$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa File: 3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa (raw, json) Hash identifier: Lh2Mpq/Io+8gK0puFcUvNmQiVx/NMT5n3uhQ41UW7o4= Subject key identifier: 42:AE:5B:54:D2:A4:52:BB:24:11:10:A8:C8:83:5D:71:C0:30:8F:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE4A0DE087289A834B100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:a500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e4:a0:de:08:72:89:a8:34:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ae77ceba-ee46-4aed-8d29-e6502d57aaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:86:c3:28:58:94:76:8c:58:b2:28:46:6f: fb:8c:45:c6:c8:6e:1a:56:33:b7:a5:d2:e4:1f:7e: 3f:b9:09:49:b0:40:bb:c2:44:6c:6d:59:24:6b:fb: 7c:5d:fc:f8:37:bf:0c:da:06:55:c7:27:e7:6f:49: c3:aa:6f:21:e8:71:e6:17:af:e0:36:57:c1:1f:0b: 6d:ca:c0:f8:16:4b:6c:64:50:80:dd:96:61:6b:05: 9d:b7:ef:f8:9a:ea:00:2b:1f:cd:55:bb:38:f8:7a: 98:58:82:dd:71:c9:35:96:aa:d0:e3:4c:9e:0e:28: 63:7c:8f:9e:5c:b2:91:95:df:f5:91:01:e9:36:11: 05:88:0f:78:95:b9:fe:51:ab:41:0c:77:ea:5a:4e: f6:e7:9f:16:44:fe:89:4e:79:0a:6e:15:c7:77:0f: 00:a2:5d:01:e2:19:7f:5c:fc:e6:2c:b8:4c:4b:b1: 4e:47:07:09:1a:a6:aa:f4:7a:3f:8f:b1:e7:36:72: 05:99:85:e6:ff:08:50:a2:3f:d5:bc:97:db:c8:74: 02:81:f2:2e:4f:cc:00:d2:ca:88:df:53:0d:96:58: 2b:48:f9:76:7f:08:2c:fe:4c:30:0c:7f:11:12:82: 6e:b0:e5:1d:4c:fe:2b:7e:df:7e:48:0e:07:b5:04: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AE:5B:54:D2:A4:52:BB:24:11:10:A8:C8:83:5D:71:C0:30:8F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fd8a70c-0e82-3516-b08d-a9fc5e5530c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:a500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c2:f5:60:d0:22:c9:e1:cf:24:f0:0d:6e:6d:b8:53:eb:65: 9e:fa:59:9b:0f:a0:4c:85:90:1e:90:25:9f:b1:f3:26:3a:93: 7d:a9:ef:0e:78:c0:ad:59:98:76:26:29:08:1b:f9:06:3e:bf: 5e:f6:a9:30:4c:dd:57:d0:ab:b8:b0:0e:8a:d7:04:2d:73:b1: b1:c9:f8:45:91:b3:e9:2f:49:c6:73:7f:a1:44:0c:4f:81:90: 8f:f9:8a:3a:80:36:1d:37:69:c3:53:21:3e:fc:21:e4:75:63: 3a:46:93:1f:b0:63:17:21:6e:3e:4a:56:e3:f2:ec:1d:32:66: a7:23:d0:cc:90:51:b6:65:16:1b:ca:fd:29:71:e6:1f:7b:b2: 2d:2a:c2:be:43:e9:97:48:2c:df:ad:77:bc:a4:bd:6a:de:46: 68:30:34:78:6c:81:49:f7:6c:32:9a:35:68:a0:b0:34:75:3e: c7:fa:c9:2b:69:aa:2b:fa:1a:76:de:c5:ee:eb:c7:cc:3e:05: 83:33:c3:94:49:98:ae:02:e7:2d:41:6e:09:18:ee:b0:6c:2c: f0:f9:30:3e:3e:c0:c5:4f:9e:1a:ef:5a:c5:5a:a4:27:36:4f: ce:ba:88:06:1e:7a:38:68:e2:84:ce:be:22:f4:99:16:f4:c3: 12:4f:cb:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPeSg3ghyiag0sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWU3N2NlYmEtZWU0Ni00YWVkLThkMjktZTY1MDJkNTdhYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWaGwyhYlHaMWLIoRm/7jEXGyG4aVjO3pdLk H34/uQlJsEC7wkRsbVkka/t8Xfz4N78M2gZVxyfnb0nDqm8h6HHmF6/gNlfBHwtt ysD4FktsZFCA3ZZhawWdt+/4muoAKx/NVbs4+HqYWILdcck1lqrQ40yeDihjfI+e XLKRld/1kQHpNhEFiA94lbn+UatBDHfqWk72558WRP6JTnkKbhXHdw8Aol0B4hl/ XPzmLLhMS7FORwcJGqaq9Ho/j7HnNnIFmYXm/whQoj/VvJfbyHQCgfIuT8wA0sqI 31MNllgrSPl2fwgs/kwwDH8REoJusOUdTP4rft9+SA4HtQQNAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKuW1TSpFK7JBEQqMiDXXHAMI+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZkOGE3MGMtMGU4Mi0z NTE2LWIwOGQtYTlmYzVlNTUzMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzC9WDQIsnhzyTwDW5tuFPrZZ76WZsPoEyFkB6QJZ+x8yY6k32p 7w54wK1ZmHYmKQgb+QY+v172qTBM3VfQq7iwDorXBC1zsbHJ+EWRs+kvScZzf6FE DE+BkI/5ijqANh03acNTIT78IeR1YzpGkx+wYxchbj5KVuPy7B0yZqcj0MyQUbZl FhvK/Slx5h97si0qwr5D6ZdILN+td7ykvWreRmgwNHhsgUn3bDKaNWigsDR1Psf6 yStpqiv6Gnbexe7rx8w+BYMzw5RJmK4C5y1BbgkY7rBsLPD5MD4+wMVPnhrvWsVa pCc2T866iAYeejho4oTOviL0mRb0wxJPyw8= -----END CERTIFICATE-----Generated at Mon Sep 28 01:09:49 2026 by rpki-client