$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa File: 70f9fd93-5815-354f-a7a4-12399bd668b8.roa (raw, json) Hash identifier: 6xzry+GaCbRaH7+XPUSM82yPbZoRGWF/xDOp/gm12h4= Subject key identifier: 92:80:4C:1C:7D:34:69:9F:CC:33:20:6F:78:8C:DA:26:FC:69:8B:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F225CFC2C9215805766B11370 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fc:2c:92:15:80:57:66:b1:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=592027e5-1650-4dcf-a006-acb942cbca00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:c5:97:4e:cd:b0:48:ec:db:7f:dd:fa:1d: b5:dd:5a:b0:8c:34:6a:f8:d8:91:e4:bb:ca:de:02: 37:7f:93:b5:ff:1a:be:df:19:92:f4:f6:62:63:58: 9b:6a:35:e3:4e:64:12:be:26:3e:31:1a:b6:68:e6: dc:73:b7:8e:d8:ad:e6:70:ac:fe:e0:43:3c:af:8a: 88:fb:ed:5f:af:25:92:bf:d5:fa:23:b5:a8:5e:b2: b6:66:d0:d3:8c:da:ba:10:17:07:38:72:0c:e4:a5: d5:fa:f1:c7:2b:fa:51:70:75:52:a8:70:6b:9b:7f: 76:e4:7d:d4:a2:54:35:6f:57:6d:c8:b2:25:ff:57: 53:33:bd:97:7c:0a:8f:66:a1:f9:a1:ee:6d:17:09: 93:6c:d8:62:25:17:29:68:77:2a:88:69:fc:fc:0e: 07:87:9e:61:60:c4:a5:43:19:ea:35:31:46:98:46: db:ea:56:72:de:cb:a7:4e:fb:a7:fd:89:f1:f8:8c: ed:15:e0:a3:5b:e0:61:13:ec:68:92:5e:6f:50:f9: dd:e4:a6:aa:a9:fc:02:09:e5:07:b3:3c:e1:9c:62: f7:06:49:6c:20:c1:65:98:11:96:27:03:62:9e:9a: d3:36:72:29:b6:7f:2c:71:f7:41:9b:ac:bc:93:08: 5b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:4C:1C:7D:34:69:9F:CC:33:20:6F:78:8C:DA:26:FC:69:8B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70f9fd93-5815-354f-a7a4-12399bd668b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c5:f6:23:02:c3:45:5b:aa:68:ff:e6:04:b2:51:16:ab:2d: 86:e3:60:e9:5f:0c:24:90:33:b8:c3:7c:68:bc:a8:2e:a4:ba: 3b:f4:e9:20:af:ac:31:d7:ca:7e:c7:de:b1:7d:3b:39:b9:91: cf:ed:d5:c9:10:07:8c:e7:ca:19:bd:e3:0e:76:48:2b:c1:13: a0:00:db:61:04:58:4c:74:be:98:2d:95:da:d4:48:5e:a5:5c: 0f:bb:02:8c:aa:c5:a2:47:cd:54:1e:31:f9:a8:b8:2f:e6:5f: de:f7:a6:ed:b0:94:e9:5c:c7:59:eb:c1:24:2b:a0:7e:85:57: b5:42:d3:3d:15:70:e2:64:a1:97:56:1d:a9:c5:28:d9:3b:bd: 7b:8a:af:4d:73:ca:5a:4b:79:31:41:5d:91:47:1b:13:5b:85: 8d:4c:6e:44:40:6d:d5:73:ae:3f:37:36:5c:34:11:c9:55:98: 32:a8:4a:bb:db:2e:12:01:03:d0:ee:0e:a0:0e:3f:81:23:d6: a9:f9:58:a7:14:41:15:5c:1c:69:4f:72:56:9d:a5:6a:6a:45: 70:78:03:c8:e1:56:67:e0:c1:92:28:d7:f9:82:67:ea:9c:7a: 87:5f:c5:c9:91:a1:b3:6a:f3:38:10:ee:2f:4f:f8:07:dc:c8: cc:6c:47:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8iXPwskhWAV2axE3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NTkyMDI3ZTUtMTY1MC00ZGNmLWEwMDYtYWNiOTQyY2JjYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8/Fl07NsEjs23/d+h213VqwjDRq+NiR5LvK 3gI3f5O1/xq+3xmS9PZiY1ibajXjTmQSviY+MRq2aObcc7eO2K3mcKz+4EM8r4qI ++1fryWSv9X6I7WoXrK2ZtDTjNq6EBcHOHIM5KXV+vHHK/pRcHVSqHBrm3925H3U olQ1b1dtyLIl/1dTM72XfAqPZqH5oe5tFwmTbNhiJRcpaHcqiGn8/A4Hh55hYMSl QxnqNTFGmEbb6lZy3sunTvun/Ynx+IztFeCjW+BhE+xokl5vUPnd5KaqqfwCCeUH szzhnGL3BklsIMFlmBGWJwNinprTNnIptn8scfdBm6y8kwhbGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKATBx9NGmfzDMgb3iM2ib8aYtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBmOWZkOTMtNTgxNS0z NTRmLWE3YTQtMTIzOTliZDY2OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7F9iMCw0Vbqmj/5gSyURarLYbjYOlfDCSQM7jDfGi8qC6kujv0 6SCvrDHXyn7H3rF9Ozm5kc/t1ckQB4znyhm94w52SCvBE6AA22EEWEx0vpgtldrU SF6lXA+7AoyqxaJHzVQeMfmouC/mX973pu2wlOlcx1nrwSQroH6FV7VC0z0VcOJk oZdWHanFKNk7vXuKr01zylpLeTFBXZFHGxNbhY1MbkRAbdVzrj83Nlw0EclVmDKo SrvbLhIBA9DuDqAOP4Ej1qn5WKcUQRVcHGlPcladpWpqRXB4A8jhVmfgwZIo1/mC Z+qceodfxcmRobNq8zgQ7i9P+AfcyMxsRyo= -----END CERTIFICATE-----Generated at Sun Sep 27 01:30:00 2026 by rpki-client