$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1eb3e176-be0c-38f7-a346-04d0b9c584f1.roa File: 1eb3e176-be0c-38f7-a346-04d0b9c584f1.roa (raw, json) Hash identifier: WyM5LPuzC0c6Z+3XAH0r15uG5ws1sCgUE4fqaQsMXsQ= Subject key identifier: 67:CE:62:9E:02:B9:38:E2:4C:47:9E:F2:8B:52:B0:EA:60:77:97:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49749818C21A259FA810EE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1eb3e176-be0c-38f7-a346-04d0b9c584f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:3a80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:98:18:c2:1a:25:9f:a8:10:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fc6ffed-85d7-4aef-8ff2-1f52b4c7a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:76:89:fc:23:c6:0b:81:ab:d5:4e:f1:2c: 4a:9b:b1:0b:bf:be:9a:88:5d:3a:47:9f:08:c1:67: 73:a5:89:1b:f8:98:ce:1d:63:28:db:93:b8:33:a0: a6:58:63:2b:01:0d:c2:08:ee:5c:de:e6:20:18:e3: e5:66:4e:d5:4a:ce:7f:47:38:d8:c5:2e:89:7d:ac: 86:4e:d5:bd:93:0f:f7:85:cc:b3:75:4b:d7:ed:1d: 95:07:b1:8f:0b:47:25:1a:26:7b:d7:ba:28:d7:2d: d9:ca:67:cd:89:ce:77:a9:27:37:4e:c2:08:26:3a: ff:dc:9a:2d:f5:b9:2c:69:f0:c0:fd:79:9c:0c:43: 45:57:a0:18:3b:49:15:29:6c:92:53:25:e7:36:ac: 0d:fb:01:06:1c:c7:ab:78:4d:96:9a:2c:be:e9:10: 6d:c8:7e:5b:aa:f9:1a:2a:3c:69:27:7b:9a:dd:f2: 85:24:b1:86:1e:30:50:61:92:95:2a:ed:05:32:07: a3:34:23:8d:fa:c0:5a:e9:11:bb:d7:c1:ba:65:cc: 26:34:c1:b1:65:f1:a9:e2:df:0a:5e:ca:46:4f:b3: 2e:b7:b7:52:f7:3c:c7:57:0e:37:ad:58:0c:2d:2f: e7:33:92:78:39:9e:b6:10:60:f2:a8:58:d9:ff:a5: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CE:62:9E:02:B9:38:E2:4C:47:9E:F2:8B:52:B0:EA:60:77:97:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1eb3e176-be0c-38f7-a346-04d0b9c584f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3a80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bf:72:f9:ad:55:3d:6e:e8:31:a9:f2:bd:40:af:ed:f6:10: 3f:f5:88:a5:41:27:40:06:72:8b:2f:95:b1:8e:73:d4:f7:45: 51:01:f8:3e:d4:f9:e8:c4:91:40:d2:b4:bc:ac:4c:b8:f5:ef: 61:9a:75:16:4a:e9:45:a8:25:d6:1f:1c:4d:54:76:ab:de:b5: f4:79:1c:1f:29:62:46:43:30:64:a7:7f:56:04:1b:3d:f2:73: d9:3d:85:b3:1f:36:3d:a7:cc:86:6d:83:ea:43:59:e3:54:74: 16:e7:75:ad:96:b3:e0:88:ae:0c:60:ae:06:45:97:98:b7:f9: 68:df:48:33:f8:fa:79:f7:08:21:ca:77:9f:9c:f2:e8:e8:5c: 10:08:83:c4:65:c1:e9:49:35:5d:06:c5:cc:53:9b:ac:64:a0: 81:74:f5:17:5e:37:03:52:09:3d:94:02:78:fd:ad:8f:19:21: a0:fb:f7:90:82:45:0d:a2:2f:ee:d1:07:50:ac:3d:b1:94:2c: 30:d8:aa:a5:5b:75:a0:6d:84:2b:27:ea:46:65:a9:4a:55:b0: 48:8c:87:19:f6:c3:f3:9f:2d:13:92:61:a6:51:cb:d9:6d:bc: d6:70:e9:40:75:7e:e3:ed:9d:15:e8:fc:48:09:45:77:3e:c0: e7:26:6d:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdJgYwholn6gQ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZjNmZmZWQtODVkNy00YWVmLThmZjItMWY1MmI0YzdhNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47d2ifwjxguBq9VO8SxKm7ELv76aiF06R58I wWdzpYkb+JjOHWMo25O4M6CmWGMrAQ3CCO5c3uYgGOPlZk7VSs5/RzjYxS6JfayG TtW9kw/3hcyzdUvX7R2VB7GPC0clGiZ717oo1y3ZymfNic53qSc3TsIIJjr/3Jot 9bksafDA/XmcDENFV6AYO0kVKWySUyXnNqwN+wEGHMereE2Wmiy+6RBtyH5bqvka KjxpJ3ua3fKFJLGGHjBQYZKVKu0FMgejNCON+sBa6RG718G6ZcwmNMGxZfGp4t8K XspGT7Mut7dS9zzHVw43rVgMLS/nM5J4OZ62EGDyqFjZ/6U6DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGfOYp4CuTjiTEee8otSsOpgd5eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWViM2UxNzYtYmUwYy0z OGY3LWEzNDYtMDRkMGI5YzU4NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDqA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC/cvmtVT1u6DGp8r1Ar+32ED/1iKVBJ0AGcosvlbGOc9T3RVEB +D7U+ejEkUDStLysTLj172GadRZK6UWoJdYfHE1UdqvetfR5HB8pYkZDMGSnf1YE Gz3yc9k9hbMfNj2nzIZtg+pDWeNUdBbnda2Ws+CIrgxgrgZFl5i3+WjfSDP4+nn3 CCHKd5+c8ujoXBAIg8RlwelJNV0GxcxTm6xkoIF09RdeNwNSCT2UAnj9rY8ZIaD7 95CCRQ2iL+7RB1CsPbGULDDYqqVbdaBthCsn6kZlqUpVsEiMhxn2w/OfLROSYaZR y9ltvNZw6UB1fuPtnRXo/EgJRXc+wOcmbTs= -----END CERTIFICATE-----Generated at Mon Sep 28 18:29:59 2026 by rpki-client