$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa File: 38c9ab8d-13df-3019-8027-678471d5c6e9.roa (raw, json) Hash identifier: gEFPPfkva8YXJBUD4//TETDu31Mx+23jkqorZCbSneo= Subject key identifier: 20:EA:33:77:9A:90:DA:43:4D:EB:8A:14:03:82:16:0D:9A:63:36:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2527ABF42531A9CCF3ECE680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d81:2b00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:ab:f4:25:31:a9:cc:f3:ec:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=4c99f76a-9538-4319-a6e1-e51c9aca861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:ce:a5:e2:c9:c6:8b:2e:fb:92:d8:f4:b2: 8d:29:a5:28:14:b2:d4:d5:e9:85:c3:a3:54:c4:83: ba:22:14:fe:8c:84:43:f8:9b:ee:69:71:68:e8:bf: e0:e5:7b:0c:e2:80:71:0c:cd:0f:03:64:e6:cc:0e: e1:82:2e:b4:29:ed:8e:6c:81:cf:8a:b9:ec:13:07: 0d:b3:e0:d9:ac:38:83:7e:76:e5:ec:ad:0d:2b:a9: 02:5f:06:7b:f1:eb:78:ea:b7:90:db:e5:03:a8:02: 55:ca:42:e1:98:4c:e3:19:56:6b:08:ab:54:08:72: 0f:47:1b:ab:a0:bf:4b:ce:d5:0e:40:1d:69:a7:7e: e3:b1:b5:be:15:13:b4:0e:dc:08:9a:9a:95:cb:5a: 8d:3e:1f:fb:b5:ca:77:6b:14:74:6c:fc:1e:24:22: 8d:4e:c6:4b:cf:40:d5:06:78:5b:5c:c3:ba:8a:b1: f2:1d:67:99:64:80:44:a0:40:59:45:67:e4:be:e3: da:fb:21:ab:93:4b:b1:e9:ac:8d:eb:ce:96:2d:90: 13:78:52:e1:bc:97:23:90:1c:75:1e:66:7f:56:d3: 9b:56:c2:dd:4c:55:bb:be:6c:48:be:18:4d:0d:1f: b2:11:53:8f:b6:ea:f1:14:97:3a:57:6c:e0:bd:ad: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:33:77:9A:90:DA:43:4D:EB:8A:14:03:82:16:0D:9A:63:36:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38c9ab8d-13df-3019-8027-678471d5c6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2b00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:32:90:f8:79:0d:20:52:62:10:5a:63:8a:40:c6:e7:6b:fa: 77:b2:97:95:d6:3c:25:62:30:8a:37:db:62:96:9c:75:ad:42: b9:59:38:77:86:17:39:a6:9f:6e:df:f0:9a:1f:f1:89:e0:b8: 8c:24:5e:0c:4e:bd:d1:05:a5:86:58:99:71:8d:eb:94:29:c6: 98:df:97:04:bb:28:60:3a:35:eb:cc:ea:ac:55:ea:32:7b:a0: d2:ae:db:ca:2d:bb:9d:9a:a1:68:dc:14:99:b0:c5:08:f1:8e: b3:29:ed:74:8b:e6:fa:3f:75:77:e4:1b:06:65:3b:e5:b6:8b: 6f:b9:59:20:e2:e4:ab:b0:01:b8:1e:70:4c:4a:e9:12:a3:32: be:1e:ba:d8:99:4d:7e:eb:15:b4:b6:52:71:b2:b1:18:33:70: c2:b5:a1:fe:c7:5c:15:e2:98:5c:e2:10:b5:19:7c:b5:b3:06: 9b:0f:14:11:c4:e7:3b:c4:d1:fb:53:10:e1:5f:c8:7c:85:34: e9:56:54:bb:6a:70:49:f7:65:bd:b0:24:df:9e:8b:0e:cb:d5: 58:e0:97:b4:7e:58:68:37:41:28:f3:f4:2b:5e:2e:35:e4:bb: a5:c0:c9:72:92:7e:ef:c0:54:26:1c:a0:27:8b:5c:e3:59:87: b5:14:42:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8lJ6v0JTGpzPPs5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk NGM5OWY3NmEtOTUzOC00MzE5LWE2ZTEtZTUxYzlhY2E4NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3OpeLJxosu+5LY9LKNKaUoFLLU1emFw6NU xIO6IhT+jIRD+JvuaXFo6L/g5XsM4oBxDM0PA2TmzA7hgi60Ke2ObIHPirnsEwcN s+DZrDiDfnbl7K0NK6kCXwZ78et46reQ2+UDqAJVykLhmEzjGVZrCKtUCHIPRxur oL9LztUOQB1pp37jsbW+FRO0DtwImpqVy1qNPh/7tcp3axR0bPweJCKNTsZLz0DV BnhbXMO6irHyHWeZZIBEoEBZRWfkvuPa+yGrk0ux6ayN686WLZATeFLhvJcjkBx1 HmZ/VtObVsLdTFW7vmxIvhhNDR+yEVOPturxFJc6V2zgva22mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCDqM3eakNpDTeuKFAOCFg2aYzYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzhjOWFiOGQtMTNkZi0z MDE5LTgwMjctNjc4NDcxZDVjNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGwykPh5DSBSYhBaY4pAxudr+neyl5XWPCViMIo322KWnHWtQrlZ OHeGFzmmn27f8Jof8YnguIwkXgxOvdEFpYZYmXGN65QpxpjflwS7KGA6NevM6qxV 6jJ7oNKu28otu52aoWjcFJmwxQjxjrMp7XSL5vo/dXfkGwZlO+W2i2+5WSDi5Kuw AbgecExK6RKjMr4eutiZTX7rFbS2UnGysRgzcMK1of7HXBXimFziELUZfLWzBpsP FBHE5zvE0ftTEOFfyHyFNOlWVLtqcEn3Zb2wJN+eiw7L1Vjgl7R+WGg3QSjz9Cte LjXku6XAyXKSfu/AVCYcoCeLXONZh7UUQpQ= -----END CERTIFICATE-----Generated at Sun Sep 27 02:15:50 2026 by rpki-client