$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa File: 223e52b0-13c4-348e-85a8-6b0ee28e3102.roa (raw, json) Hash identifier: QjmfA9ZO05yJzdx3+q2H/BFFjfuinqh/jqfVmEzJ3bM= Subject key identifier: 0E:86:2F:58:6D:3E:48:1F:8E:29:19:DB:61:2B:50:45:19:F8:02:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497472368D4B1C5D98AA3700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:d680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:72:36:8d:4b:1c:5d:98:aa:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dabf4683-7a4d-4111-a305-81d31a59f876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:3a:91:e5:df:be:db:f6:a5:26:fa:d1:81: ed:96:fa:96:20:15:4e:0b:1b:ec:a5:25:cf:5c:dc: 6f:b1:d7:51:06:83:37:3b:a8:e7:d1:d4:d7:91:c8: 42:96:87:3e:c1:44:18:0c:94:22:16:71:64:ae:8f: 9e:b6:cc:3f:ad:e5:62:90:53:bb:d1:ca:6c:ea:8d: 31:71:1b:fe:fc:92:a2:63:fc:d4:eb:c4:42:35:3d: b2:37:9f:c7:ec:ed:7f:bd:84:0e:0b:89:d4:bc:50: 93:5a:80:66:9c:8d:4a:82:4b:9f:bd:c3:03:0f:b8: 5c:8a:55:4e:05:b0:07:7e:cd:7f:0a:f9:a9:b4:80: 7b:8c:7f:75:47:ee:81:35:75:72:a8:b9:62:b4:0c: e4:02:fa:4c:2b:14:78:58:3d:e5:53:23:00:b8:6a: f0:e7:7c:67:45:10:dd:5a:1f:99:b1:c4:c6:60:90: 4f:e1:62:bd:2c:b8:35:13:2b:84:ee:5b:b6:97:99: 76:b0:3c:ce:3a:f5:6d:c2:c7:b6:90:76:70:15:80: 9d:a8:49:0c:82:a8:81:29:c7:55:89:95:6d:72:bf: d9:6f:25:53:df:3b:c6:75:f1:fa:46:f7:ce:0f:82: d1:3e:c8:a2:5d:8d:20:b6:08:e5:78:08:93:c5:a3: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:86:2F:58:6D:3E:48:1F:8E:29:19:DB:61:2B:50:45:19:F8:02:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/223e52b0-13c4-348e-85a8-6b0ee28e3102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e8:a7:c6:97:83:80:72:03:b9:52:ca:11:27:3c:06:5a:fa: 63:f9:01:5c:f2:a4:b3:17:b7:cf:3b:6a:c5:77:83:e1:6d:67: e8:3e:2b:05:41:48:8b:1f:3f:fc:2b:01:69:c9:68:3c:06:e9: ef:88:63:52:69:51:60:01:b2:1a:77:50:3a:26:c0:53:76:ae: cd:ab:dc:8c:52:23:91:a2:98:7d:8b:c3:90:ca:3d:e7:b9:a3: 92:a4:91:55:7e:62:cf:21:9e:e3:56:19:d0:ec:1f:44:f1:22: 0a:c5:5a:28:e7:2b:6c:d1:72:ac:06:c9:1b:f9:7e:79:01:bc: 52:6c:a1:19:61:1c:d2:91:e6:a5:e3:0a:90:51:5b:af:07:85: 09:61:f0:95:43:51:e9:fe:24:ae:bd:7b:e7:16:30:ba:e9:93: 48:0f:db:cf:fa:a2:ca:f8:a0:7a:5e:84:23:0c:cd:d5:3d:29: 1b:a3:0d:5a:b1:db:93:f0:7c:8d:16:e8:c4:e9:c7:ff:4c:e8: 13:40:2a:63:0f:5a:12:8f:19:ac:e5:dd:a7:7f:b7:3c:ee:0b: 70:b6:39:1b:e8:ae:2a:0c:98:44:50:d0:e1:83:a0:62:aa:e9: f9:0e:5c:7d:5d:75:e5:64:40:35:e7:42:64:49:24:72:37:7b: 47:6f:f7:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdHI2jUscXZiqNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFiZjQ2ODMtN2E0ZC00MTExLWEzMDUtODFkMzFhNTlmODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ak6keXfvtv2pSb60YHtlvqWIBVOCxvspSXP XNxvsddRBoM3O6jn0dTXkchCloc+wUQYDJQiFnFkro+etsw/reVikFO70cps6o0x cRv+/JKiY/zU68RCNT2yN5/H7O1/vYQOC4nUvFCTWoBmnI1KgkufvcMDD7hcilVO BbAHfs1/CvmptIB7jH91R+6BNXVyqLlitAzkAvpMKxR4WD3lUyMAuGrw53xnRRDd Wh+ZscTGYJBP4WK9LLg1EyuE7lu2l5l2sDzOOvVtwse2kHZwFYCdqEkMgqiBKcdV iZVtcr/ZbyVT3zvGdfH6RvfOD4LRPsiiXY0gtgjleAiTxaNRiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6GL1htPkgfjikZ22ErUEUZ+AIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjIzZTUyYjAtMTNjNC0z NDhlLTg1YTgtNmIwZWUyOGUzMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfop8aXg4ByA7lSyhEnPAZa+mP5AVzypLMXt887asV3g+FtZ+g+ KwVBSIsfP/wrAWnJaDwG6e+IY1JpUWABshp3UDomwFN2rs2r3IxSI5GimH2Lw5DK Pee5o5KkkVV+Ys8hnuNWGdDsH0TxIgrFWijnK2zRcqwGyRv5fnkBvFJsoRlhHNKR 5qXjCpBRW68HhQlh8JVDUen+JK69e+cWMLrpk0gP28/6osr4oHpehCMMzdU9KRuj DVqx25PwfI0W6MTpx/9M6BNAKmMPWhKPGazl3ad/tzzuC3C2ORvorioMmERQ0OGD oGKq6fkOXH1ddeVkQDXnQmRJJHI3e0dv93I= -----END CERTIFICATE-----Generated at Sun Sep 27 21:15:19 2026 by rpki-client