$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa File: 25408213-8be9-3550-85f7-0518ad056289.roa (raw, json) Hash identifier: 84Av0J+21s5f82hW8GIyrQDmIsZhn4zzJpE7CJP2Cck= Subject key identifier: 28:39:38:38:96:5D:05:D6:49:3A:5D:9E:6C:B3:64:DD:35:75:2E:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF87CC3403075818DF212DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c3:40:30:75:81:8d:f2:12:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=b41bc441-2d86-4f9f-8385-9d82f890db13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:1d:c0:b0:92:7d:5a:c0:b7:10:60:c5:59: 62:ef:c8:98:f3:3a:71:d2:09:0f:02:74:ea:98:ed: fe:08:b3:1c:c8:be:8e:85:bd:7c:8f:5e:73:6d:13: db:35:68:87:b0:91:8c:4b:75:3f:0e:f9:9b:98:24: 4a:6f:3c:4d:96:60:53:8d:5f:80:64:a8:9e:4c:88: 2a:c9:ba:62:ce:39:f4:ad:a8:a1:6e:d1:98:41:53: da:82:a7:20:26:d4:7d:d4:6a:2a:0a:a6:b1:ce:84: 88:73:b2:0d:d4:dc:92:c1:a8:66:1c:4a:49:fe:63: a6:cb:9b:02:db:77:ab:82:03:fc:a9:6e:e8:ca:5f: 2f:67:75:7e:e9:00:57:0f:8a:58:07:70:b6:e4:38: da:35:32:fe:3b:5d:16:ba:c6:66:8e:8c:bb:e0:aa: 4d:9c:b7:bd:31:cf:d6:0e:66:de:4c:f2:a3:a4:ae: ea:8f:a6:df:11:3f:6f:ff:fc:a8:7a:74:0e:5a:c5: c9:82:73:0b:8e:32:06:41:27:b9:b4:8a:11:54:a8: a6:1f:0f:fe:c8:16:82:e2:e7:e2:43:42:0c:a8:24: 24:eb:67:3c:50:66:ed:93:cd:a3:fb:6b:de:ff:a5: 96:d9:cc:99:02:ca:58:2a:11:b2:ff:8c:5f:06:6f: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:38:38:96:5D:05:D6:49:3A:5D:9E:6C:B3:64:DD:35:75:2E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/25408213-8be9-3550-85f7-0518ad056289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:09:63:b2:59:eb:64:2b:4a:f9:32:e6:4c:4e:7d:5f:ec: a6:e1:80:92:1e:d7:e4:17:af:b2:db:7d:69:82:d7:8e:04:7f: 17:9d:07:34:e1:78:b0:d5:7e:16:70:29:c4:65:49:ab:b2:1b: 78:1a:a3:2e:6a:90:f0:28:84:e9:a5:ec:2d:6e:4f:84:42:e9: 36:de:26:3a:81:53:73:26:88:32:09:a7:fd:55:ad:19:bb:f2: 87:73:5a:bd:d7:53:06:6f:76:7e:17:7c:85:71:17:ab:94:92: 3c:ed:d4:ee:55:15:90:0d:fb:86:61:04:85:2f:1c:f3:80:d0: e1:58:14:83:ad:1b:43:39:a6:91:1a:70:b0:c7:ee:4a:a8:fc: 7b:e7:6f:98:9d:f8:89:e0:e0:06:13:c6:28:fd:b7:30:21:08: 4c:49:ad:45:54:48:b3:c3:e5:cf:b8:bc:92:bb:8d:03:63:a4: 05:56:3c:57:81:49:e4:f3:3f:6a:e8:d4:7f:41:18:23:0c:66: 28:a0:bc:31:e0:3c:4c:7b:1c:8a:cc:ea:44:8d:6b:0c:69:fd: e6:55:ca:4a:ca:c4:01:59:ac:91:c9:09:a8:63:40:09:44:0d: 69:2c:bb:18:a3:90:ea:f7:cb:c8:b2:86:ca:51:2d:ed:d3:0d: 67:22:5d:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE74fMNAMHWBjfIS3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YjQxYmM0NDEtMmQ4Ni00ZjlmLTgzODUtOWQ4MmY4OTBkYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfQdwLCSfVrAtxBgxVli78iY8zpx0gkPAnTq mO3+CLMcyL6Ohb18j15zbRPbNWiHsJGMS3U/DvmbmCRKbzxNlmBTjV+AZKieTIgq ybpizjn0raihbtGYQVPagqcgJtR91GoqCqaxzoSIc7IN1NySwahmHEpJ/mOmy5sC 23erggP8qW7oyl8vZ3V+6QBXD4pYB3C25DjaNTL+O10WusZmjoy74KpNnLe9Mc/W DmbeTPKjpK7qj6bfET9v//yoenQOWsXJgnMLjjIGQSe5tIoRVKimHw/+yBaC4ufi Q0IMqCQk62c8UGbtk82j+2ve/6WW2cyZAspYKhGy/4xfBm9lhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCg5ODiWXQXWSTpdnmyzZN01dS5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjU0MDgyMTMtOGJlOS0z NTUwLTg1ZjctMDUxOGFkMDU2Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa4kJY7JZ62QrSvky5kxOfV/spuGAkh7X5Bevstt9aYLXjgR/F50H NOF4sNV+FnApxGVJq7IbeBqjLmqQ8CiE6aXsLW5PhELpNt4mOoFTcyaIMgmn/VWt Gbvyh3NavddTBm92fhd8hXEXq5SSPO3U7lUVkA37hmEEhS8c84DQ4VgUg60bQzmm kRpwsMfuSqj8e+dvmJ34ieDgBhPGKP23MCEITEmtRVRIs8Plz7i8kruNA2OkBVY8 V4FJ5PM/aujUf0EYIwxmKKC8MeA8THsciszqRI1rDGn95lXKSsrEAVmskckJqGNA CUQNaSy7GKOQ6vfLyLKGylEt7dMNZyJdIw== -----END CERTIFICATE-----Generated at Mon Sep 28 05:53:22 2026 by rpki-client