$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa File: 3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa (raw, json) Hash identifier: Xacxwo8kNea9AFf0pQ30c+sAeooNXycy6rPZkUV75Fc= Subject key identifier: D8:1D:9E:D6:2B:09:2A:D6:F5:36:C6:1F:E9:1E:9F:95:42:86:DD:13 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584F46A7E4103B675EB3DC6AA380 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 30211 IP address blocks: 2604:ff40::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e4:10:3b:67:5e:b3:dc:6a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=30b184e6-0faf-4883-b059-fb09ba890917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:58:08:03:f3:c9:f6:5a:63:df:72:c5:1c: 89:04:b7:02:60:bd:aa:06:a9:5d:f3:b2:f3:2a:bf: f4:56:1d:b8:8b:49:27:3c:e3:18:6e:86:5e:93:9c: dd:33:5f:ec:0b:39:71:06:1b:24:87:58:5b:a0:cd: 52:09:e1:76:b3:4c:05:b5:79:87:35:76:11:74:5e: 86:e0:da:4b:83:25:55:a3:1b:25:81:19:a8:e4:c6: 55:f5:75:13:69:e5:52:5d:97:9a:1a:3b:bb:6a:c5: ab:1a:c5:40:c8:ec:2a:9b:0c:2d:1a:7b:74:71:66: 21:2c:56:5b:2e:ce:be:81:91:c4:16:3c:1b:ed:bb: 17:44:4b:3a:32:9a:37:df:16:ce:9f:c5:82:3a:84: 0e:19:86:c7:40:be:0e:99:d3:ac:94:f4:53:53:59: 32:8e:08:ac:dd:5d:8a:44:83:e4:27:fe:97:f3:e6: a8:05:84:64:7d:db:77:94:4f:4b:43:75:89:1f:4e: 17:8f:07:eb:8c:1b:ab:e6:d3:7f:10:6e:90:2a:38: 77:1e:e8:81:6a:3a:80:20:65:5f:26:15:91:cd:80: 37:2a:61:11:0e:0d:67:d6:04:69:27:f5:a2:24:fd: c7:1c:ae:7c:83:7e:e1:2a:49:7d:ba:10:a3:3d:75: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1D:9E:D6:2B:09:2A:D6:F5:36:C6:1F:E9:1E:9F:95:42:86:DD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv6: 2604:ff40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:79:83:af:9b:67:c9:69:a4:0e:94:0f:b4:d4:56:b4:c3:29: e3:c5:a5:91:7d:47:a7:cf:c3:7f:ef:98:41:b4:07:c2:15:30: 14:e3:61:1c:aa:43:2c:4d:98:57:fd:bc:65:d7:b6:ea:b1:3a: f7:f6:69:e8:e3:47:01:65:15:e8:50:0f:15:0e:3a:59:e4:f1: fc:76:16:31:df:18:6a:3c:20:11:53:0f:1e:d9:6e:c4:42:e7: 52:92:a5:50:0e:1e:91:52:76:32:e8:b8:79:34:96:fd:72:69: 84:12:fa:60:3a:d0:18:a1:b0:9e:5e:8f:41:f9:5b:9c:70:1c: 57:6d:c4:ab:88:5c:5d:4b:aa:8d:dc:8e:fa:8b:78:b5:33:47: 9c:f5:72:61:93:e6:80:83:6e:1d:27:b7:81:ad:b5:b7:ae:13: 90:5c:de:34:09:9c:fc:d6:ef:18:7a:f6:ec:62:ba:a3:f4:3d: 2e:dd:e8:64:82:f7:ca:41:ae:fa:ad:a9:8d:36:7b:64:72:0c: 39:f9:96:46:b6:7b:46:be:33:d7:0e:91:55:6f:0c:89:a7:42: 94:86:82:59:f6:06:71:09:a1:a3:27:ba:44:34:fa:08:5f:cd: ec:5a:1f:0f:87:63:08:48:a9:8f:c0:b2:53:bb:fc:45:87:21: 3b:04:02:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Gp+QQO2des9xqo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzBiMTg0ZTYtMGZhZi00ODgzLWIwNTktZmIwOWJhODkwOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3tYCAPzyfZaY99yxRyJBLcCYL2qBqld87Lz Kr/0Vh24i0knPOMYboZek5zdM1/sCzlxBhskh1hboM1SCeF2s0wFtXmHNXYRdF6G 4NpLgyVVoxslgRmo5MZV9XUTaeVSXZeaGju7asWrGsVAyOwqmwwtGnt0cWYhLFZb Ls6+gZHEFjwb7bsXREs6Mpo33xbOn8WCOoQOGYbHQL4OmdOslPRTU1kyjgis3V2K RIPkJ/6X8+aoBYRkfdt3lE9LQ3WJH04XjwfrjBur5tN/EG6QKjh3HuiBajqAIGVf JhWRzYA3KmERDg1n1gRpJ/WiJP3HHK58g37hKkl9uhCjPXWh8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNgdntYrCSrW9TbGH+ken5VCht0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvM2Y0ODU5ZWUtNDA5NC0z N2MwLWE3Y2EtZTU3ODhlZGI1Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT/QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAreYOvm2fJaaQOlA+01Fa0wynjxaWRfUenz8N/75hBtAfCFTAU42Ec qkMsTZhX/bxl17bqsTr39mno40cBZRXoUA8VDjpZ5PH8dhYx3xhqPCARUw8e2W7E QudSkqVQDh6RUnYy6Lh5NJb9cmmEEvpgOtAYobCeXo9B+VuccBxXbcSriFxdS6qN 3I76i3i1M0ec9XJhk+aAg24dJ7eBrbW3rhOQXN40CZz81u8YevbsYrqj9D0u3ehk gvfKQa76ramNNntkcgw5+ZZGtntGvjPXDpFVbwyJp0KUhoJZ9gZxCaGjJ7pENPoI X83sWh8Ph2MISKmPwLJTu/xFhyE7BAKQ -----END CERTIFICATE-----Generated at Tue Sep 29 20:29:31 2026 by rpki-client