$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dccf25d3-e2bc-30d6-a905-b2435e9159f3.roa File: dccf25d3-e2bc-30d6-a905-b2435e9159f3.roa (raw, json) Hash identifier: oE+j71BHNX7FX8p+3LkoyVq5zZho5WJF7yOUx9V49Q4= Subject key identifier: 18:37:0D:FD:4D:6A:CD:65:B7:C2:F4:7A:D7:AD:0C:7A:08:25:9E:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F353C84B70845875083B01E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dccf25d3-e2bc-30d6-a905-b2435e9159f3.roa Signing time: Thu 17 Sep 2026 19:15:14 +0000 ROA not before: Thu 17 Sep 2026 19:15:14 +0000 ROA not after: Wed 16 Dec 2026 20:15:14 +0000 asID: 30036 IP address blocks: 2604:2d80:580::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:3c:84:b7:08:45:87:50:83:b0:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 19:15:14 2026 GMT Not After : Dec 16 20:15:14 2026 GMT Subject: CN=87fd3985-9335-4e11-9aa2-a3644201bfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:f8:d7:12:bb:ba:c3:52:63:3a:0c:93:ae: c7:ad:e7:cf:74:fb:e8:fb:d0:11:ed:cf:42:b1:f8: c3:c6:24:10:f2:27:c3:b7:f9:52:90:d7:01:41:46: 68:22:24:c8:b1:b8:31:25:09:9b:bb:9d:94:0e:7f: f9:98:cd:74:f2:e7:fc:3f:9c:58:eb:2a:46:7b:4d: 8f:cf:1d:1f:1a:6b:db:08:2f:fc:83:34:26:04:00: c7:c9:05:04:e5:6c:76:d3:fb:88:ed:7d:30:51:aa: 1e:ae:24:22:7c:d0:08:83:85:12:b9:4c:5f:29:26: 6d:ba:3c:fa:04:27:5e:c4:80:22:fc:db:94:c0:6f: 9a:40:d6:00:45:eb:42:5d:0d:95:52:e4:9e:e0:19: 4c:38:e8:a2:79:1b:74:31:99:c2:9c:7f:da:ed:8b: 08:2c:22:3a:83:d6:4b:ba:70:e5:09:d9:90:f5:08: 74:4f:d4:f5:ce:0c:f7:18:79:e4:5c:a3:c6:de:87: c3:40:c8:9f:f3:bc:6d:d2:29:8e:1d:02:e6:ff:55: af:3f:da:17:7e:9b:49:f5:f0:93:c2:e3:07:65:a5: 61:cc:47:c3:29:36:f7:78:25:1c:7d:78:16:81:aa: 40:83:5b:60:93:01:77:ea:c5:e8:af:0d:ef:8e:b5: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:37:0D:FD:4D:6A:CD:65:B7:C2:F4:7A:D7:AD:0C:7A:08:25:9E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dccf25d3-e2bc-30d6-a905-b2435e9159f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:580::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c9:1f:03:48:2e:a2:7d:eb:2f:10:dc:c3:7a:26:68:79:a4: 6e:53:cd:86:ba:9e:34:3f:e4:b5:05:bc:58:6c:fc:1b:ae:5a: ed:79:79:8e:02:a5:53:17:aa:55:99:19:68:4c:a1:3c:53:85: 34:e2:3f:0d:f6:20:40:b6:72:be:bb:ab:5f:e5:a0:bd:b8:54: 3a:32:b8:bd:0e:02:c8:f3:3d:66:a6:67:72:00:d4:14:a6:c3: c4:c4:dd:20:a5:16:93:9f:07:5c:0e:f5:0c:a5:25:7c:0c:fa: a7:4b:c9:fc:ec:f5:37:3a:d4:f6:75:68:34:12:e3:4f:c4:ed: ab:bb:59:de:60:f3:4a:71:42:b3:a5:a2:d9:54:e2:3c:15:66: a0:8f:30:16:e5:ec:8e:ce:f7:94:70:3a:9c:c1:98:38:80:72: 3f:64:f7:f6:75:b6:3d:2e:d0:94:62:bb:a8:66:85:6a:15:55: b4:74:d2:4f:df:95:5b:84:ef:45:e4:01:f5:27:64:1f:18:10: 39:9a:15:f6:26:93:f7:ef:f2:23:bc:67:c7:89:27:ef:13:8a: 4a:cc:47:62:1f:a8:2f:4d:c6:56:0c:94:28:e2:49:73:ce:8f: 09:a8:9a:cb:61:11:9a:9d:48:e6:a4:8f:07:ee:16:11:0a:59: d1:b2:fc:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE81PIS3CEWHUIOwHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzE5MTUxNFoXDTI2MTIxNjIwMTUxNFowLzEtMCsGA1UEAxMk ODdmZDM5ODUtOTMzNS00ZTExLTlhYTItYTM2NDQyMDFiZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIz41xK7usNSYzoMk67HrefPdPvo+9AR7c9C sfjDxiQQ8ifDt/lSkNcBQUZoIiTIsbgxJQmbu52UDn/5mM108uf8P5xY6ypGe02P zx0fGmvbCC/8gzQmBADHyQUE5Wx20/uI7X0wUaoeriQifNAIg4USuUxfKSZtujz6 BCdexIAi/NuUwG+aQNYARetCXQ2VUuSe4BlMOOiieRt0MZnCnH/a7YsILCI6g9ZL unDlCdmQ9Qh0T9T1zgz3GHnkXKPG3ofDQMif87xt0imOHQLm/1WvP9oXfptJ9fCT wuMHZaVhzEfDKTb3eCUcfXgWgapAg1tgkwF36sXorw3vjrUgJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBg3Df1Nas1lt8L0etetDHoIJZ4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGNjZjI1ZDMtZTJiYy0z MGQ2LWE5MDUtYjI0MzVlOTE1OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAWA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnJHwNILqJ96y8Q3MN6Jmh5pG5TzYa6njQ/5LUFvFhs/BuuWu15 eY4CpVMXqlWZGWhMoTxThTTiPw32IEC2cr67q1/loL24VDoyuL0OAsjzPWamZ3IA 1BSmw8TE3SClFpOfB1wO9QylJXwM+qdLyfzs9Tc61PZ1aDQS40/E7au7Wd5g80px QrOlotlU4jwVZqCPMBbl7I7O95RwOpzBmDiAcj9k9/Z1tj0u0JRiu6hmhWoVVbR0 0k/flVuE70XkAfUnZB8YEDmaFfYmk/fv8iO8Z8eJJ+8TikrMR2IfqC9NxlYMlCji SXPOjwmomsthEZqdSOakjwfuFhEKWdGy/DA= -----END CERTIFICATE-----Generated at Mon Sep 21 14:47:31 2026 by rpki-client