$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa File: 76b314a2-1ada-3cc9-93bf-0713174d9917.roa (raw, json) Hash identifier: mUtcKQZYuE8sU6zhZIjPsjU5aPHoPJ79ZPkBmSOb/5U= Subject key identifier: 9D:98:B5:96:0A:50:26:D9:07:09:08:3E:98:53:0D:DB:41:02:E0:BA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D3FA27F8EA55BC9CBC3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d81:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:3f:a2:7f:8e:a5:5b:c9:cb:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=076c5bd9-eb22-4591-b4ef-68746b4fdb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:34:cd:ec:1c:a3:da:3a:cf:f7:0e:0d:89: 81:fe:3a:25:67:3e:01:1f:6f:67:35:ac:27:77:84: 6b:ff:39:c3:65:f4:6b:3a:22:e2:77:ee:f6:dd:18: 5f:ed:af:01:67:48:2f:f4:6e:64:bc:62:26:dc:b9: 6f:41:5c:e1:58:cf:0c:5f:69:58:35:7a:37:79:94: d3:5e:c8:26:0b:30:94:70:26:db:01:66:04:4d:3c: b5:83:1b:2f:c5:06:f1:f5:69:54:c6:c9:e0:94:85: 17:37:cd:f7:85:67:14:30:9f:39:9d:4a:c4:89:a6: 16:8a:84:8f:b9:7a:aa:86:ab:14:41:c2:6d:3c:19: fc:2e:16:fc:b6:fa:0a:c9:0b:02:0a:35:cf:71:7d: f7:79:57:22:22:72:07:db:f4:3b:47:aa:5b:93:f5: b5:af:28:d8:c3:99:f3:0d:68:57:8b:95:2b:73:9f: 47:e3:de:97:b1:00:9a:0e:b5:e4:e9:57:c6:31:8a: 0e:c3:f2:ce:a8:5d:6d:d7:ed:65:9e:b0:a2:91:20: ff:39:67:28:40:2e:ed:b5:55:c6:50:63:2c:e9:4e: 5b:c8:41:6a:f6:e7:8c:c1:49:68:57:66:1f:ab:b4: 40:f5:9d:39:73:ed:df:7a:58:fb:4d:e0:62:35:d9: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:B5:96:0A:50:26:D9:07:09:08:3E:98:53:0D:DB:41:02:E0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b314a2-1ada-3cc9-93bf-0713174d9917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8c:a3:f6:6b:bc:b4:6b:3f:18:90:d6:47:49:b4:d5:b4:55: 5a:a6:f4:af:58:d1:57:e7:06:bc:48:5e:8c:d8:1c:05:9e:7b: b4:a5:b1:7b:be:7e:86:76:d4:8e:df:af:98:63:76:0b:1d:f7: f2:a6:5d:f9:99:08:d1:3e:f9:a8:b8:0d:ba:54:4c:65:47:5a: b7:01:42:d7:fb:5e:a7:8d:36:1f:f4:b5:4f:97:69:ef:6d:74: a5:d3:7a:76:03:33:ba:cf:ce:95:c1:bd:b0:55:eb:46:63:98: b9:0a:41:bd:d6:c1:d0:2f:96:96:07:a2:9d:d2:9b:4d:19:43: 5e:b6:fa:6e:53:86:1c:92:8f:f2:9e:bc:06:50:a5:f7:3d:aa: bc:07:7f:29:e7:dc:f8:c6:ed:6c:59:9a:5c:7b:08:54:f2:5b: b3:db:8e:7b:64:43:b7:f9:b9:5f:0f:a7:bd:8d:3e:65:0e:ac: 14:ab:ac:49:6c:50:6a:f9:a9:fc:29:3b:cf:6c:d3:f4:4f:1f: 19:d9:c6:9a:71:10:95:91:4e:89:a7:b2:18:af:76:d0:52:ec: 45:c9:2d:35:28:98:be:15:5f:89:50:8c:80:f6:cd:f1:54:e3: 90:0f:db:8b:7f:55:69:d2:43:b6:d9:be:24:c9:77:00:30:ad: 32:b9:29:c0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPT+if46lW8nLw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDc2YzViZDktZWIyMi00NTkxLWI0ZWYtNjg3NDZiNGZkYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Y0zewco9o6z/cODYmB/jolZz4BH29nNawn d4Rr/znDZfRrOiLid+723Rhf7a8BZ0gv9G5kvGIm3LlvQVzhWM8MX2lYNXo3eZTT XsgmCzCUcCbbAWYETTy1gxsvxQbx9WlUxsnglIUXN833hWcUMJ85nUrEiaYWioSP uXqqhqsUQcJtPBn8Lhb8tvoKyQsCCjXPcX33eVciInIH2/Q7R6pbk/W1ryjYw5nz DWhXi5Urc59H496XsQCaDrXk6VfGMYoOw/LOqF1t1+1lnrCikSD/OWcoQC7ttVXG UGMs6U5byEFq9ueMwUloV2Yfq7RA9Z05c+3felj7TeBiNdlQJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ2YtZYKUCbZBwkIPphTDdtBAuC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZiMzE0YTItMWFkYS0z Y2M5LTkzYmYtMDcxMzE3NGQ5OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIYyj9mu8tGs/GJDWR0m01bRVWqb0r1jRV+cGvEhejNgcBZ57tKWx e75+hnbUjt+vmGN2Cx338qZd+ZkI0T75qLgNulRMZUdatwFC1/tep402H/S1T5dp 7210pdN6dgMzus/OlcG9sFXrRmOYuQpBvdbB0C+WlgeindKbTRlDXrb6blOGHJKP 8p68BlCl9z2qvAd/Kefc+MbtbFmaXHsIVPJbs9uOe2RDt/m5Xw+nvY0+ZQ6sFKus SWxQavmp/Ck7z2zT9E8fGdnGmnEQlZFOiaeyGK920FLsRcktNSiYvhVfiVCMgPbN 8VTjkA/bi39VadJDttm+JMl3ADCtMrkpwA== -----END CERTIFICATE-----Generated at Wed Sep 30 20:03:05 2026 by rpki-client