$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b2ea07f-2c37-3b1d-ac17-e563ead0a8df.roa File: 9b2ea07f-2c37-3b1d-ac17-e563ead0a8df.roa (raw, json) Hash identifier: TPJHJPRWDCn2t9BHURoMI+2I3k6zbrDNaSgI2ZmwJr4= Subject key identifier: B5:47:A9:60:B4:63:5F:24:C8:64:AC:84:DD:E5:87:6A:8E:D3:5E:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F3E47C91B200CEE601350AC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b2ea07f-2c37-3b1d-ac17-e563ead0a8df.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 2604:2d81:9c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:c9:1b:20:0c:ee:60:13:50:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=8fc3b429-b320-468a-b56c-2efdaa7ef0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:f3:1c:26:85:be:58:d7:e0:8e:ed:4c:e2: 8b:b5:6b:73:b2:69:e7:e2:b7:d1:21:cd:7e:e5:ea: a7:7e:1f:51:1a:d4:d9:ce:f8:ea:13:b8:a4:d2:c0: 65:34:d3:48:d4:81:36:98:5e:3d:0b:33:d5:56:cc: 7d:ef:ed:e6:2a:4b:2f:31:31:21:bd:3a:21:59:21: 68:d6:78:53:cb:42:94:aa:52:8d:7c:a3:d6:01:ed: 3a:51:11:10:cf:28:d9:b0:f5:0c:36:c1:a0:91:0d: 96:6f:44:a1:14:ef:b2:c6:35:46:fd:8a:a6:f2:4d: 70:2c:38:92:db:9c:6e:bf:e4:47:11:bc:f4:bb:98: d0:2e:2b:00:70:a5:b2:94:85:48:26:42:07:66:33: d6:07:0a:30:fd:67:d3:11:b6:d9:db:c0:17:6e:41: de:b8:19:6d:df:c8:4c:e8:0b:29:58:48:2d:cb:f7: a5:d8:f4:e3:ae:ef:92:5f:85:c6:2f:7f:69:68:86: fd:64:3d:4b:ff:00:4a:da:7b:91:3f:3d:3e:c0:b7: 14:95:dd:4d:16:0f:8f:6b:d0:63:bf:0a:f4:8f:78: e5:17:61:27:fa:f0:07:ac:4a:e1:73:6a:92:46:c4: bf:5b:bc:77:42:e9:17:d1:99:83:11:03:6e:14:50: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:47:A9:60:B4:63:5F:24:C8:64:AC:84:DD:E5:87:6A:8E:D3:5E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b2ea07f-2c37-3b1d-ac17-e563ead0a8df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:9c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:80:29:a3:ce:79:2d:7c:f1:4a:5c:0f:a2:d6:d7:97:66:d4: 2f:3f:6b:91:73:3e:05:6a:bd:af:f8:6e:ba:3e:01:6e:2d:66: d1:db:d9:18:39:67:37:56:fa:20:76:24:91:e8:1a:ab:85:04: fb:04:0f:f8:07:45:9b:a3:b8:05:cf:d8:2a:5a:56:75:7b:78: 5b:aa:a8:87:71:2e:2c:f6:22:f4:25:ca:8b:58:f5:d5:79:e1: 71:f4:05:58:2d:b4:b0:8b:5b:cf:46:45:4b:d5:8e:5f:56:84: 07:7c:31:bf:b0:31:4d:3b:f7:34:0a:c5:68:a1:c0:6e:cf:9c: 4a:72:86:18:c2:94:62:48:dc:fb:b5:18:5e:b4:09:37:ef:b8: 58:20:a5:b3:6b:32:65:58:2d:e2:da:0f:79:3b:fd:ea:28:d7: 3e:8c:01:75:fb:47:61:30:ba:c7:d4:99:f9:79:51:a7:be:af: 28:24:ef:b8:d7:f3:c4:36:ed:cc:b4:09:ef:08:de:59:f7:dd: b7:0f:bb:9b:51:d4:e4:51:81:86:0c:ae:e2:0a:b4:04:b2:0e: f9:73:f3:fc:01:25:cd:c5:92:10:65:0e:e4:30:d0:24:8e:ce: 01:5c:3f:a0:cc:5e:bb:ff:6c:59:c4:ba:78:84:46:06:9b:98: b3:67:cc:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8+R8kbIAzuYBNQrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OGZjM2I0MjktYjMyMC00NjhhLWI1NmMtMmVmZGFhN2VmMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnArzHCaFvljX4I7tTOKLtWtzsmnn4rfRIc1+ 5eqnfh9RGtTZzvjqE7ik0sBlNNNI1IE2mF49CzPVVsx97+3mKksvMTEhvTohWSFo 1nhTy0KUqlKNfKPWAe06UREQzyjZsPUMNsGgkQ2Wb0ShFO+yxjVG/Yqm8k1wLDiS 25xuv+RHEbz0u5jQLisAcKWylIVIJkIHZjPWBwow/WfTEbbZ28AXbkHeuBlt38hM 6AspWEgty/el2PTjru+SX4XGL39paIb9ZD1L/wBK2nuRPz0+wLcUld1NFg+Pa9Bj vwr0j3jlF2En+vAHrErhc2qSRsS/W7x3QukX0ZmDEQNuFFDELQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVHqWC0Y18kyGSshN3lh2qO0155MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWIyZWEwN2YtMmMzNy0z YjFkLWFjMTctZTU2M2VhZDBhOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWAKaPOeS188UpcD6LW15dm1C8/a5FzPgVqva/4bro+AW4tZtHb 2Rg5ZzdW+iB2JJHoGquFBPsED/gHRZujuAXP2CpaVnV7eFuqqIdxLiz2IvQlyotY 9dV54XH0BVgttLCLW89GRUvVjl9WhAd8Mb+wMU079zQKxWihwG7PnEpyhhjClGJI 3Pu1GF60CTfvuFggpbNrMmVYLeLaD3k7/eoo1z6MAXX7R2EwusfUmfl5Uae+rygk 77jX88Q27cy0Ce8I3ln33bcPu5tR1ORRgYYMruIKtASyDvlz8/wBJc3FkhBlDuQw 0CSOzgFcP6DMXrv/bFnEuniERgabmLNnzGk= -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:58 2026 by rpki-client