$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa File: dffc65ac-b880-3d4a-a065-093d70d8a397.roa (raw, json) Hash identifier: BezIs8v1BBO4Dh00vzrdN7Vnv01tOHvFoo4m70eX7Mw= Subject key identifier: 70:41:C0:1D:D2:88:BB:DB:EC:87:95:59:E1:4E:6E:93:4D:29:63:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA797BE332E62027D09A4B500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:4e80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:be:33:2e:62:02:7d:09:a4:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3dfc0ac2-81e3-4270-82ff-92b82303251b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:2a:75:01:c7:0c:fa:68:23:31:ad:bb:d5: 5b:92:ed:cd:a9:18:f0:bc:c0:06:99:0d:50:87:2d: b6:00:d3:71:39:c3:ef:a8:fa:bd:b5:39:97:b3:10: 5a:e0:7f:24:35:50:0f:7e:dd:dc:08:bb:0b:52:41: e4:79:e6:06:d1:f5:bf:bb:3c:49:75:e0:47:64:73: 6d:27:de:df:ee:94:41:1b:3d:1b:36:e1:a4:62:76: d9:e5:0a:ee:5e:08:02:26:67:69:97:f3:f4:ef:3e: 3f:e2:ff:06:0f:65:a5:c9:8b:74:d9:59:ab:a9:45: 9e:de:ba:c4:d8:0e:b1:f5:f0:a5:7d:39:ce:6e:35: 02:8f:cb:ca:92:eb:bd:c8:b9:49:1a:d9:07:50:fa: 26:4f:a3:be:25:8a:e3:54:2e:f4:57:90:93:dd:99: 63:88:75:16:f1:d5:21:c4:1a:5d:79:bc:8e:76:cb: 7a:1a:df:c7:eb:1c:6d:e9:f9:e9:2d:9d:f8:d9:c1: 58:9f:ca:7a:8d:4c:e8:cd:45:34:1a:68:81:c6:be: 83:3f:8e:05:09:b7:9d:40:76:20:5d:47:b3:f0:5c: 37:9d:41:cc:bd:28:da:9b:5b:d9:eb:6c:25:23:03: 24:93:c6:6f:d6:e6:9d:48:7b:4e:7c:14:1d:8d:22: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:41:C0:1D:D2:88:BB:DB:EC:87:95:59:E1:4E:6E:93:4D:29:63:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dffc65ac-b880-3d4a-a065-093d70d8a397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:4e80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ec:8b:bf:1e:2c:0e:9b:e0:ab:38:38:e3:1e:b8:5c:3a:7a: 94:e7:25:d8:0c:f0:98:a0:f1:59:7e:50:48:c0:b3:7f:7d:18: 54:1f:6f:80:30:fc:dd:b9:e0:96:f4:d1:3c:41:0d:4d:44:68: 3c:92:e6:c1:54:25:40:47:46:25:4c:90:a8:35:e7:4b:df:30: 0b:39:53:09:a6:71:25:91:ea:76:79:96:cf:ea:6a:68:a6:ff: d5:04:e1:19:ed:8b:ba:c2:bf:a5:e1:1a:c9:53:c8:70:3d:b5: 10:45:53:10:aa:be:62:ec:c9:35:ee:10:02:35:2a:10:f2:0c: ff:6e:6c:f9:9b:be:e5:4f:ef:e4:de:b1:b4:50:50:b5:82:5e: 2d:29:04:03:7a:58:79:d7:c7:df:a6:7f:a4:48:81:b4:f3:b5: 67:b1:cd:69:59:ed:08:1e:5c:6c:67:8f:f6:3e:9e:3d:f2:2d: 79:de:0e:c5:6d:89:77:89:42:54:ca:82:8f:6a:58:3e:c1:c0: ff:1a:5d:71:83:ed:17:f8:8c:a1:e1:a3:c4:a9:ca:b3:fe:fc: 9f:73:de:2d:24:5e:eb:fc:a1:51:69:7d:b6:27:a8:52:0d:de: 12:2c:5e:75:d1:86:7f:df:9c:0e:fd:24:0b:e6:cf:6c:9b:b2: 66:7d:cb:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nl74zLmICfQmktQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2RmYzBhYzItODFlMy00MjcwLTgyZmYtOTJiODIzMDMyNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6AqdQHHDPpoIzGtu9Vbku3NqRjwvMAGmQ1Q hy22ANNxOcPvqPq9tTmXsxBa4H8kNVAPft3cCLsLUkHkeeYG0fW/uzxJdeBHZHNt J97f7pRBGz0bNuGkYnbZ5QruXggCJmdpl/P07z4/4v8GD2WlyYt02VmrqUWe3rrE 2A6x9fClfTnObjUCj8vKkuu9yLlJGtkHUPomT6O+JYrjVC70V5CT3ZljiHUW8dUh xBpdebyOdst6Gt/H6xxt6fnpLZ342cFYn8p6jUzozUU0GmiBxr6DP44FCbedQHYg XUez8Fw3nUHMvSjam1vZ62wlIwMkk8Zv1uadSHtOfBQdjSLz6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBBwB3SiLvb7IeVWeFObpNNKWNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZmYzY1YWMtYjg4MC0z ZDRhLWEwNjUtMDkzZDcwZDhhMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgE6A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHvsi78eLA6b4Ks4OOMeuFw6epTnJdgM8Jig8Vl+UEjAs399GFQf b4Aw/N254Jb00TxBDU1EaDyS5sFUJUBHRiVMkKg150vfMAs5UwmmcSWR6nZ5ls/q amim/9UE4Rnti7rCv6XhGslTyHA9tRBFUxCqvmLsyTXuEAI1KhDyDP9ubPmbvuVP 7+TesbRQULWCXi0pBAN6WHnXx9+mf6RIgbTztWexzWlZ7QgeXGxnj/Y+nj3yLXne DsVtiXeJQlTKgo9qWD7BwP8aXXGD7Rf4jKHho8SpyrP+/J9z3i0kXuv8oVFpfbYn qFIN3hIsXnXRhn/fnA79JAvmz2ybsmZ9y/g= -----END CERTIFICATE-----Generated at Wed Jul 29 04:47:01 2026 by rpki-client