$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa File: 628a1e81-1f9a-3aa4-a9ab-b91409298406.roa (raw, json) Hash identifier: bReTg97uiVGfRJI9Wq2HDy2cqhpM0H05Caz+h1nfeHo= Subject key identifier: DF:CE:55:E1:58:11:77:48:7E:D6:5B:69:96:35:A0:A6:A8:CF:59:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972D193A68B478DF3EC8980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:2300::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d1:93:a6:8b:47:8d:f3:ec:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbd1b8ea-caa3-499e-b1dd-d43bf1b25eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:8d:40:b0:33:0f:f7:74:24:bc:ca:d3:15: b9:df:0d:71:9e:ff:46:a4:8f:ab:7e:ff:6e:bb:fc: 94:29:5e:12:c9:ab:87:db:e1:0c:b1:10:32:ab:81: 99:4c:66:17:03:69:d2:25:3d:ab:a2:d8:71:b3:25: 5b:93:af:97:4e:e9:57:39:3e:76:5f:90:36:e2:59: 81:cf:88:92:c3:2c:7b:47:90:3d:15:48:5b:a4:40: d8:1f:25:18:d1:43:24:9d:85:ca:15:6a:2a:4b:8b: 22:62:09:c4:a4:64:84:43:43:1d:2c:2b:d9:6f:24: 79:67:3e:cd:87:2b:a1:a7:3e:be:1d:fe:64:aa:c8: 65:c1:44:2f:c0:4e:1f:73:d8:91:4e:24:56:d3:33: ad:be:a7:72:24:4f:ac:94:16:24:cf:bc:ef:93:08: 1e:84:5a:a1:2b:e7:fc:13:c4:68:a5:ae:be:5d:ff: b0:56:dd:8c:6e:57:0b:fe:53:43:00:97:ff:2a:40: 03:3d:91:d7:4a:51:85:a1:95:35:92:90:13:49:f2: 3f:02:59:f4:93:85:b8:29:89:6d:9a:d9:ae:76:f5: 5b:3f:66:b6:37:47:2b:d4:42:cd:3c:4b:50:f1:c0: a9:c1:05:b1:d1:62:d4:98:29:66:a3:56:e8:5e:78: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CE:55:E1:58:11:77:48:7E:D6:5B:69:96:35:A0:A6:A8:CF:59:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2300::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ad:36:0a:2e:02:9b:c5:82:60:f9:f1:bc:ca:39:76:c3:aa: f8:5c:f8:4d:26:95:8a:a1:99:a1:fb:39:f7:97:66:8d:e4:fc: 92:f0:9c:4d:6b:8e:12:fd:13:64:5f:08:72:03:d9:5f:8c:e9: f6:90:4f:29:27:eb:d2:cb:6f:90:b1:19:1c:92:63:e1:40:ca: c1:d7:b6:fe:b5:7d:e5:2e:48:be:a3:b1:47:4f:5d:c7:a4:2b: 7e:01:c1:32:0f:38:bc:40:ba:ac:33:77:2f:64:05:a1:5b:99: c6:0e:fb:f8:61:bb:42:72:0e:5c:da:a2:e7:6c:01:7e:66:2c: 04:a2:f6:89:a6:18:65:f9:e1:ce:2e:fd:3c:67:57:f3:43:ad: f2:33:5d:e7:a8:cb:23:df:75:ac:5e:5e:99:f3:de:09:bb:3c: ff:4e:a3:7a:49:cd:8f:e8:cc:6f:d8:b1:2d:cc:9f:d1:9a:f3: 2c:78:95:94:6d:5c:0a:e3:4a:56:7c:49:72:cb:0b:ef:5b:46: 0a:18:c0:ed:b5:16:30:35:5e:52:df:b4:11:45:6f:16:a8:1c: ea:44:26:bf:fa:3f:4e:88:57:a3:02:3b:cd:27:69:94:b7:b1: 05:16:98:d2:f6:d5:ba:6d:2e:bf:b7:8e:37:91:bc:e1:44:7b: 0e:b4:38:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JctGTpotHjfPsiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJkMWI4ZWEtY2FhMy00OTllLWIxZGQtZDQzYmYxYjI1ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo2NQLAzD/d0JLzK0xW53w1xnv9GpI+rfv9u u/yUKV4SyauH2+EMsRAyq4GZTGYXA2nSJT2rothxsyVbk6+XTulXOT52X5A24lmB z4iSwyx7R5A9FUhbpEDYHyUY0UMknYXKFWoqS4siYgnEpGSEQ0MdLCvZbyR5Zz7N hyuhpz6+Hf5kqshlwUQvwE4fc9iRTiRW0zOtvqdyJE+slBYkz7zvkwgehFqhK+f8 E8Ropa6+Xf+wVt2MblcL/lNDAJf/KkADPZHXSlGFoZU1kpATSfI/Aln0k4W4KYlt mtmudvVbP2a2N0cr1ELNPEtQ8cCpwQWx0WLUmClmo1boXng5+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/OVeFYEXdIftZbaZY1oKaoz1l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI4YTFlODEtMWY5YS0z YWE0LWE5YWItYjkxNDA5Mjk4NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEitNgouApvFgmD58bzKOXbDqvhc+E0mlYqhmaH7OfeXZo3k/JLw nE1rjhL9E2RfCHID2V+M6faQTykn69LLb5CxGRySY+FAysHXtv61feUuSL6jsUdP XcekK34BwTIPOLxAuqwzdy9kBaFbmcYO+/hhu0JyDlzaoudsAX5mLASi9ommGGX5 4c4u/TxnV/NDrfIzXeeoyyPfdaxeXpnz3gm7PP9Oo3pJzY/ozG/YsS3Mn9Ga8yx4 lZRtXArjSlZ8SXLLC+9bRgoYwO21FjA1XlLftBFFbxaoHOpEJr/6P06IV6MCO80n aZS3sQUWmNL21bptLr+3jjeRvOFEew60OEc= -----END CERTIFICATE-----Generated at Sat Sep 26 08:34:51 2026 by rpki-client