$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaeb7a0f-e489-3d67-a8e6-3f323b472d5a.roa File: aaeb7a0f-e489-3d67-a8e6-3f323b472d5a.roa (raw, json) Hash identifier: C2uwd81o0ouDi03INQb9AzYmcCKn/OHnnyEQNy8+Xjs= Subject key identifier: C3:51:8C:20:48:F0:7E:02:EB:C3:7E:99:ED:87:8E:CA:C7:E4:D2:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF2E76499B1EBCA4D86FAEF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaeb7a0f-e489-3d67-a8e6-3f323b472d5a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:2600::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:64:99:b1:eb:ca:4d:86:fa:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=3ecdd22a-baa1-40d3-80ee-1aa9a4bde614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:3c:fb:fd:b9:5b:96:09:23:1b:20:95:84: 87:0d:1a:f4:fa:5b:83:19:c9:1c:db:dd:13:e0:60: 3d:15:92:ee:db:83:c6:b3:d4:dd:48:0f:0d:00:01: a7:d8:6d:55:08:98:73:36:a8:81:e0:87:7c:5d:4e: b5:ad:5e:17:9a:a4:32:19:64:ce:05:ae:23:a1:c9: a5:3c:92:a5:da:8f:c5:c3:bd:57:44:ab:2f:b4:ae: 96:1f:ee:15:d6:77:8f:db:12:f0:55:9a:19:08:09: 67:d7:ae:27:c5:81:2b:11:9f:8e:ba:cb:5b:dc:da: 6a:e7:cb:5a:8e:ce:30:51:31:f7:d7:89:e6:23:7a: cd:98:45:ec:07:6e:d6:16:7d:51:74:02:90:ca:9f: 08:26:b4:e0:5f:a8:49:bd:76:f0:78:be:e8:34:6b: 0d:bd:1e:66:5f:b4:5d:8f:45:22:3a:ef:0f:ea:e8: 95:a5:43:a0:b6:9c:39:a8:af:2c:d0:c0:3b:b2:01: c9:42:75:b5:74:f2:a4:13:1d:e9:1d:4a:4c:e0:9b: 9d:7b:6c:24:33:7d:ef:4a:2a:a1:81:8c:09:08:14: a1:7d:6f:01:d0:3d:33:ed:ea:7d:14:c4:82:ea:9b: 67:53:21:c3:67:14:7e:91:f1:3b:84:04:d5:b9:a9: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:51:8C:20:48:F0:7E:02:EB:C3:7E:99:ED:87:8E:CA:C7:E4:D2:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaeb7a0f-e489-3d67-a8e6-3f323b472d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2600::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:87:fc:6a:6e:6c:44:8e:82:ae:50:ea:dc:44:e8:2d:7c:0a: 74:9a:1b:ca:73:98:32:a9:a1:14:f5:9d:9b:fe:e6:66:e1:80: b1:20:dc:a2:29:11:f6:49:60:5e:e8:5d:c6:dd:0b:a1:24:24: e7:7d:4d:83:08:2b:73:92:63:67:6f:33:d5:ce:3f:ae:8a:35: 1b:2b:c9:e5:82:3d:d0:2e:ff:92:89:40:56:5e:ba:7b:b7:1f: 5c:34:66:3e:25:14:86:96:b5:7f:71:a6:c7:41:22:43:91:06: d7:b8:73:4b:f0:45:b7:19:d0:93:ac:57:1f:1b:46:49:d9:4e: f1:b3:9b:aa:7c:ec:cd:ee:d5:ac:c9:05:29:7c:ad:70:6e:d6: 03:82:21:98:22:ee:91:69:de:50:b2:f7:fd:b2:c3:0e:ca:8c: 7c:23:1f:79:26:21:1b:e9:31:db:81:d0:7d:9b:b0:c1:cf:f0: 32:bd:a6:b9:bf:bb:76:c6:6b:c8:38:52:0e:c0:63:9f:7a:17: 08:26:cb:29:15:23:8a:8d:5f:1a:c0:0f:a6:7d:7f:65:8b:9f: fb:f9:93:6f:cc:05:46:35:b0:e9:8d:63:d1:d5:23:c4:12:da: 4a:50:5b:99:2e:a0:3d:1a:5a:77:5f:2b:1f:56:7b:1d:2b:42: 55:79:63:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7y52SZsevKTYb674AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk M2VjZGQyMmEtYmFhMS00MGQzLTgwZWUtMWFhOWE0YmRlNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX48+/25W5YJIxsglYSHDRr0+luDGckc290T 4GA9FZLu24PGs9TdSA8NAAGn2G1VCJhzNqiB4Id8XU61rV4XmqQyGWTOBa4jocml PJKl2o/Fw71XRKsvtK6WH+4V1neP2xLwVZoZCAln164nxYErEZ+Oustb3Npq58ta js4wUTH314nmI3rNmEXsB27WFn1RdAKQyp8IJrTgX6hJvXbweL7oNGsNvR5mX7Rd j0UiOu8P6uiVpUOgtpw5qK8s0MA7sgHJQnW1dPKkEx3pHUpM4Jude2wkM33vSiqh gYwJCBShfW8B0D0z7ep9FMSC6ptnUyHDZxR+kfE7hATVuakIvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNRjCBI8H4C68N+me2HjsrH5NKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFlYjdhMGYtZTQ4OS0z ZDY3LWE4ZTYtM2YzMjNiNDcyZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+H/GpubESOgq5Q6txE6C18CnSaG8pzmDKpoRT1nZv+5mbhgLEg 3KIpEfZJYF7oXcbdC6EkJOd9TYMIK3OSY2dvM9XOP66KNRsryeWCPdAu/5KJQFZe unu3H1w0Zj4lFIaWtX9xpsdBIkORBte4c0vwRbcZ0JOsVx8bRknZTvGzm6p87M3u 1azJBSl8rXBu1gOCIZgi7pFp3lCy9/2yww7KjHwjH3kmIRvpMduB0H2bsMHP8DK9 prm/u3bGa8g4Ug7AY596FwgmyykVI4qNXxrAD6Z9f2WLn/v5k2/MBUY1sOmNY9HV I8QS2kpQW5kuoD0aWndfKx9Wex0rQlV5Y7I= -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:22 2026 by rpki-client