$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d39fc9e5-0577-311a-8ab3-9cde80726081.roa File: d39fc9e5-0577-311a-8ab3-9cde80726081.roa (raw, json) Hash identifier: QFql2rlf1MNidsxQ+4pbksyYc/N0OBsAgsQ0DS7oHR8= Subject key identifier: 8D:F3:E0:5C:CF:B4:76:5C:9B:64:F1:0E:E8:BC:4D:71:F2:DB:EA:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7917C3B55D6E5281F4D04AA Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d39fc9e5-0577-311a-8ab3-9cde80726081.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:4a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:7c:3b:55:d6:e5:28:1f:4d:04:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c957b2ba-e307-467d-9dd5-8f8b5973d618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:14:24:a2:f3:58:7b:c6:de:c4:77:65:4d: 9e:b0:c1:ed:9d:c1:e9:07:42:99:69:ec:ff:7c:0d: fc:fa:01:d5:8b:db:2b:7c:0a:ed:97:af:9b:4d:e5: 1f:c9:02:b8:54:6a:a6:ad:ff:5d:ef:56:4a:03:af: 9a:05:5d:c1:ed:2e:c1:2a:26:f8:5a:a4:3e:94:71: ee:5f:23:88:43:c6:da:96:dc:73:d9:3c:91:01:23: f8:a1:f5:72:80:25:9b:af:e3:f8:e0:07:00:12:e5: 83:4d:e6:8a:38:4e:94:cd:c7:c5:f2:67:23:ac:b3: b7:58:cc:db:09:d4:27:53:ca:7f:14:a2:d8:bf:39: a8:76:16:e8:10:37:d4:07:e0:49:cd:c8:00:d4:0e: c3:17:28:ac:a3:c4:79:bf:56:43:70:9f:69:01:e4: 06:a5:71:7d:df:23:da:fc:75:f0:71:a5:6f:c0:ce: 07:75:93:63:72:35:96:62:79:8b:e2:35:e0:1b:05: 47:99:98:09:b8:81:51:82:b0:f7:4d:83:6b:bc:19: 23:39:17:3b:1c:28:ea:79:e7:f2:76:08:2a:21:ca: c7:07:23:d8:79:00:fb:e7:5b:3e:4d:0a:32:93:73: b4:33:be:a4:bd:f3:9f:05:3b:5b:8c:1a:da:85:45: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:E0:5C:CF:B4:76:5C:9B:64:F1:0E:E8:BC:4D:71:F2:DB:EA:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d39fc9e5-0577-311a-8ab3-9cde80726081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:18:b2:38:7f:0d:17:da:38:f4:99:64:dd:47:5a:80:ad:4d: b9:52:07:a9:b1:11:a4:bb:9c:7f:e4:53:4d:3b:d5:12:89:37: 04:89:c5:6c:3f:54:13:a6:fe:39:48:6e:04:a3:9d:a4:05:e8: 5b:09:7c:b8:50:23:2b:cd:c4:21:1c:70:32:49:29:36:12:9e: 6b:22:40:26:70:f0:4d:d4:62:5e:f7:fb:1b:d3:f9:a3:12:f7: 3d:f9:fa:cc:53:ec:a0:29:12:36:6e:91:54:18:2f:c7:8c:96: 43:59:ad:4d:f6:4b:d6:bb:a4:5d:e4:be:dc:92:2e:60:68:d1: 92:4b:da:49:7e:5f:cc:94:e0:bd:cd:03:b0:7f:33:ac:11:30: 9d:94:94:5d:93:14:aa:e7:fd:04:48:de:3b:f9:22:12:d4:bc: c9:ac:b1:06:17:76:7e:0f:30:2d:6c:5f:c2:c7:4d:74:93:73: a1:db:0b:c5:31:c5:c8:21:29:a8:f2:e3:2b:86:d5:c0:fc:80: 1f:9f:1f:34:af:cb:83:77:2b:a0:7b:35:ed:99:d0:27:14:ca: 13:f0:1e:e1:a8:55:d3:c5:f1:df:66:8c:dd:68:ac:b0:0c:f9: 30:ad:27:72:8c:fc:49:70:1b:f7:9b:b6:d5:54:e6:67:6e:d0: 77:35:d7:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkXw7VdblKB9NBKowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yzk1N2IyYmEtZTMwNy00NjdkLTlkZDUtOGY4YjU5NzNkNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieAUJKLzWHvG3sR3ZU2esMHtncHpB0KZaez/ fA38+gHVi9srfArtl6+bTeUfyQK4VGqmrf9d71ZKA6+aBV3B7S7BKib4WqQ+lHHu XyOIQ8baltxz2TyRASP4ofVygCWbr+P44AcAEuWDTeaKOE6UzcfF8mcjrLO3WMzb CdQnU8p/FKLYvzmodhboEDfUB+BJzcgA1A7DFyiso8R5v1ZDcJ9pAeQGpXF93yPa /HXwcaVvwM4HdZNjcjWWYnmL4jXgGwVHmZgJuIFRgrD3TYNrvBkjORc7HCjqeefy dggqIcrHByPYeQD751s+TQoyk3O0M76kvfOfBTtbjBrahUX6jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3z4FzPtHZcm2TxDui8TXHy2+q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM5ZmM5ZTUtMDU3Ny0z MTFhLThhYjMtOWNkZTgwNzI2MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8Ysjh/DRfaOPSZZN1HWoCtTblSB6mxEaS7nH/kU0071RKJNwSJ xWw/VBOm/jlIbgSjnaQF6FsJfLhQIyvNxCEccDJJKTYSnmsiQCZw8E3UYl73+xvT +aMS9z35+sxT7KApEjZukVQYL8eMlkNZrU32S9a7pF3kvtySLmBo0ZJL2kl+X8yU 4L3NA7B/M6wRMJ2UlF2TFKrn/QRI3jv5IhLUvMmssQYXdn4PMC1sX8LHTXSTc6Hb C8UxxcghKajy4yuG1cD8gB+fHzSvy4N3K6B7Ne2Z0CcUyhPwHuGoVdPF8d9mjN1o rLAM+TCtJ3KM/ElwG/ebttVU5mdu0Hc111Q= -----END CERTIFICATE-----Generated at Wed Jul 29 10:36:11 2026 by rpki-client