$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3602ef43-12d8-35bb-8379-2117c52a2025.roa File: 3602ef43-12d8-35bb-8379-2117c52a2025.roa (raw, json) Hash identifier: 0Kx+gJZAdXK504UVrtXsZCpF9P2Wa76vG9tjdsW3VIs= Subject key identifier: DF:85:95:AB:E8:C7:04:30:0C:99:21:8B:47:90:F0:79:61:E2:B6:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA798958F654AD3AABCF87F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3602ef43-12d8-35bb-8379-2117c52a2025.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:9900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:95:8f:65:4a:d3:aa:bc:f8:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=25d158ae-ace8-48cd-a54b-e2f92363c56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:b1:72:dc:9f:d2:29:fa:f0:ce:af:fc:3b: b7:13:28:1f:7f:79:e6:4c:69:8e:c0:65:fa:06:d7: e0:40:44:41:86:3d:9d:3f:4c:e2:2a:1b:9d:85:a0: 34:e1:e5:af:7e:d5:d3:cc:2e:3a:0e:8d:b5:2a:21: 60:9a:55:c1:3f:ee:5f:8d:3a:2f:29:0f:3e:17:a6: 58:39:02:84:a6:0d:94:a6:ea:52:de:68:cf:1a:5e: a4:de:ca:27:c3:14:f7:16:fc:ad:60:65:8b:00:89: 0e:ec:e5:2f:99:fe:3a:3a:49:68:c4:5b:04:b3:a3: c7:ce:d9:57:54:98:00:f9:eb:8c:0e:a8:80:e9:9c: a7:8c:d4:fe:79:7f:48:31:45:35:bc:3c:81:91:76: 44:4e:e6:f7:03:49:a9:47:ae:65:64:04:61:d0:b4: 08:33:f6:d6:b3:67:cd:4a:57:91:6b:18:57:ca:36: 94:a8:5d:4f:62:47:eb:48:2d:16:ce:de:7d:bf:eb: fe:37:78:99:1a:54:1f:56:6e:40:ab:e9:dc:c9:64: 2c:a4:9f:e6:b8:58:60:1d:22:d7:76:e3:fd:bf:23: 09:02:40:c5:bf:64:f8:a8:b7:7b:1d:7e:d6:37:1b: 2c:c6:62:90:57:c9:86:bb:10:46:9d:5f:aa:71:6c: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:85:95:AB:E8:C7:04:30:0C:99:21:8B:47:90:F0:79:61:E2:B6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3602ef43-12d8-35bb-8379-2117c52a2025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:0a:1e:19:5f:d4:57:07:db:e2:61:47:71:8b:ee:43:65: c0:0f:a4:a2:1a:39:a9:34:7f:bc:e1:8c:63:eb:4f:cf:a6:b2: 25:97:13:e6:94:39:2e:c2:a9:31:b3:55:67:85:89:01:30:6f: c4:6d:de:3d:fa:a3:7d:14:08:5c:d3:06:26:78:81:bc:4e:cb: 96:6c:94:9e:ec:3e:a7:76:eb:5c:b7:50:24:43:3d:cf:5e:78: 95:c6:3a:f9:45:a7:5b:aa:26:a9:2d:5a:cb:43:d9:ec:4c:69: d4:70:f5:7c:30:4c:6e:49:94:f6:c9:2c:a4:3a:02:db:47:9c: f9:52:ea:2c:20:d6:0d:40:6f:89:70:44:f7:e2:99:b1:25:b2: c8:18:6b:69:d2:43:25:99:ce:6b:3e:aa:7e:91:06:d9:d5:f3: cd:33:f0:36:fd:e7:99:6f:74:8b:cf:de:56:31:33:45:60:72: fe:c5:82:13:d9:4f:34:cb:a2:d9:f2:86:b0:76:d2:fc:67:df: 03:bc:ac:e5:05:13:3b:80:0d:b3:9a:5a:a7:98:93:f9:45:95: 0d:7e:56:f8:7f:01:9e:ec:bb:8c:b4:3f:04:11:81:1b:3d:40: 69:17:e1:33:b7:e9:86:f3:09:1d:df:e8:6c:da:53:fd:db:87: fb:7c:8a:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmJWPZUrTqrz4fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjVkMTU4YWUtYWNlOC00OGNkLWE1NGItZTJmOTIzNjNjNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mixctyf0in68M6v/Du3Eygff3nmTGmOwGX6 BtfgQERBhj2dP0ziKhudhaA04eWvftXTzC46Do21KiFgmlXBP+5fjTovKQ8+F6ZY OQKEpg2UpupS3mjPGl6k3sonwxT3FvytYGWLAIkO7OUvmf46OkloxFsEs6PHztlX VJgA+euMDqiA6ZynjNT+eX9IMUU1vDyBkXZETub3A0mpR65lZARh0LQIM/bWs2fN SleRaxhXyjaUqF1PYkfrSC0Wzt59v+v+N3iZGlQfVm5Aq+ncyWQspJ/muFhgHSLX duP9vyMJAkDFv2T4qLd7HX7WNxssxmKQV8mGuxBGnV+qcWwgfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN+FlavoxwQwDJkhi0eQ8Hlh4rYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzYwMmVmNDMtMTJkOC0z NWJiLTgzNzktMjExN2M1MmEyMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADphCh4ZX9RXB9viYUdxi+5DZcAPpKIaOak0f7zhjGPrT8+msiWX E+aUOS7CqTGzVWeFiQEwb8Rt3j36o30UCFzTBiZ4gbxOy5ZslJ7sPqd261y3UCRD Pc9eeJXGOvlFp1uqJqktWstD2exMadRw9XwwTG5JlPbJLKQ6AttHnPlS6iwg1g1A b4lwRPfimbElssgYa2nSQyWZzms+qn6RBtnV880z8Db955lvdIvP3lYxM0Vgcv7F ghPZTzTLotnyhrB20vxn3wO8rOUFEzuADbOaWqeYk/lFlQ1+Vvh/AZ7su4y0PwQR gRs9QGkX4TO36YbzCR3f6GzaU/3bh/t8ioo= -----END CERTIFICATE-----Generated at Wed Jul 29 04:57:42 2026 by rpki-client