$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa File: efbb9d9c-3bca-31f8-83ab-151a905e688b.roa (raw, json) Hash identifier: qBz2R8IBsnbWyoB8okGefwALOsfRTf7C0XeLHyR3Oo0= Subject key identifier: 58:3B:7B:9D:53:98:A6:C4:BE:9C:85:E7:AC:CF:6C:03:16:2D:2C:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF44CCC0696166279D3423100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cc:06:96:16:62:79:d3:42:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3bfcb5a4-39b0-4e29-9c98-1ba6030af3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:5e:ce:a8:5e:0d:41:55:a3:2a:d0:db:cb: 2f:29:64:48:b1:cc:2d:58:de:c3:91:03:d4:18:94: d9:62:12:73:29:0e:6b:6d:a1:6a:16:a9:07:b8:1b: 70:ff:de:a9:11:57:ce:61:4e:30:9f:fd:5b:f1:a1: 5d:85:64:2d:7a:36:78:ae:db:d5:bd:0e:d4:86:b1: e5:5b:46:3e:05:b7:22:97:c5:24:49:56:d7:02:e5: c4:a2:ad:4b:08:92:fe:fb:3c:3c:85:f5:f6:0a:a2: 73:1f:64:10:61:c9:42:63:06:0b:d8:ba:27:ba:fc: f9:af:e5:96:a5:cf:13:b1:f1:66:d6:bd:a7:d2:40: ff:48:04:1d:66:f4:9a:4c:84:b6:f0:cb:2e:78:80: d5:e0:e1:98:e5:a4:05:5c:b9:a8:5c:21:64:4e:cd: 7c:8f:d0:d9:72:5d:d0:c3:1f:7b:ad:3b:23:99:6d: 84:d3:fd:26:a0:dc:c3:c8:71:e3:cf:b6:a4:ae:41: 86:d2:ae:03:cd:fb:9c:8b:a6:a0:88:fa:ae:d4:fb: 5c:43:f7:30:51:18:57:c8:07:4a:8c:c6:8a:38:5a: 4c:da:03:5c:f7:66:00:92:f4:5e:27:b3:21:77:b7: 41:b2:27:5d:a5:f9:71:86:28:64:b7:32:c1:96:94: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3B:7B:9D:53:98:A6:C4:BE:9C:85:E7:AC:CF:6C:03:16:2D:2C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/efbb9d9c-3bca-31f8-83ab-151a905e688b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:49:5d:87:f2:e7:9a:eb:5e:3d:d9:84:f5:ea:78:c9:b5:d7: 68:87:f4:16:f6:0c:2d:36:46:bf:a6:40:16:4c:2e:34:57:68: 1a:b5:fe:d2:50:11:d6:0f:40:97:5e:48:ba:4d:31:de:55:aa: c8:a4:ee:d7:84:65:73:a7:fd:ec:d6:27:fa:58:8c:eb:74:1f: 5f:15:64:25:37:c2:cd:c0:42:58:6b:d7:ae:a0:9b:74:70:b0: cc:46:e0:92:68:76:2d:ce:50:42:de:8a:2a:9d:06:64:e3:71: 99:a4:f6:86:3a:5c:7c:62:04:1c:9d:6a:52:76:ab:09:7a:d9: ae:57:fb:16:97:46:f5:e5:68:31:63:dc:0e:62:68:c1:d6:13: a8:f6:78:9f:40:6e:ad:0c:97:70:a3:1c:3b:9a:cf:8c:34:40: 68:80:91:16:09:ee:6e:9f:0c:be:ce:53:7a:41:9a:8f:ec:f5: 4d:1e:d8:71:0f:94:43:5d:cf:37:34:a2:28:1c:96:2d:e3:c9: ea:70:1b:e4:e2:64:53:90:d1:02:6c:d0:b8:29:aa:62:9e:0e: 51:ba:62:9d:71:2f:f6:d1:c9:bc:14:72:cf:e7:65:92:8d:28: 8a:ce:25:d8:9a:b9:cf:15:6b:b3:3c:98:b9:cd:96:f6:6a:84: 25:09:bd:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE70TMwGlhZiedNCMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk M2JmY2I1YTQtMzliMC00ZTI5LTljOTgtMWJhNjAzMGFmM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGNezqheDUFVoyrQ28svKWRIscwtWN7DkQPU GJTZYhJzKQ5rbaFqFqkHuBtw/96pEVfOYU4wn/1b8aFdhWQtejZ4rtvVvQ7UhrHl W0Y+Bbcil8UkSVbXAuXEoq1LCJL++zw8hfX2CqJzH2QQYclCYwYL2Lonuvz5r+WW pc8TsfFm1r2n0kD/SAQdZvSaTIS28MsueIDV4OGY5aQFXLmoXCFkTs18j9DZcl3Q wx97rTsjmW2E0/0moNzDyHHjz7akrkGG0q4Dzfuci6agiPqu1PtcQ/cwURhXyAdK jMaKOFpM2gNc92YAkvReJ7Mhd7dBsiddpflxhihktzLBlpQ5dwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFg7e51TmKbEvpyF56zPbAMWLSx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWZiYjlkOWMtM2JjYS0z MWY4LTgzYWItMTUxYTkwNWU2ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgBww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaUldh/LnmutePdmE9ep4ybXXaIf0FvYMLTZGv6ZAFkwuNFdoGrX+ 0lAR1g9Al15Iuk0x3lWqyKTu14Rlc6f97NYn+liM63QfXxVkJTfCzcBCWGvXrqCb dHCwzEbgkmh2Lc5QQt6KKp0GZONxmaT2hjpcfGIEHJ1qUnarCXrZrlf7FpdG9eVo MWPcDmJowdYTqPZ4n0BurQyXcKMcO5rPjDRAaICRFgnubp8Mvs5TekGaj+z1TR7Y cQ+UQ13PNzSiKByWLePJ6nAb5OJkU5DRAmzQuCmqYp4OUbpinXEv9tHJvBRyz+dl ko0ois4l2Jq5zxVrszyYuc2W9mqEJQm9AQ== -----END CERTIFICATE-----Generated at Tue Sep 22 02:53:55 2026 by rpki-client