$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/648fe65e-6525-35c4-ac53-f84da1bc68e3.roa File: 648fe65e-6525-35c4-ac53-f84da1bc68e3.roa (raw, json) Hash identifier: 4xE+kb919Cr0Z+4hauucMShdZLr8sni+rwFRSRbgmMo= Subject key identifier: B7:A5:B7:41:BF:D5:4C:65:0F:6C:1B:28:8A:DE:C6:C3:D9:C3:98:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7875E062C953E56B7191E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/648fe65e-6525-35c4-ac53-f84da1bc68e3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:5e:06:2c:95:3e:56:b7:19:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dcadcda2-9db5-431d-9bcb-d81b53a2e490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:6b:e8:a0:a9:20:b8:2a:f1:8f:09:ad:28: 0f:98:6f:2d:76:89:fa:10:de:91:0b:27:1b:9c:25: 44:3b:2a:30:fb:4a:9a:7c:b7:f8:04:13:c5:11:eb: 75:6d:d5:48:cc:1d:34:cb:16:15:7c:a9:62:48:09: 1f:56:df:ca:6f:4b:11:34:aa:52:6c:c5:87:52:2b: 0d:8f:b0:0e:ab:69:34:5b:5d:98:56:80:4c:04:42: 46:bc:bc:1f:38:3c:39:40:78:c4:6e:6c:d3:a8:81: 1e:5c:1e:44:f5:36:22:16:3f:ea:1a:51:87:85:82: dd:3c:b3:29:b2:13:7f:b8:ea:cb:81:6d:01:ee:9f: 72:e2:b0:c7:b1:3a:23:f8:d1:b1:17:e6:7c:e0:df: 70:fa:4b:bf:5e:11:6f:f2:53:ec:f4:76:1f:98:54: d0:84:65:ed:5c:12:2b:b6:7e:03:ef:25:d0:92:f1: 9c:53:89:d6:34:65:39:a2:c5:a0:74:30:48:44:02: 8d:f6:c8:72:03:a4:5a:50:18:85:e7:1b:94:95:56: 14:26:9d:f6:f3:af:62:a8:0a:95:14:01:a2:f2:f5: 9a:b6:e8:f0:e0:ba:45:39:99:bf:b6:4a:97:53:3c: 17:df:b0:63:fb:20:fa:10:2d:ef:62:32:25:09:99: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:B7:41:BF:D5:4C:65:0F:6C:1B:28:8A:DE:C6:C3:D9:C3:98:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/648fe65e-6525-35c4-ac53-f84da1bc68e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2c:45:82:40:14:ed:ff:87:90:7b:e1:eb:8e:07:08:bd:f3: e6:74:bd:1e:22:bf:37:8b:ea:ed:f1:53:a2:57:2a:6b:89:c9: 02:d2:6b:e2:ca:8f:0b:8b:2d:ac:7c:3e:e3:fc:b7:91:0b:37: ee:84:15:9e:24:12:ed:58:04:e9:51:83:e8:23:37:a2:d5:61: 4c:3c:10:ee:1d:d7:3c:0e:8f:b9:4b:df:5d:0a:09:eb:16:11: a8:c8:95:3b:a5:d3:a9:52:61:23:1b:40:75:5f:73:1a:1c:a3: 30:eb:ba:84:51:a2:d3:1b:d8:47:55:3d:1d:59:42:8f:28:fa: 2c:d2:ea:3e:8a:dc:67:a2:a3:2e:c7:88:c8:ea:e1:58:31:aa: 77:b1:0a:ec:87:ff:fd:ba:39:bc:39:a2:f8:31:5a:b0:fa:3f: df:1e:ae:68:a1:77:00:8b:ea:c4:6b:c2:67:45:90:62:bb:46: 62:03:76:bd:a3:e8:ad:87:02:46:77:5e:3c:34:53:e0:0c:a0: 01:6d:fc:74:17:82:71:05:ad:df:51:88:2e:19:9a:6c:07:6c: e7:81:3f:e7:10:2e:99:49:8e:25:0d:b3:f3:1a:ac:a4:2d:46: 56:73:10:1c:ab:08:5b:a2:30:eb:8b:88:34:fd:90:6f:0d:cc: 24:0d:6c:a2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nh14GLJU+VrcZHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGNhZGNkYTItOWRiNS00MzFkLTliY2ItZDgxYjUzYTJlNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Nr6KCpILgq8Y8JrSgPmG8tdon6EN6RCycb nCVEOyow+0qafLf4BBPFEet1bdVIzB00yxYVfKliSAkfVt/Kb0sRNKpSbMWHUisN j7AOq2k0W12YVoBMBEJGvLwfODw5QHjEbmzTqIEeXB5E9TYiFj/qGlGHhYLdPLMp shN/uOrLgW0B7p9y4rDHsToj+NGxF+Z84N9w+ku/XhFv8lPs9HYfmFTQhGXtXBIr tn4D7yXQkvGcU4nWNGU5osWgdDBIRAKN9shyA6RaUBiF5xuUlVYUJp32869iqAqV FAGi8vWatujw4LpFOZm/tkqXUzwX37Bj+yD6EC3vYjIlCZkx2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLelt0G/1UxlD2wbKIrexsPZw5iBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQ4ZmU2NWUtNjUyNS0z NWM0LWFjNTMtZjg0ZGExYmM2OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgTww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbSxFgkAU7f+HkHvh644HCL3z5nS9HiK/N4vq7fFTolcqa4nJAtJr 4sqPC4strHw+4/y3kQs37oQVniQS7VgE6VGD6CM3otVhTDwQ7h3XPA6PuUvfXQoJ 6xYRqMiVO6XTqVJhIxtAdV9zGhyjMOu6hFGi0xvYR1U9HVlCjyj6LNLqPorcZ6Kj LseIyOrhWDGqd7EK7If//bo5vDmi+DFasPo/3x6uaKF3AIvqxGvCZ0WQYrtGYgN2 vaPorYcCRndePDRT4AygAW38dBeCcQWt31GILhmabAds54E/5xAumUmOJQ2z8xqs pC1GVnMQHKsIW6Iw64uINP2Qbw3MJA1sog== -----END CERTIFICATE-----Generated at Wed Jul 29 07:16:50 2026 by rpki-client