$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: R8rr5Y1WP7wpmTTxNNgmszPZAV25ZT0kLC00ksWmez8= Subject key identifier: D0:C1:F5:BB:69:43:CC:B5:49:43:A8:FA:4A:64:FB:1C:D5:6E:48:19 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584ECBD1E91057522159CDCEC380 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e9:10:57:52:21:59:cd:ce:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=49c89846-d567-4286-ad48-5ef187e71c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:0e:1a:b4:63:cf:95:1a:68:93:c8:af:df: dc:00:af:97:01:6d:1d:dc:70:8e:6f:ef:68:cf:1d: ba:a3:07:69:9c:4b:3f:8a:d4:87:26:40:92:9f:c7: 17:88:b1:a0:fa:bf:21:b9:c3:20:d7:4e:53:c8:92: d0:9a:0a:38:8c:fb:91:e2:d1:16:c4:b5:e6:f5:b9: 4e:8f:46:40:7f:2a:48:53:ed:cd:17:ea:90:e3:c7: 94:09:1b:83:4b:42:b7:cd:6e:f6:1f:14:10:04:30: dc:55:fb:d9:b8:cb:b0:a6:03:52:1a:62:9e:77:4e: 4e:81:d5:55:7e:ae:7a:8c:d1:8d:9b:ba:33:28:21: 74:9c:40:2c:71:d5:88:77:cc:57:22:61:80:d2:23: 2a:21:50:20:97:29:cc:5f:f5:92:39:94:1a:17:00: 55:32:13:31:7a:07:79:d7:ce:16:29:72:f6:28:39: 2d:ec:0c:01:40:1b:03:09:d2:d1:fc:91:28:62:68: 32:9d:ad:af:dd:1f:f7:66:9b:c5:f0:93:99:d7:98: 5d:f3:dc:4b:e1:4e:76:b0:11:cc:1b:fe:7d:4c:ce: bb:82:75:fe:49:2a:93:7c:af:b2:9e:f3:9d:1b:76: 30:09:e5:10:e9:26:d6:f9:e5:d0:43:03:42:2a:26: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C1:F5:BB:69:43:CC:B5:49:43:A8:FA:4A:64:FB:1C:D5:6E:48:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:16:34:3b:d2:91:ec:06:02:2a:37:6a:bd:f4:a2:3c:5b:77: b9:3b:d2:e9:b9:e3:2d:19:65:31:dd:61:90:34:20:8b:19:5c: 7c:08:8b:5d:c0:10:76:af:d7:40:35:22:0a:5d:e5:16:be:2a: d1:9a:c8:c2:9d:85:4d:5a:22:54:43:21:7d:cd:0b:67:26:03: 07:02:d4:1c:6b:05:73:5a:b9:c2:71:8c:5b:a5:71:2e:3e:93: c9:01:6f:db:f8:28:3d:ff:b9:4f:f2:0f:bf:89:c1:9b:e0:83: a9:b7:cf:64:49:37:20:39:46:a0:8a:61:bd:24:13:1f:d4:91: 2b:ce:dc:8d:9b:6e:2c:8c:d6:e5:05:61:17:d2:f6:52:f1:7f: ea:90:d5:9e:1c:d5:6e:bd:08:d1:90:c7:85:eb:c3:82:39:cb: c8:b8:da:26:16:07:ff:8e:f5:1f:cc:cb:bd:60:68:03:f9:aa: 9c:0e:2e:1c:70:4d:4d:71:56:aa:28:31:21:0b:b5:c5:ed:da: 98:50:30:ee:ed:52:31:a4:2c:c1:48:da:e0:93:71:22:7e:0a: db:2a:fe:4a:d1:e5:7e:78:0d:eb:6c:f9:9c:41:bf:81:b3:9b: 57:fa:53:0e:25:bf:1b:14:a5:93:50:57:7e:3f:0f:4b:4d:b5: 62:7f:44:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7L0ekQV1IhWc3Ow4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NDljODk4NDYtZDU2Ny00Mjg2LWFkNDgtNWVmMTg3ZTcxYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+oOGrRjz5UaaJPIr9/cAK+XAW0d3HCOb+9o zx26owdpnEs/itSHJkCSn8cXiLGg+r8hucMg105TyJLQmgo4jPuR4tEWxLXm9blO j0ZAfypIU+3NF+qQ48eUCRuDS0K3zW72HxQQBDDcVfvZuMuwpgNSGmKed05OgdVV fq56jNGNm7ozKCF0nEAscdWId8xXImGA0iMqIVAglynMX/WSOZQaFwBVMhMxegd5 184WKXL2KDkt7AwBQBsDCdLR/JEoYmgyna2v3R/3ZpvF8JOZ15hd89xL4U52sBHM G/59TM67gnX+SSqTfK+ynvOdG3YwCeUQ6SbW+eXQQwNCKiYC9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDB9btpQ8y1SUOo+kpk+xzVbkgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDJFjQ70pHsBgIqN2q99KI8W3e5O9LpueMtGWUx3WGQNCCLGVx8CItd wBB2r9dANSIKXeUWvirRmsjCnYVNWiJUQyF9zQtnJgMHAtQcawVzWrnCcYxbpXEu PpPJAW/b+Cg9/7lP8g+/icGb4IOpt89kSTcgOUagimG9JBMf1JErztyNm24sjNbl BWEX0vZS8X/qkNWeHNVuvQjRkMeF68OCOcvIuNomFgf/jvUfzMu9YGgD+aqcDi4c cE1NcVaqKDEhC7XF7dqYUDDu7VIxpCzBSNrgk3EifgrbKv5K0eV+eA3rbPmcQb+B s5tX+lMOJb8bFKWTUFd+Pw9LTbVif0T0 -----END CERTIFICATE-----Generated at Sat Sep 26 07:24:37 2026 by rpki-client