$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa File: cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa (raw, json) Hash identifier: TuHhQ+MPEH0OumclX1Z70OmKBnBJiqeZq5VmhS1emso= Subject key identifier: 99:73:7E:0C:FE:50:76:16:66:5D:9C:3B:4D:27:33:BB:A2:4E:54:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2EED29E076B30D81F571C680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2d81:1f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:29:e0:76:b3:0d:81:f5:71:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=8de3770e-bf6b-4ce8-83e4-faf702382516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:4e:6f:d1:ff:d6:43:34:c9:05:fc:68:c5: 1d:2d:8a:9d:02:5b:0d:12:9c:f8:df:db:6e:7a:57: 8a:0a:49:8c:c4:e5:d4:68:bd:44:03:08:44:68:8d: d9:9a:7c:03:1e:21:4b:44:e6:66:d9:b1:9e:11:77: 01:c4:ca:b2:78:93:2b:32:0f:b0:f0:09:84:04:84: 6a:a8:26:d7:aa:8d:77:24:09:3c:0a:0e:7c:f0:e0: 2d:00:1a:e4:02:8c:33:77:63:89:33:50:de:d5:f2: 49:b7:c0:ae:67:43:e3:db:85:47:7f:d5:cc:a5:c7: 2e:cd:84:48:37:6e:a9:59:71:cf:2d:d4:fc:80:4f: b0:2a:e1:79:08:cd:6f:c7:c5:b7:11:ff:24:dc:42: 9c:1e:71:4a:6c:88:44:4a:f8:a7:98:76:e4:6f:be: 06:85:15:bb:ab:7b:f4:33:13:ca:81:9c:21:b2:b9: 82:f6:f3:71:19:df:7e:ad:38:24:49:ca:61:05:fb: 09:32:a1:35:2b:a9:42:de:7e:f7:ab:ad:ec:0c:16: 14:e7:e2:86:f1:4b:88:89:4c:18:d9:61:1b:c5:8f: ec:76:ad:66:65:c4:bc:5b:30:1b:94:13:aa:73:4d: b9:b0:b6:6c:b6:1d:47:83:45:74:23:cd:27:6f:15: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:7E:0C:FE:50:76:16:66:5D:9C:3B:4D:27:33:BB:A2:4E:54:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4c04a6-67f0-3d6c-97e3-a23a62f9c92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:95:6f:ca:54:32:62:6a:f0:f3:65:19:1e:34:5f:74:ee:10: 4e:b7:e5:99:78:9c:0a:9e:3d:e3:f7:b5:03:e5:87:81:35:8d: 87:8f:28:d6:89:60:40:53:11:db:be:f8:dc:d3:3a:c0:ba:2b: 7d:85:a0:f3:29:ad:b0:38:e2:e7:52:6f:81:7b:7d:e8:0b:43: 8d:e0:58:6f:89:ed:75:11:71:2f:33:40:06:b8:a8:4f:94:e8: 6e:83:bf:af:81:cf:5b:d0:1f:19:5e:b5:64:fb:6b:2f:a4:26: 06:3a:42:02:86:6b:6b:10:f5:85:1b:3d:ed:ed:e8:33:3b:23: 55:db:20:69:5a:b1:32:c5:74:4c:78:62:7a:2b:fe:01:0f:e3: ea:85:8a:18:c4:2b:d2:cc:eb:0a:69:d2:35:04:d5:80:43:ec: 3b:91:59:52:29:3a:98:74:bf:70:ef:9d:fe:36:6f:df:41:c0: 83:12:62:20:ed:43:30:f8:cb:9b:1b:75:da:58:be:57:c4:1a: 31:40:eb:f1:65:62:db:e8:ca:dd:7e:98:f9:9f:db:51:d4:0f: f8:ef:bf:1b:9f:75:ff:2e:b1:6c:f8:84:f8:c1:02:39:8e:4f: 4d:15:64:4b:2f:3b:d0:bd:fe:b6:4c:45:6a:f6:0f:2c:a3:31: e1:58:92:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8u7SngdrMNgfVxxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk OGRlMzc3MGUtYmY2Yi00Y2U4LTgzZTQtZmFmNzAyMzgyNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwJOb9H/1kM0yQX8aMUdLYqdAlsNEpz439tu eleKCkmMxOXUaL1EAwhEaI3ZmnwDHiFLROZm2bGeEXcBxMqyeJMrMg+w8AmEBIRq qCbXqo13JAk8Cg588OAtABrkAowzd2OJM1De1fJJt8CuZ0Pj24VHf9XMpccuzYRI N26pWXHPLdT8gE+wKuF5CM1vx8W3Ef8k3EKcHnFKbIhESvinmHbkb74GhRW7q3v0 MxPKgZwhsrmC9vNxGd9+rTgkScphBfsJMqE1K6lC3n73q63sDBYU5+KG8UuIiUwY 2WEbxY/sdq1mZcS8WzAblBOqc025sLZsth1Hg0V0I80nbxVL6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlzfgz+UHYWZl2cO00nM7uiTlSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y0YzA0YTYtNjdmMC0z ZDZjLTk3ZTMtYTIzYTYyZjljOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGVb8pUMmJq8PNlGR40X3TuEE635Zl4nAqePeP3tQPlh4E1jYeP KNaJYEBTEdu++NzTOsC6K32FoPMprbA44udSb4F7fegLQ43gWG+J7XURcS8zQAa4 qE+U6G6Dv6+Bz1vQHxletWT7ay+kJgY6QgKGa2sQ9YUbPe3t6DM7I1XbIGlasTLF dEx4Ynor/gEP4+qFihjEK9LM6wpp0jUE1YBD7DuRWVIpOph0v3Dvnf42b99BwIMS YiDtQzD4y5sbddpYvlfEGjFA6/FlYtvoyt1+mPmf21HUD/jvvxufdf8usWz4hPjB AjmOT00VZEsvO9C9/rZMRWr2DyyjMeFYkic= -----END CERTIFICATE-----Generated at Fri Sep 25 18:24:02 2026 by rpki-client