$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2aa79c-0d32-32a3-9411-670d23b3ce70.roa File: bc2aa79c-0d32-32a3-9411-670d23b3ce70.roa (raw, json) Hash identifier: MG0UCfy0gCGLyl+HqsXJ0Apt11JQ0tyLwVl/oTq/9zc= Subject key identifier: 56:1D:74:03:B0:13:66:DA:54:77:DB:A0:26:39:51:6A:55:DB:70:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F38AAFBFB424870EBFABBA180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2aa79c-0d32-32a3-9411-670d23b3ce70.roa Signing time: Sat 19 Sep 2026 00:45:14 +0000 ROA not before: Sat 19 Sep 2026 00:45:14 +0000 ROA not after: Fri 18 Dec 2026 01:45:14 +0000 asID: 30036 IP address blocks: 2604:2d81:9500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:aa:fb:fb:42:48:70:eb:fa:bb:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 19 00:45:14 2026 GMT Not After : Dec 18 01:45:14 2026 GMT Subject: CN=20c2c74c-5133-4b52-b3ab-edc213e89786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:13:37:24:d4:e5:cd:8d:13:35:12:26:74: ea:3b:4c:f8:e5:7b:86:e6:cb:4f:ce:6d:9d:ec:c0: a3:d4:f8:41:a5:2c:89:4a:b3:c5:d2:ac:9c:2e:3b: 10:07:b8:09:e2:b9:d1:1f:9d:31:0f:13:37:d1:7d: 54:8d:07:55:3e:7a:02:17:4d:87:3f:e9:e4:a2:03: 77:01:bf:c9:2d:43:f5:2c:be:18:45:5e:83:b5:f0: ca:4d:92:dd:3d:ac:08:13:35:fc:5a:90:34:09:f3: 73:a6:0d:40:11:1c:37:cc:22:a0:45:9d:56:e5:04: 6d:b0:3e:52:be:96:7c:a6:1e:27:56:05:13:c1:95: 80:7f:2c:0a:59:61:44:c0:59:a0:03:25:d4:90:3a: cd:ff:05:c4:3f:ee:3e:64:2d:c2:40:a1:27:5d:8c: 11:ae:c8:0b:7e:78:2c:82:fa:7b:5b:7c:e6:38:ba: b8:cb:4b:f8:e4:8b:a5:18:17:e8:0c:90:31:4c:31: b1:f3:c3:da:c7:26:fa:e3:ab:fa:25:bd:a7:1d:7f: 12:91:1d:8e:06:7c:fc:0e:b8:53:f4:9c:d4:75:7d: 9e:33:b0:43:0b:52:23:66:fc:1d:d6:b6:92:9f:34: 58:a7:1c:33:da:10:d2:9e:12:d1:ff:85:75:70:33: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1D:74:03:B0:13:66:DA:54:77:DB:A0:26:39:51:6A:55:DB:70:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2aa79c-0d32-32a3-9411-670d23b3ce70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:9500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:98:83:e5:d2:65:33:8f:17:fb:4d:9b:49:fe:7b:ec:2e:00: 2d:1a:07:1b:4b:96:a6:f6:a8:7b:d3:b2:33:a5:5e:8d:82:49: e6:31:85:a8:62:72:73:14:b9:2a:00:08:89:2e:f8:cb:d6:0f: 2a:d5:84:d0:a5:43:2e:e4:d9:10:9e:19:ad:9d:4d:75:e7:e2: 68:2f:68:7c:ec:c5:25:4b:d0:01:aa:a0:4d:96:94:0f:a5:74: ea:04:f3:d8:97:f1:f0:d9:90:88:d9:9c:d2:f7:10:04:f3:ac: 41:5b:c1:d3:75:e5:83:f1:cf:a3:a0:97:f4:34:ee:ce:38:4f: 80:91:4e:a1:fa:f9:b5:50:a1:d9:33:86:cc:0b:02:fa:37:06: c6:14:5a:d6:71:65:9d:ee:63:a9:5a:39:46:58:82:b5:bb:d3: fb:bb:bd:58:3c:6f:80:2d:95:50:e6:e8:27:76:08:86:bf:f0: 95:69:a7:d8:4c:87:54:24:93:3f:b7:b7:7d:09:5e:4f:0d:6e: f5:88:49:12:9d:59:a1:57:33:f4:03:f8:b3:48:00:c9:77:e2: 2d:3f:91:b2:e2:65:ea:54:0f:44:1b:a2:eb:5f:12:73:4b:df: 66:15:8b:c0:c1:18:1a:ea:5a:55:7a:85:af:43:ef:ca:75:59: c5:35:a6:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE84qvv7Qkhw6/q7oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxOTAwNDUxNFoXDTI2MTIxODAxNDUxNFowLzEtMCsGA1UEAxMk MjBjMmM3NGMtNTEzMy00YjUyLWIzYWItZWRjMjEzZTg5Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuYTNyTU5c2NEzUSJnTqO0z45XuG5stPzm2d 7MCj1PhBpSyJSrPF0qycLjsQB7gJ4rnRH50xDxM30X1UjQdVPnoCF02HP+nkogN3 Ab/JLUP1LL4YRV6DtfDKTZLdPawIEzX8WpA0CfNzpg1AERw3zCKgRZ1W5QRtsD5S vpZ8ph4nVgUTwZWAfywKWWFEwFmgAyXUkDrN/wXEP+4+ZC3CQKEnXYwRrsgLfngs gvp7W3zmOLq4y0v45IulGBfoDJAxTDGx88Paxyb646v6Jb2nHX8SkR2OBnz8DrhT 9JzUdX2eM7BDC1IjZvwd1raSnzRYpxwz2hDSnhLR/4V1cDPLfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFYddAOwE2baVHfboCY5UWpV23D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmMyYWE3OWMtMGQzMi0z MmEzLTk0MTEtNjcwZDIzYjNjZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgZUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2Yg+XSZTOPF/tNm0n+e+wuAC0aBxtLlqb2qHvTsjOlXo2CSeYx hahicnMUuSoACIku+MvWDyrVhNClQy7k2RCeGa2dTXXn4mgvaHzsxSVL0AGqoE2W lA+ldOoE89iX8fDZkIjZnNL3EATzrEFbwdN15YPxz6Ogl/Q07s44T4CRTqH6+bVQ odkzhswLAvo3BsYUWtZxZZ3uY6laOUZYgrW70/u7vVg8b4AtlVDm6Cd2CIa/8JVp p9hMh1Qkkz+3t30JXk8NbvWISRKdWaFXM/QD+LNIAMl34i0/kbLiZepUD0Qboutf EnNL32YVi8DBGBrqWlV6ha9D78p1WcU1pkI= -----END CERTIFICATE-----Generated at Tue Sep 22 18:40:22 2026 by rpki-client