$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa File: d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa (raw, json) Hash identifier: uQbxOHSuR5BAUTgQFF1F3S7BZLayDjLzkY8Pru9f7m0= Subject key identifier: 33:56:6B:BB:3F:31:0E:3C:B3:FA:73:43:EF:60:42:3C:AF:46:17:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972FF7554663AEE6F61E580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:7880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ff:75:54:66:3a:ee:6f:61:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=53efba8d-e839-4e55-8279-e3883110cb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:bf:6b:7c:d6:b0:e5:61:32:b9:30:06:4f: 44:7b:9b:d5:1b:d6:08:09:46:b5:17:d3:54:96:3f: 9a:68:37:69:3e:c8:c4:a1:69:0e:95:1a:50:ab:1e: ff:ed:57:f7:f7:27:c9:18:42:7e:2a:ab:2a:46:b1: 67:68:07:54:5c:0e:07:f1:04:90:34:33:85:05:b7: 36:54:a3:c4:d6:07:15:3c:1c:7c:97:de:28:53:d8: 50:7d:ed:15:13:49:84:46:bc:8c:7f:c9:fc:aa:5e: 7a:80:fe:51:7e:41:d6:53:a5:86:f6:32:50:6b:51: 53:0e:35:1d:a6:ea:5b:15:72:d1:d7:c2:2b:68:c6: 73:6a:d8:e1:f9:c3:87:90:c8:16:60:cc:e9:d8:18: f2:c8:b2:b3:12:a5:1b:1b:67:e2:93:1c:89:2b:0a: 3d:3b:6d:cd:9a:14:49:18:c7:9c:94:ef:15:20:8b: 31:f9:9a:14:4c:1c:4f:1b:49:aa:05:78:ee:4f:23: 5c:e7:cc:9c:b5:92:b3:98:9d:66:53:29:88:09:ac: 5e:49:fe:08:68:82:6b:56:cf:e3:51:a0:af:69:24: 86:d8:7c:ee:1c:b9:13:05:4a:a6:3a:61:90:75:63: 0d:36:ed:d6:cd:cf:7a:af:22:86:9d:62:e1:60:23: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:6B:BB:3F:31:0E:3C:B3:FA:73:43:EF:60:42:3C:AF:46:17:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7880::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c6:31:d2:72:99:43:e0:22:d6:dc:0d:61:3a:40:e6:36:99: 2d:d0:22:ee:cf:7f:ce:26:47:14:af:dd:1c:b4:ff:8e:81:09: 8c:30:b8:94:f1:88:ce:16:20:61:16:8c:5f:1c:ce:62:4f:07: 82:9c:18:c1:05:c9:c3:50:54:99:76:13:4c:c0:1d:ad:29:11: 44:83:5a:2f:83:4e:53:82:d4:23:12:b7:d9:9b:b4:fa:15:9c: 5c:b3:fc:c7:05:bb:ba:f4:79:f4:ce:54:e5:fd:cd:f3:de:82: 4b:ec:95:0a:1a:e5:2b:22:31:30:9f:49:9a:7f:00:21:60:bd: 0c:06:08:53:b0:5e:22:e2:8c:97:e6:73:fd:52:44:ac:e6:40: 16:9e:8c:b7:a2:5c:ca:00:61:24:b9:35:aa:3f:e6:6b:55:f1: 80:76:d5:3d:a3:93:de:1f:7a:98:31:a6:fd:2b:d1:a7:4a:9f: 3e:82:8d:5e:60:6c:75:d6:92:84:84:83:fc:d3:d3:5e:9a:5f: 8c:e9:12:38:e5:2f:ba:16:65:e7:0e:0e:9b:aa:11:6a:e0:99: 54:d6:42:6b:24:a1:55:dd:f8:8b:50:92:9c:0c:12:64:09:58: 1d:d0:55:a2:72:06:57:1d:bd:ba:32:45:56:ca:2d:d1:25:7b: bf:18:43:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcv91VGY67m9h5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTNlZmJhOGQtZTgzOS00ZTU1LTgyNzktZTM4ODMxMTBjYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3S/a3zWsOVhMrkwBk9Ee5vVG9YICUa1F9NU lj+aaDdpPsjEoWkOlRpQqx7/7Vf39yfJGEJ+KqsqRrFnaAdUXA4H8QSQNDOFBbc2 VKPE1gcVPBx8l94oU9hQfe0VE0mERryMf8n8ql56gP5RfkHWU6WG9jJQa1FTDjUd pupbFXLR18IraMZzatjh+cOHkMgWYMzp2BjyyLKzEqUbG2fikxyJKwo9O23NmhRJ GMeclO8VIIsx+ZoUTBxPG0mqBXjuTyNc58yctZKzmJ1mUymICaxeSf4IaIJrVs/j UaCvaSSG2HzuHLkTBUqmOmGQdWMNNu3Wzc96ryKGnWLhYCPcgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNWa7s/MQ48s/pzQ+9gQjyvRhc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQzOGI4NzItZjhkNy0z MGI2LWEyZjItOTFjZWNmMjRhMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvGMdJymUPgItbcDWE6QOY2mS3QIu7Pf84mRxSv3Ry0/46BCYww uJTxiM4WIGEWjF8czmJPB4KcGMEFycNQVJl2E0zAHa0pEUSDWi+DTlOC1CMSt9mb tPoVnFyz/McFu7r0efTOVOX9zfPegkvslQoa5SsiMTCfSZp/ACFgvQwGCFOwXiLi jJfmc/1SRKzmQBaejLeiXMoAYSS5Nao/5mtV8YB21T2jk94fepgxpv0r0adKnz6C jV5gbHXWkoSEg/zT016aX4zpEjjlL7oWZecODpuqEWrgmVTWQmskoVXd+ItQkpwM EmQJWB3QVaJyBlcdvboyRVbKLdEle78YQ78= -----END CERTIFICATE-----Generated at Wed Sep 30 04:51:33 2026 by rpki-client