$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa File: be6ecf73-2cce-3a8a-91e8-23664e521e04.roa (raw, json) Hash identifier: 1dJRO19a89hsrkejdDi3UVuoxU7bIdcYV9veWMTB3Ro= Subject key identifier: FF:59:5A:85:1F:D1:F5:74:AB:35:28:99:22:7A:3C:20:EE:55:7F:AB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49747062300570815A884D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:2180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:70:62:30:05:70:81:5a:88:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ae039ea-25ec-404f-a225-33e58f499c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:a7:80:c3:b3:34:22:f5:da:a4:3c:3c:bb: 7e:10:0d:ea:38:12:ce:f6:bb:44:84:b9:8f:a3:7a: fa:ad:cd:8d:0e:69:61:88:6e:4d:65:08:9e:d7:42: 15:e5:69:d1:7f:f4:6c:f3:4d:0c:04:e0:4b:bd:b4: bf:b5:fb:64:89:02:dd:5e:2e:a3:e8:82:0d:6b:47: 5e:b3:f6:d6:c8:fe:da:62:cc:54:15:c1:c8:d5:f1: 15:27:b6:ce:b4:e9:35:27:1b:c6:67:3e:08:42:ef: b7:d6:21:aa:16:77:02:72:f7:ed:47:33:ad:e2:08: 4f:87:aa:98:8d:6f:b0:39:e6:92:16:65:02:dd:73: e2:56:ed:84:2f:34:c0:86:6b:f7:e8:12:13:43:7a: 68:b0:dc:c2:6b:df:0f:0a:f7:e7:7b:4f:69:91:4c: d3:43:71:13:88:4c:db:82:1d:3c:c6:a2:81:a6:57: 20:7f:4b:b4:cc:a5:14:7e:7d:3c:72:3c:8d:2b:9c: 80:0f:4f:16:df:0f:9c:4f:2e:10:a6:8a:f5:05:d5: 90:47:7e:24:d6:cc:b8:2b:4b:f1:60:5a:1a:fc:51: 33:02:e4:b7:79:b4:31:ae:89:01:58:83:4d:a8:d9: bc:7f:04:fb:29:d7:de:f4:f4:e7:24:1d:b4:56:47: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:59:5A:85:1F:D1:F5:74:AB:35:28:99:22:7A:3C:20:EE:55:7F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:2180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:76:7a:53:00:19:61:9f:94:83:7f:25:82:ed:9e:e8:b7:0f: 32:99:d8:f3:f3:bd:cd:cb:0b:0d:13:32:aa:08:3f:b2:67:91: 8f:d0:ab:dd:31:a7:46:e9:98:99:bb:19:cb:43:29:86:42:b4: 6a:7f:8f:f5:25:08:57:0b:84:64:68:ba:0c:4e:f9:6c:e7:7c: 03:96:8f:43:e0:b6:3d:07:f6:01:03:d0:27:7a:b4:85:a7:36: 36:d5:58:5a:d8:39:49:00:d6:9b:8c:d2:b2:27:0c:3f:32:d6: 04:b6:01:bc:94:29:7c:37:3e:01:8a:05:01:e7:98:1e:45:98: 3c:a1:b6:35:6c:d1:59:1e:c8:90:47:1b:cb:77:65:6a:45:3e: 13:ce:d4:69:e8:da:57:43:a8:bb:5b:e9:cd:5f:0d:21:dc:5c: ac:e4:71:44:d9:73:af:52:15:f3:79:25:a9:97:54:59:c2:b3: 74:0b:90:4a:77:f3:85:85:35:8c:ae:d8:44:25:5f:5e:e6:9c: 34:a3:d0:b6:b7:1a:25:76:8a:61:bb:b5:64:e2:71:d0:6b:8b: 04:b2:1e:0a:8d:7c:4c:3d:27:20:54:ea:67:9f:8e:68:dc:2c: 10:a5:73:ff:bf:2f:d7:c4:c6:97:fa:87:14:5d:05:bb:f5:28: 56:b0:40:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdHBiMAVwgVqITQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFlMDM5ZWEtMjVlYy00MDRmLWEyMjUtMzNlNThmNDk5YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNengMOzNCL12qQ8PLt+EA3qOBLO9rtEhLmP o3r6rc2NDmlhiG5NZQie10IV5WnRf/Rs800MBOBLvbS/tftkiQLdXi6j6IINa0de s/bWyP7aYsxUFcHI1fEVJ7bOtOk1JxvGZz4IQu+31iGqFncCcvftRzOt4ghPh6qY jW+wOeaSFmUC3XPiVu2ELzTAhmv36BITQ3posNzCa98PCvfne09pkUzTQ3ETiEzb gh08xqKBplcgf0u0zKUUfn08cjyNK5yAD08W3w+cTy4Qpor1BdWQR34k1sy4K0vx YFoa/FEzAuS3ebQxrokBWINNqNm8fwT7Kdfe9PTnJB20VkdZXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9ZWoUf0fV0qzUomSJ6PCDuVX+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU2ZWNmNzMtMmNjZS0z YThhLTkxZTgtMjM2NjRlNTIxZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAF2elMAGWGflIN/JYLtnui3DzKZ2PPzvc3LCw0TMqoIP7JnkY/Q q90xp0bpmJm7GctDKYZCtGp/j/UlCFcLhGRougxO+WznfAOWj0Pgtj0H9gED0Cd6 tIWnNjbVWFrYOUkA1puM0rInDD8y1gS2AbyUKXw3PgGKBQHnmB5FmDyhtjVs0Vke yJBHG8t3ZWpFPhPO1Gno2ldDqLtb6c1fDSHcXKzkcUTZc69SFfN5JamXVFnCs3QL kEp384WFNYyu2EQlX17mnDSj0La3GiV2imG7tWTicdBriwSyHgqNfEw9JyBU6mef jmjcLBClc/+/L9fExpf6hxRdBbv1KFawQDw= -----END CERTIFICATE-----Generated at Fri Sep 25 17:56:44 2026 by rpki-client