$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa File: 0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa (raw, json) Hash identifier: 4n2cKam8bzCWlbrwVCkDFioOBSqP1jILgjQk86El1Wg= Subject key identifier: 7D:EA:91:4F:2E:4E:5C:46:B5:D1:6E:94:9D:27:7F:42:AA:24:F8:88 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49742523AEE3114E98510150 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:bf00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:25:23:ae:e3:11:4e:98:51:01:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af5cdfaf-2bd6-4d81-a74f-a0815cacf783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:7e:dc:a1:1f:b4:7b:a2:91:d6:00:53:df: 53:de:a1:22:78:bc:7f:80:32:24:a1:9e:00:02:bc: d5:04:7b:0d:52:af:ea:e8:c4:86:8d:23:f5:1f:f7: 85:e0:15:d5:28:8d:12:d1:a6:89:ac:2e:5b:46:ce: 3b:5b:f0:30:e7:13:32:2e:e4:3b:1e:37:72:29:26: ec:80:91:f3:49:a5:9e:03:28:f7:ab:dc:f8:6d:8c: 0d:da:06:c6:24:1c:b4:52:9c:c4:39:52:af:5d:c5: c3:81:b9:15:08:d2:85:e4:14:12:21:d8:83:39:e9: 17:6e:4d:4c:34:16:22:1b:2d:6c:e2:82:2c:7e:f8: 4f:ff:b0:14:bb:25:8b:40:7e:e8:36:3a:dd:de:ed: 64:39:51:4f:5e:56:be:9b:fb:7d:f1:7d:3f:a9:ac: 82:45:2f:f2:e0:fc:f2:92:ef:ad:4a:6b:bb:a5:c5: d9:d7:d9:fc:81:35:f3:ab:1a:52:ba:33:b9:52:44: 18:8a:45:ed:b6:89:03:66:cc:4b:28:6f:97:f2:b6: eb:47:b6:49:30:89:5a:0c:fc:e1:c3:80:df:86:29: 73:38:64:2c:2c:fa:b2:d9:2c:fb:cf:6a:e0:53:24: 47:c5:9c:3c:2b:ff:0b:8c:88:67:6d:0e:a2:09:c4: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:91:4F:2E:4E:5C:46:B5:D1:6E:94:9D:27:7F:42:AA:24:F8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad8ea64-8dc3-39da-8f38-c99a9ff65096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:bf00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1d:6d:43:dd:b7:48:36:ff:5e:f2:7c:06:be:d6:84:d0:f6: e2:29:10:e7:37:10:7e:d8:33:7e:89:4c:4a:fd:9e:c6:0d:1a: c4:e5:3b:d0:dd:47:f7:f8:88:06:33:2b:f1:0f:fb:93:67:bd: 35:f1:34:5f:3a:f2:00:39:ed:ae:a9:38:be:8f:c6:d1:ec:7b: 8b:75:bf:f9:74:77:80:42:fe:fc:4d:4e:8e:60:2c:f4:8f:77: 0a:23:68:0a:92:e6:6d:77:5d:40:dc:66:59:6b:51:15:60:76: 6d:e0:57:40:7a:ae:1d:77:35:ba:3c:99:f3:f7:38:46:22:78: dc:69:00:50:ab:d9:36:6c:4a:52:0a:79:83:09:b2:93:f7:87: 31:a9:0f:bc:78:7e:9c:e6:8f:2e:d1:c3:be:15:b7:57:70:b7: ff:76:e6:ed:e1:e4:8a:d7:9e:ca:d9:a3:d5:c7:64:43:78:31: 35:cc:7f:9a:62:0e:1f:3b:28:27:ee:bf:10:de:d9:b1:bd:d1: 0a:17:f6:71:d0:86:65:c6:96:5b:e8:e8:83:4d:ca:76:a7:0a: 3d:d8:a0:6b:ef:41:2f:68:a8:72:92:88:19:c6:51:de:52:98: 39:35:66:21:9c:7d:93:a2:ff:3e:68:a7:bb:43:27:bb:10:d3: 28:1a:fc:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCUjruMRTphRAVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY1Y2RmYWYtMmJkNi00ZDgxLWE3NGYtYTA4MTVjYWNmNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSp+3KEftHuikdYAU99T3qEieLx/gDIkoZ4A ArzVBHsNUq/q6MSGjSP1H/eF4BXVKI0S0aaJrC5bRs47W/Aw5xMyLuQ7HjdyKSbs gJHzSaWeAyj3q9z4bYwN2gbGJBy0UpzEOVKvXcXDgbkVCNKF5BQSIdiDOekXbk1M NBYiGy1s4oIsfvhP/7AUuyWLQH7oNjrd3u1kOVFPXla+m/t98X0/qayCRS/y4Pzy ku+tSmu7pcXZ19n8gTXzqxpSujO5UkQYikXttokDZsxLKG+X8rbrR7ZJMIlaDPzh w4DfhilzOGQsLPqy2Sz7z2rgUyRHxZw8K/8LjIhnbQ6iCcQjjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH3qkU8uTlxGtdFulJ0nf0KqJPiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFkOGVhNjQtOGRjMy0z OWRhLThmMzgtYzk5YTlmZjY1MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgL8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYdbUPdt0g2/17yfAa+1oTQ9uIpEOc3EH7YM36JTEr9nsYNGsTl O9DdR/f4iAYzK/EP+5NnvTXxNF868gA57a6pOL6PxtHse4t1v/l0d4BC/vxNTo5g LPSPdwojaAqS5m13XUDcZllrURVgdm3gV0B6rh13Nbo8mfP3OEYieNxpAFCr2TZs SlIKeYMJspP3hzGpD7x4fpzmjy7Rw74Vt1dwt/925u3h5IrXnsrZo9XHZEN4MTXM f5piDh87KCfuvxDe2bG90QoX9nHQhmXGllvo6INNynanCj3YoGvvQS9oqHKSiBnG Ud5SmDk1ZiGcfZOi/z5op7tDJ7sQ0yga/Ns= -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:29 2026 by rpki-client