$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37513b68-1588-3572-8dd0-a3e12a4721b0.roa File: 37513b68-1588-3572-8dd0-a3e12a4721b0.roa (raw, json) Hash identifier: ektG+LXTWCiSs6HsM3kfw2nDAsHnCXgAVqo6o1/w/34= Subject key identifier: 94:19:0C:B8:52:58:98:BC:2F:1F:29:AB:D3:2D:AD:CE:E0:B6:12:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4986DB43F4F7A947BBF01E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37513b68-1588-3572-8dd0-a3e12a4721b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:8500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:db:43:f4:f7:a9:47:bb:f0:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df45039b-2879-49e2-92ea-c9cb64cffd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:60:ec:7b:0d:e6:be:89:cc:e8:48:0a:b8: b2:25:a1:f1:f5:30:e5:72:5a:ee:49:9b:4b:59:7d: 9d:ab:28:da:54:ea:be:9a:bc:4d:ac:a7:2d:2f:1f: 88:ca:93:61:31:d4:e1:90:97:89:ae:10:4d:08:3b: 58:10:3c:0b:d9:6e:c4:94:0a:6f:4a:3a:9c:e8:f2: c3:2e:3a:66:3f:5f:70:52:83:a7:d3:87:9a:af:8d: 36:a9:c6:0a:a9:d6:7e:76:99:aa:85:eb:94:8d:40: 93:05:c1:a1:b5:5c:53:d5:7d:c7:f9:bf:e1:92:c4: d7:8c:43:e5:4b:d2:ff:9f:d2:65:35:8e:75:df:22: 7b:53:e8:50:56:99:d1:f9:2c:be:5b:a4:a6:23:ef: d4:e4:45:62:30:c0:e8:d7:78:42:67:91:6c:3c:61: 48:70:d3:7f:71:95:9a:a8:b1:e6:cb:34:95:2c:46: b8:ab:23:66:b9:2c:83:d3:e3:f5:8c:cb:59:69:13: 0c:64:3d:52:bf:1e:24:f2:7d:5e:48:dd:a3:01:4e: d8:bf:d2:91:c2:9c:27:35:c6:c2:58:b2:d6:e2:a5: 74:64:77:dc:c4:e8:dc:b5:04:8b:64:94:9e:9a:6a: 9e:fc:10:b9:24:f5:47:a2:f2:c4:92:3d:8b:2a:64: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:0C:B8:52:58:98:BC:2F:1F:29:AB:D3:2D:AD:CE:E0:B6:12:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37513b68-1588-3572-8dd0-a3e12a4721b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:8500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8b:f1:dc:5c:e2:66:c9:77:65:71:a8:15:6b:14:56:d9:70: 9f:c6:19:ed:df:cd:8a:12:c9:eb:bd:c9:b7:34:71:45:de:13: f4:b3:b8:09:59:5c:fd:13:8a:18:b9:d7:f4:7f:de:11:33:8f: ee:53:73:8b:89:0f:71:3b:44:d0:6b:69:5b:53:b7:bb:03:f2: ab:b5:68:02:93:e4:29:01:ad:26:b5:1f:db:2c:10:a4:98:5d: a6:07:4d:b8:2b:24:86:1c:ee:46:db:fe:2f:d4:10:b1:c5:65: 80:86:54:b5:b5:a2:cf:20:4d:cd:e4:0f:f8:a1:f9:d3:08:80: f4:f7:26:df:ef:84:1f:75:51:26:93:b7:d8:d3:c8:2b:62:95: b8:16:a3:36:e8:e4:41:3c:b3:f2:ea:bc:e3:08:93:37:9a:12: 1d:ce:14:29:ea:15:44:b1:d7:7e:d3:ee:31:d8:09:9e:ff:64: 64:8a:44:ee:3e:93:ad:a0:cc:66:07:1d:17:04:87:37:6b:82: 1d:ac:d4:b2:ec:d1:c1:22:d8:4f:fd:a4:92:c2:2a:26:d7:92: 69:c2:df:c8:a1:9d:05:4c:c4:50:ca:c4:36:08:c6:ff:4a:18: f0:bd:3f:75:f5:fa:a6:7d:64:6c:1a:03:fc:d7:ee:ac:29:4d: 34:88:a2:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhttD9PepR7vwHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY0NTAzOWItMjg3OS00OWUyLTkyZWEtYzljYjY0Y2ZmZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixg7HsN5r6JzOhICriyJaHx9TDlclruSZtL WX2dqyjaVOq+mrxNrKctLx+IypNhMdThkJeJrhBNCDtYEDwL2W7ElApvSjqc6PLD LjpmP19wUoOn04ear402qcYKqdZ+dpmqheuUjUCTBcGhtVxT1X3H+b/hksTXjEPl S9L/n9JlNY513yJ7U+hQVpnR+Sy+W6SmI+/U5EViMMDo13hCZ5FsPGFIcNN/cZWa qLHmyzSVLEa4qyNmuSyD0+P1jMtZaRMMZD1Svx4k8n1eSN2jAU7Yv9KRwpwnNcbC WLLW4qV0ZHfcxOjctQSLZJSemmqe/BC5JPVHovLEkj2LKmQtvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQZDLhSWJi8Lx8pq9Mtrc7gthKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzc1MTNiNjgtMTU4OC0z NTcyLThkZDAtYTNlMTJhNDcyMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICL8dxc4mbJd2VxqBVrFFbZcJ/GGe3fzYoSyeu9ybc0cUXeE/Sz uAlZXP0Tihi51/R/3hEzj+5Tc4uJD3E7RNBraVtTt7sD8qu1aAKT5CkBrSa1H9ss EKSYXaYHTbgrJIYc7kbb/i/UELHFZYCGVLW1os8gTc3kD/ih+dMIgPT3Jt/vhB91 USaTt9jTyCtilbgWozbo5EE8s/LqvOMIkzeaEh3OFCnqFUSx137T7jHYCZ7/ZGSK RO4+k62gzGYHHRcEhzdrgh2s1LLs0cEi2E/9pJLCKibXkmnC38ihnQVMxFDKxDYI xv9KGPC9P3X1+qZ9ZGwaA/zX7qwpTTSIonQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:33:00 2026 by rpki-client