$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd4af659-2c03-3239-9c70-026de165d6ae.roa File: cd4af659-2c03-3239-9c70-026de165d6ae.roa (raw, json) Hash identifier: 44scKsX9GpcI2+FU1FFYEEIGcE8f5e+KtliXbPaVJBk= Subject key identifier: 98:AB:A3:B4:91:35:97:CE:90:E4:8D:EB:30:D2:A7:AB:74:E6:9D:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F07D77DC604DCF08B7D019200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd4af659-2c03-3239-9c70-026de165d6ae.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:a000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7d:c6:04:dc:f0:8b:7d:01:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=5ec8a77b-650a-4eb0-9cbc-674841117bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:48:4b:3b:7e:75:73:1e:83:03:aa:a0:d8: 96:2d:8e:f1:71:0d:1b:41:20:10:9b:5b:2a:4e:f7: cd:39:fe:2e:b7:dd:da:c1:f0:12:e0:cd:61:6e:72: aa:98:f7:f0:34:e6:de:0c:ca:cd:28:8a:b1:f3:ba: 0f:93:71:0d:c2:49:92:3f:9d:44:15:c4:4f:c6:83: 2a:67:fe:bf:30:d2:3e:3f:3b:e8:25:a6:92:3b:9c: 5e:3b:2c:c5:99:a2:96:c1:9d:7c:8a:71:13:f6:21: 13:05:70:09:d6:90:d9:13:3d:bd:51:9a:ca:f3:f3: e9:6b:e5:91:a2:9b:0d:d9:e4:d6:1a:4b:c6:7d:77: 8a:87:8d:db:88:e7:d4:7a:17:4e:a5:a4:38:8d:e6: 26:88:7e:80:d9:ed:ea:e8:7a:95:ac:34:b9:dc:a1: c0:8e:72:fb:61:70:93:8d:c1:88:1c:c2:29:92:78: 0c:c7:78:d7:19:1a:19:af:94:28:7c:92:2b:30:b1: df:73:cd:15:be:10:bc:a8:37:c3:dc:75:73:f1:ad: 9c:75:93:a9:34:8f:33:3f:0c:9f:cd:be:cc:d1:96: c5:8e:c6:de:b4:05:48:44:5a:e8:1c:6f:3f:9e:19: 05:c2:eb:f8:49:02:ca:68:03:40:17:e9:a4:a1:93: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:A3:B4:91:35:97:CE:90:E4:8D:EB:30:D2:A7:AB:74:E6:9D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd4af659-2c03-3239-9c70-026de165d6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:de:03:4f:25:40:d9:79:48:d4:1c:cc:12:9f:49:42:68:e4: 29:81:ec:aa:16:b4:a4:27:1b:c1:91:55:a2:51:e5:f4:fd:4d: 18:da:a5:3e:64:05:63:ef:52:bd:f2:5d:f0:4d:77:09:fc:d5: 7c:26:fc:d3:93:0c:e6:84:0d:cb:d5:79:81:cb:d5:62:66:4f: e8:65:ba:bc:8f:79:e8:f0:2d:ad:4c:3f:b8:51:76:80:a9:36: fa:84:69:42:2c:94:52:1a:5e:9e:30:3c:4e:69:ab:f4:47:c7: 14:75:79:8a:39:62:87:11:6d:3f:7d:1c:08:1e:7e:df:04:aa: d6:22:2f:90:cd:52:4f:9c:bf:16:83:74:3b:64:6a:44:f9:1d: 9c:23:1a:7d:8f:ac:1c:64:70:6d:09:8b:32:cb:35:41:10:fa: b7:cc:93:f4:55:1a:d3:21:0b:10:a9:07:e1:c7:54:5d:9c:f9: 26:87:47:8a:5d:f1:c5:29:8b:dc:d0:4d:d2:5a:e7:f8:4b:8a: 3f:fb:a4:cc:5d:da:c2:8d:f3:fb:e0:c2:6e:23:72:0c:80:57: 63:78:4e:82:df:11:75:d4:8c:20:12:18:38:95:b0:50:b1:ea: d3:47:f3:42:f7:b3:1a:a9:08:fb:e4:ad:57:c4:91:98:d2:3b: 8c:b4:ce:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8H133GBNzwi30BkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk NWVjOGE3N2ItNjUwYS00ZWIwLTljYmMtNjc0ODQxMTE3YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK5ISzt+dXMegwOqoNiWLY7xcQ0bQSAQm1sq TvfNOf4ut93awfAS4M1hbnKqmPfwNObeDMrNKIqx87oPk3ENwkmSP51EFcRPxoMq Z/6/MNI+PzvoJaaSO5xeOyzFmaKWwZ18inET9iETBXAJ1pDZEz29UZrK8/Ppa+WR opsN2eTWGkvGfXeKh43biOfUehdOpaQ4jeYmiH6A2e3q6HqVrDS53KHAjnL7YXCT jcGIHMIpkngMx3jXGRoZr5QofJIrMLHfc80VvhC8qDfD3HVz8a2cdZOpNI8zPwyf zb7M0ZbFjsbetAVIRFroHG8/nhkFwuv4SQLKaANAF+mkoZNZ2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJiro7SRNZfOkOSN6zDSp6t05p3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Q0YWY2NTktMmMwMy0z MjM5LTljNzAtMDI2ZGUxNjVkNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHeA08lQNl5SNQczBKfSUJo5CmB7KoWtKQnG8GRVaJR5fT9TRja pT5kBWPvUr3yXfBNdwn81Xwm/NOTDOaEDcvVeYHL1WJmT+hluryPeejwLa1MP7hR doCpNvqEaUIslFIaXp4wPE5pq/RHxxR1eYo5YocRbT99HAgeft8EqtYiL5DNUk+c vxaDdDtkakT5HZwjGn2PrBxkcG0JizLLNUEQ+rfMk/RVGtMhCxCpB+HHVF2c+SaH R4pd8cUpi9zQTdJa5/hLij/7pMxd2sKN8/vgwm4jcgyAV2N4ToLfEXXUjCASGDiV sFCx6tNH80L3sxqpCPvkrVfEkZjSO4y0zlI= -----END CERTIFICATE-----Generated at Tue Sep 22 01:59:24 2026 by rpki-client