$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa File: 20991295-a2e7-3567-810e-8370e1695ef0.roa (raw, json) Hash identifier: Y/avbM5fy1Ncj5XfV5WLzR7nPlfPxeK/1YSbPhYVdrA= Subject key identifier: 0C:E1:4E:11:7B:61:4E:DB:C2:DC:A1:A9:89:02:94:E9:00:E9:A0:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498780C60842DFC29B00D780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:7f80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:80:c6:08:42:df:c2:9b:00:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=caa25b7f-5789-4e79-a943-6835d045c811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:0e:41:9d:a0:7a:21:16:a9:6b:d0:fb:f5: 7e:b1:19:ae:36:97:d1:c8:1e:9e:ed:8f:b2:dd:15: 7c:6b:41:2d:b2:7e:a5:64:d3:ae:8e:67:12:21:62: d7:36:7c:b6:27:47:a7:e9:15:b0:a5:6e:7c:9c:a8: 9a:2d:40:3c:42:4c:5f:36:78:18:9b:04:b1:38:90: a9:c1:0e:f0:b9:57:d0:98:18:e2:a8:d4:f7:49:14: 9f:cb:68:ba:99:69:0e:aa:8a:7d:93:01:61:2f:ff: e4:8c:d7:89:b5:de:7a:1a:09:7a:01:9d:0e:72:5d: 55:5c:b0:cf:0b:f7:ec:73:16:73:50:6c:04:26:35: c5:ff:db:67:eb:1d:8c:59:83:46:6e:23:3f:50:5e: 1c:ad:5e:30:0a:c5:d9:96:db:59:6e:9e:ba:e4:ef: bf:3e:1b:b4:87:51:7a:52:f0:1f:84:55:0c:21:89: fe:b0:aa:e1:83:c5:5e:33:71:93:82:1b:33:88:f3: 10:cc:53:36:b2:5d:73:fc:9e:45:93:c8:0c:22:e7: fc:f8:39:67:74:7b:88:4e:56:2c:b9:ab:f2:b8:58: 83:06:58:fd:dd:ff:bf:1a:f4:52:1a:75:ec:be:72: e0:4b:0f:44:28:c3:69:c6:b3:c8:8f:ca:55:f9:0d: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E1:4E:11:7B:61:4E:DB:C2:DC:A1:A9:89:02:94:E9:00:E9:A0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20991295-a2e7-3567-810e-8370e1695ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7f80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:aa:99:be:e1:fb:45:26:e2:0e:c7:84:ad:3c:62:2e:3b: f6:c2:af:6f:77:2b:34:75:b0:1e:87:90:7a:ab:0e:46:db:d2: 5d:cb:8f:6d:b5:cd:2a:b1:77:25:ee:94:6f:2d:52:27:b9:dd: 25:95:56:67:b7:85:0c:09:ca:5f:dd:84:c5:ff:6c:8d:6a:2b: a9:a1:fa:60:ae:65:01:ee:34:58:a0:9d:d3:1e:95:49:a9:c8: 42:71:eb:ad:99:5a:04:17:c8:76:54:10:6e:7c:d3:ff:ca:e5: d0:7f:73:7c:06:72:71:ba:79:fd:6c:d9:8d:da:d7:a3:66:a3: 7b:91:ae:f0:18:5b:b6:fa:08:ff:70:00:94:cc:0d:4b:b7:83: 68:02:10:07:02:da:97:cf:9a:ca:ac:5b:f3:3f:97:8e:e4:bf: 41:05:1e:17:3c:eb:ca:53:f9:ae:7d:fb:42:26:04:49:fc:24: ad:fb:71:a8:12:2b:31:e5:27:94:08:9d:cc:a4:e3:6d:88:0a: 5a:a4:96:7b:67:29:a3:2f:f0:b1:f8:7e:13:1f:a4:bf:d6:bb: 78:f2:f1:54:2f:0f:d0:44:ef:ba:fc:2a:e9:e8:18:d2:2d:47: be:d0:df:c0:63:35:fe:75:e5:5b:c3:d0:e6:87:86:df:3e:80: b4:d2:62:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh4DGCELfwpsA14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FhMjViN2YtNTc4OS00ZTc5LWE5NDMtNjgzNWQwNDVjODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUIOQZ2geiEWqWvQ+/V+sRmuNpfRyB6e7Y+y 3RV8a0Etsn6lZNOujmcSIWLXNny2J0en6RWwpW58nKiaLUA8QkxfNngYmwSxOJCp wQ7wuVfQmBjiqNT3SRSfy2i6mWkOqop9kwFhL//kjNeJtd56Ggl6AZ0Ocl1VXLDP C/fscxZzUGwEJjXF/9tn6x2MWYNGbiM/UF4crV4wCsXZlttZbp665O+/Phu0h1F6 UvAfhFUMIYn+sKrhg8VeM3GTghsziPMQzFM2sl1z/J5Fk8gMIuf8+DlndHuITlYs uavyuFiDBlj93f+/GvRSGnXsvnLgSw9EKMNpxrPIj8pV+Q2EIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAzhThF7YU7bwtyhqYkClOkA6aAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjA5OTEyOTUtYTJlNy0z NTY3LTgxMGUtODM3MGUxNjk1ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH+A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwbqpm+4ftFJuIOx4StPGIuO/bCr293KzR1sB6HkHqrDkbb0l3L j221zSqxdyXulG8tUie53SWVVme3hQwJyl/dhMX/bI1qK6mh+mCuZQHuNFigndMe lUmpyEJx662ZWgQXyHZUEG580//K5dB/c3wGcnG6ef1s2Y3a16Nmo3uRrvAYW7b6 CP9wAJTMDUu3g2gCEAcC2pfPmsqsW/M/l47kv0EFHhc868pT+a59+0ImBEn8JK37 cagSKzHlJ5QIncyk422IClqklntnKaMv8LH4fhMfpL/Wu3jy8VQvD9BE77r8Kuno GNItR77Q38BjNf515VvD0OaHht8+gLTSYlM= -----END CERTIFICATE-----Generated at Sun Sep 27 04:51:46 2026 by rpki-client