$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa File: 3525b946-e088-30a0-80a8-0242eeac1d5e.roa (raw, json) Hash identifier: TSJhsd4Jwz3COJS6EBvI0AZL7BEMqNUORzGrxbB2PS8= Subject key identifier: 97:93:F5:7F:2B:60:D2:F1:15:F5:F6:2D:79:47:3E:EE:F8:C1:58:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D1E30A8460F2314C7A880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 30036 IP address blocks: 2604:2d81:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1e:30:a8:46:0f:23:14:c7:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=03c23326-a8c5-4e0b-995a-96c5cecb92e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:b2:15:50:31:34:67:63:19:83:20:fa:1c: c8:df:1d:85:b8:78:91:cd:cb:68:4a:f2:b2:9c:8b: 51:d1:6f:48:54:ce:30:17:fa:3d:5f:43:0e:d7:12: b2:98:4a:f1:35:a1:45:5f:b1:dc:4c:6e:36:8e:f0: 93:be:7e:49:e8:ac:7b:ec:61:0f:7e:58:90:c2:8b: e2:9c:2e:b9:bb:9e:60:00:ff:6a:c4:e7:d9:9a:3a: ab:d1:7f:3b:66:33:86:25:2b:77:7d:ab:ff:1b:28: 50:21:f4:07:71:3c:7b:2b:a0:90:63:83:6c:39:95: bf:65:eb:4b:ab:93:68:ad:23:46:a4:ff:50:ff:91: 68:08:7f:a5:22:34:57:c5:b0:86:0a:60:11:35:58: 00:fb:9a:a9:2f:b1:9e:d9:18:fd:7f:b2:da:05:50: 5c:ea:94:19:bf:9e:2d:c5:eb:8f:22:d0:ab:10:da: aa:bd:b3:3b:64:9f:04:ed:8b:05:4c:14:20:1d:4e: fd:08:96:42:69:81:ba:f8:24:8c:92:50:08:f4:04: bf:42:90:89:07:06:fe:f0:ed:1a:01:41:64:4d:0d: aa:43:04:e3:e6:08:53:4f:fe:78:89:f2:4c:b8:61: 95:95:66:26:a2:d5:68:ad:8b:03:0e:a5:96:14:6e: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:F5:7F:2B:60:D2:F1:15:F5:F6:2D:79:47:3E:EE:F8:C1:58:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3525b946-e088-30a0-80a8-0242eeac1d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9d:b7:8a:83:a0:6b:d4:98:7f:a2:51:b3:b5:73:bb:34:d0: 43:bc:e2:8b:ab:29:68:fa:99:5e:76:49:65:e1:50:d2:8f:3e: 20:17:62:6f:47:6f:2d:95:ad:14:d4:f3:d3:d9:4f:41:e4:95: 04:b3:bd:af:e9:bc:4f:78:c2:fb:28:8e:57:c2:33:05:23:12: ee:69:f5:98:a4:a3:fe:ad:fc:d1:61:e0:f2:3c:36:39:6b:65: fc:c1:b9:54:d4:c1:5a:b5:78:ee:46:c0:47:31:6e:a4:96:3c: 7a:f1:71:08:97:9d:c4:4e:9e:e0:10:ea:2c:73:69:7c:ea:d7: 9b:1c:1a:9c:7a:44:ba:67:69:a1:58:04:0d:f6:62:0d:25:f8: 5a:e1:a1:23:98:ff:9d:08:ab:a6:d2:ea:7d:94:e0:0c:bd:27: 6c:53:80:1e:6b:1d:04:28:fd:cb:77:5c:0d:3f:f4:a3:60:3a: b4:04:85:a6:50:a2:51:f2:d2:2f:3a:ef:21:f2:a6:02:a8:af: f0:16:74:47:4c:de:e1:bc:67:88:06:c7:d5:ec:ad:b5:e5:1d: 0c:65:03:b1:a4:76:06:d3:01:15:b7:01:9f:a4:f4:5d:fb:08: 49:b6:af:94:46:9a:84:d3:16:e3:22:47:fe:ae:d0:f6:01:5c: 8e:03:b9:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8zHR4wqEYPIxTHqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MDNjMjMzMjYtYThjNS00ZTBiLTk5NWEtOTZjNWNlY2I5MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojGyFVAxNGdjGYMg+hzI3x2FuHiRzctoSvKy nItR0W9IVM4wF/o9X0MO1xKymErxNaFFX7HcTG42jvCTvn5J6Kx77GEPfliQwovi nC65u55gAP9qxOfZmjqr0X87ZjOGJSt3fav/GyhQIfQHcTx7K6CQY4NsOZW/ZetL q5NorSNGpP9Q/5FoCH+lIjRXxbCGCmARNVgA+5qpL7Ge2Rj9f7LaBVBc6pQZv54t xeuPItCrENqqvbM7ZJ8E7YsFTBQgHU79CJZCaYG6+CSMklAI9AS/QpCJBwb+8O0a AUFkTQ2qQwTj5ghTT/54ifJMuGGVlWYmotVorYsDDqWWFG7/6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJeT9X8rYNLxFfX2LXlHPu74wVgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzUyNWI5NDYtZTA4OC0z MGEwLTgwYTgtMDI0MmVlYWMxZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOdt4qDoGvUmH+iUbO1c7s00EO84ourKWj6mV52SWXhUNKPPiAX Ym9Hby2VrRTU89PZT0HklQSzva/pvE94wvsojlfCMwUjEu5p9Ziko/6t/NFh4PI8 NjlrZfzBuVTUwVq1eO5GwEcxbqSWPHrxcQiXncROnuAQ6ixzaXzq15scGpx6RLpn aaFYBA32Yg0l+FrhoSOY/50Iq6bS6n2U4Ay9J2xTgB5rHQQo/ct3XA0/9KNgOrQE haZQolHy0i867yHypgKor/AWdEdM3uG8Z4gGx9XsrbXlHQxlA7GkdgbTARW3AZ+k 9F37CEm2r5RGmoTTFuMiR/6u0PYBXI4DuWQ= -----END CERTIFICATE-----Generated at Sat Sep 26 14:15:20 2026 by rpki-client