$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa File: 4a7147cb-4042-328d-af42-f8145758455b.roa (raw, json) Hash identifier: q/XJwLtRA0PO8MKJM50adxMJtpkm+rTEGzFmvVkHPVo= Subject key identifier: 1D:B4:BB:E1:41:7D:4A:B8:E8:87:57:7C:DD:5C:6C:BE:7A:F4:73:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974A1EAFC49CD40F7DF909C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:3380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a1:ea:fc:49:cd:40:f7:df:90:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c656e503-f229-4592-81fd-82a167a30ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:90:6d:ba:4b:da:97:59:ca:4f:c4:8d:52: c3:60:4a:36:58:df:0e:52:60:6a:8b:b3:cd:40:a0: ef:d5:33:86:04:d3:f4:37:db:6d:e0:d7:d2:d0:e5: 33:a5:63:9e:fb:0c:5e:6e:60:41:82:62:68:cd:2f: 82:cc:ce:78:a4:96:09:55:2c:ff:87:f1:d5:ab:da: cc:d9:aa:a8:55:b8:f3:cd:85:b3:c3:02:5d:1f:46: 22:52:c7:43:a1:16:4e:40:a9:37:11:05:9d:42:02: eb:8a:59:8a:68:fb:38:10:95:35:9a:9b:1d:63:c7: f8:09:aa:a2:35:46:61:92:ce:44:7f:9e:80:c9:7f: f0:69:fc:9b:5a:b4:87:d5:b2:ad:8e:32:b8:d1:c0: 23:00:b9:f1:c4:c5:1d:bb:6a:61:ec:83:5a:1f:ba: 4c:54:09:ce:4f:65:6e:ba:01:9e:65:4f:b8:a1:dd: d7:99:cd:6f:43:b8:4d:0c:0f:cc:a0:13:d6:2e:01: 8a:73:3d:0e:40:c7:50:51:d9:c0:4c:61:67:1d:55: 44:a8:e2:56:a6:12:8a:b2:ec:56:64:c2:bc:d2:83: ba:ad:fb:90:ad:88:b7:83:41:b2:90:33:8d:1e:6c: de:4d:22:7d:65:bc:ea:49:e5:ee:da:3d:6c:71:3a: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B4:BB:E1:41:7D:4A:B8:E8:87:57:7C:DD:5C:6C:BE:7A:F4:73:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a7147cb-4042-328d-af42-f8145758455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:72:94:d8:6c:41:43:93:ce:6c:e1:ab:5a:c5:5f:b2:b5:d2: 6d:58:83:86:00:e5:4a:90:0a:c9:8a:98:84:21:a8:33:e3:f2: 06:8c:d3:1c:59:d6:e0:46:81:55:dd:fa:30:90:71:4b:6b:f0: 99:7f:5a:bb:38:d2:bc:e0:99:d5:8d:03:68:27:3b:62:a0:73: 5a:dd:16:3f:b8:9b:cf:8d:63:26:b8:5b:8c:db:21:a8:4b:fb: 25:c4:a0:27:5a:74:5e:ad:fe:8a:5c:37:65:b3:f3:60:00:d2: 4c:92:2a:32:04:2d:87:3a:c5:ad:30:3f:5d:be:34:cf:46:6b: cc:59:95:9e:d3:c4:6d:f7:dd:ff:b7:a5:dc:f1:15:dd:24:55: 85:5e:a2:3b:f6:11:94:71:f4:78:84:df:85:8e:01:d3:0f:0a: 7c:69:22:03:a8:8b:9c:c7:85:86:5c:da:3b:b4:9d:16:db:70: 31:43:c1:6a:27:23:1e:9b:a0:ef:86:cc:7c:5d:9d:2a:7a:08: e7:53:8a:cb:97:2d:18:43:29:22:2f:63:57:22:26:9a:9a:70: ab:de:9a:cb:6f:14:09:67:b7:d7:57:84:70:f9:d9:21:65:08: 2a:a9:2a:d6:de:ce:58:bb:97:c8:5b:c5:79:21:cc:a4:1a:3a: 5b:16:9f:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdKHq/EnNQPffkJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY1NmU1MDMtZjIyOS00NTkyLTgxZmQtODJhMTY3YTMwYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngSQbbpL2pdZyk/EjVLDYEo2WN8OUmBqi7PN QKDv1TOGBNP0N9tt4NfS0OUzpWOe+wxebmBBgmJozS+CzM54pJYJVSz/h/HVq9rM 2aqoVbjzzYWzwwJdH0YiUsdDoRZOQKk3EQWdQgLrilmKaPs4EJU1mpsdY8f4Caqi NUZhks5Ef56AyX/wafybWrSH1bKtjjK40cAjALnxxMUdu2ph7INaH7pMVAnOT2Vu ugGeZU+4od3Xmc1vQ7hNDA/MoBPWLgGKcz0OQMdQUdnATGFnHVVEqOJWphKKsuxW ZMK80oO6rfuQrYi3g0GykDONHmzeTSJ9ZbzqSeXu2j1scTqobwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB20u+FBfUq46IdXfN1cbL569HNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE3MTQ3Y2ItNDA0Mi0z MjhkLWFmNDItZjgxNDU3NTg0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgDOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtylNhsQUOTzmzhq1rFX7K10m1Yg4YA5UqQCsmKmIQhqDPj8gaM 0xxZ1uBGgVXd+jCQcUtr8Jl/Wrs40rzgmdWNA2gnO2Kgc1rdFj+4m8+NYya4W4zb IahL+yXEoCdadF6t/opcN2Wz82AA0kySKjIELYc6xa0wP12+NM9Ga8xZlZ7TxG33 3f+3pdzxFd0kVYVeojv2EZRx9HiE34WOAdMPCnxpIgOoi5zHhYZc2ju0nRbbcDFD wWonIx6boO+GzHxdnSp6COdTisuXLRhDKSIvY1ciJpqacKvemstvFAlnt9dXhHD5 2SFlCCqpKtbezli7l8hbxXkhzKQaOlsWn40= -----END CERTIFICATE-----Generated at Sun Oct 11 19:39:34 2026 by rpki-client