$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa File: 3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa (raw, json) Hash identifier: sZzKBTs+jL14ZGIZcnET31apkFjeSG6ryzBANJ934tA= Subject key identifier: 9C:54:87:18:74:35:1C:8F:EE:5A:7F:16:5C:3B:85:C5:E1:B6:7A:74 Certificate issuer: /CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Certificate serial: 010D0C9F4328584ED2CC783C1D08AE1278E6F340 Authority key identifier: 91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 20382 IP address blocks: 2604:2da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:78:3c:1d:08:ae:12:78:e6:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=35971cdd-c3e4-4fcb-8724-2b3e43cbc573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:25:2c:b0:70:39:71:20:ce:e5:c7:20:40: cb:11:86:37:76:30:b5:e7:9a:21:44:2a:da:fa:4f: 5f:44:df:1d:fb:3d:bf:b5:ee:c5:c4:83:d3:8d:f2: b1:13:09:f1:a8:01:fd:68:11:6e:c7:00:ad:b3:86: d2:aa:84:de:55:27:be:af:2e:de:e0:32:45:68:68: 97:58:fd:c3:3c:22:ce:e9:fb:c2:9c:83:62:0c:2e: 02:67:b4:97:7e:e8:37:be:3d:cc:1b:55:24:a5:ee: f4:49:7e:39:8d:a6:92:95:3e:6c:b3:8f:d2:6d:07: 8a:33:8c:d0:17:f4:0b:5b:7b:d4:73:e0:b5:57:7a: e5:cc:f1:e1:e1:8d:d5:16:3c:ec:aa:42:67:a3:81: 6b:05:5c:0f:a9:4b:34:6e:8e:f7:09:c2:4f:e2:1e: 4d:43:45:aa:1c:3c:b7:b0:33:1f:e3:4f:65:6e:ee: 48:65:0e:15:b4:67:e2:4b:db:ba:a3:3a:58:f3:4a: 39:d8:aa:03:85:6b:10:f1:5d:55:6e:fa:2b:ca:4b: 1b:f8:08:f0:e1:42:f2:41:33:67:b1:7c:1f:61:41: 82:b0:56:1b:6b:b6:24:f1:b8:18:c8:7e:62:10:75: 46:bd:36:e2:b7:26:66:18:d6:82:d5:02:1a:35:b6: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:87:18:74:35:1C:8F:EE:5A:7F:16:5C:3B:85:C5:E1:B6:7A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl X509v3 Authority Key Identifier: keyid:91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer sbgp-ipAddrBlock: critical IPv6: 2604:2da0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:28:92:39:bd:b4:ca:1f:fa:c1:07:03:a4:c3:05:2b:f8:a2: b1:fa:9f:a5:76:56:55:9e:67:90:bc:46:4f:96:d1:bf:cb:a3: 7b:56:0a:2e:74:0c:11:81:81:e7:2f:bf:b0:38:37:44:44:b0: 1c:05:f3:f6:14:44:52:78:1a:0d:0a:3d:57:5f:ba:bc:d1:28: 76:23:97:0a:02:ee:0e:1b:83:cb:29:30:61:e9:c4:b9:c5:cc: 32:00:87:b1:a8:e5:62:06:46:a8:12:33:c5:94:65:a3:88:7d: 8d:25:5e:2a:31:0c:00:a3:ff:67:c9:68:b3:7a:10:62:c4:77: da:80:a5:d6:a9:80:d3:76:fc:8a:56:cc:25:6d:e2:2b:0a:82: bf:69:62:90:f5:85:88:38:6e:62:33:55:02:27:f8:66:0d:a8: 6c:9e:0f:46:38:c8:dd:d4:c1:a7:fe:ea:2f:83:26:3a:91:fe: 81:1f:bb:71:e4:c7:56:d4:72:64:58:87:bb:43:01:fb:92:94: fd:9d:8e:80:21:86:6b:1c:78:dd:96:89:4a:53:f0:41:62:85: c4:6c:9e:1a:cb:f4:ea:52:39:41:08:ac:9c:ee:ce:1a:88:f6: ba:c7:e4:3b:57:16:eb:fd:5a:4a:a4:0d:d1:dd:c8:41:5c:de: 5c:e9:cf:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7SzHg8HQiuEnjm80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1NWFkODQtZjlmMi00NjRiLWI1MGEtYTlkMjY4YzVi YjRlMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk MzU5NzFjZGQtYzNlNC00ZmNiLTg3MjQtMmIzZTQzY2JjNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppMlLLBwOXEgzuXHIEDLEYY3djC155ohRCra +k9fRN8d+z2/te7FxIPTjfKxEwnxqAH9aBFuxwCts4bSqoTeVSe+ry7e4DJFaGiX WP3DPCLO6fvCnINiDC4CZ7SXfug3vj3MG1Ukpe70SX45jaaSlT5ss4/SbQeKM4zQ F/QLW3vUc+C1V3rlzPHh4Y3VFjzsqkJno4FrBVwPqUs0bo73CcJP4h5NQ0WqHDy3 sDMf409lbu5IZQ4VtGfiS9u6ozpY80o52KoDhWsQ8V1Vbvoryksb+Ajw4ULyQTNn sXwfYUGCsFYba7Yk8bgYyH5iEHVGvTbityZmGNaC1QIaNbY6EQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJxUhxh0NRyP7lp/Flw7hcXhtnp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1 YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQyNjhjNWJiNGUvM2JmZGU5MmMtMjhmNC0z MDc0LThlNTQtYjZlYTVkN2Y3M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTI1NWFkODQtZjlmMi00NjRiLWI1 MGEtYTlkMjY4YzViYjRlLzEyNTVhZDg0LWY5ZjItNDY0Yi1iNTBhLWE5ZDI2OGM1 YmI0ZS5jcmwwHwYDVR0jBBgwFoAUkXTnzCE/SkbK1XASPRpJ3ydGTiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQy NjhjNWJiNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQtoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApKJI5vbTKH/rBBwOkwwUr+KKx+p+ldlZVnmeQvEZPltG/y6N7Vgou dAwRgYHnL7+wODdERLAcBfP2FERSeBoNCj1XX7q80Sh2I5cKAu4OG4PLKTBh6cS5 xcwyAIexqOViBkaoEjPFlGWjiH2NJV4qMQwAo/9nyWizehBixHfagKXWqYDTdvyK VswlbeIrCoK/aWKQ9YWIOG5iM1UCJ/hmDahsng9GOMjd1MGn/uovgyY6kf6BH7tx 5MdW1HJkWIe7QwH7kpT9nY6AIYZrHHjdlolKU/BBYoXEbJ4ay/TqUjlBCKyc7s4a iPa6x+Q7Vxbr/VpKpA3R3chBXN5c6c8/ -----END CERTIFICATE-----Generated at Tue Sep 22 16:37:08 2026 by rpki-client