r8g86rKrdbklYE89 drbKP/Yw6xeJIU7yyvaBlAjHDquD2UGBc9tJOJp7LhIYLGajgApSj7JRgLzidN8C jR4BKLMIXf+/Tph9PHgsFF90fkxR9LpO6Qv7EQxmGXS6vku0LTsWPLT6kh4tJO/W oytO6C+1MIqS20kFrmhYWnAKKMnT3Om35VpSpD9DaKwWR52zNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMI9I1PU8JaWwwkWTfUuHk1wL45BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y5NjBmYmItNmIzZS0z NDM5LTgxY2QtYzY5NzA5NWYzNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAErwMwoGD7kotbTQaCPyosY16HLcueUppC7vHjzKu3YrMidiJDQZ MbGHWK4JEnXizowf9bUYt5Z2gKpxssVxl89N4oMYz4XqWgZqw87QF6Z+vpOSzdeY 3/qWthmJXq/xITSyvRwRK2/iFANizE5RIBTbrgg2tNgsxlxAJmbu/nMR+OFhe/NH aF72ONF+jbNxtK0FFoLijgY3r6xq8VfewzTGBjRIyEQH9SomJApNQrlzh7RZm/LT c0rGf3oYzb8EVSgostu5lwiqsSmvMTOncB19/F74nARAhdbNwCAnU7hXaRiOlhl1 uCc9+AmpQdw6YWml325gOjJbmR1o8YoM4ZM= -----END CERTIFICATE-----Generated at Sun Apr 12 08:12:17 2026 by rpki-client