$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa File: 524a63bf-4c6c-33c5-8f16-ebfa02114794.roa (raw, json) Hash identifier: rRAb1w4dZgy82T4bkiJvYs4zDleg3eC5pxDs9f8D4tU= Subject key identifier: 4C:86:60:7E:11:D5:91:B4:A0:95:FE:11:29:46:1D:56:2E:7F:80:CF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D5D560440C154B3DB1100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d81:800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5d:56:04:40:c1:54:b3:db:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=74297d18-3e31-442d-a996-b4e01860dcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:57:76:82:fe:70:b9:60:c7:83:73:d0:93:e3: 20:f2:53:93:1c:79:23:5f:ce:f3:56:25:25:ef:78: f6:6b:01:b1:bd:14:31:61:29:9d:83:1d:5a:be:c8: 16:1e:76:43:3a:77:1a:26:e0:b4:c8:1b:a2:63:c4: d5:03:f2:76:9a:db:a9:ca:41:08:a6:e3:5c:67:08: 6e:c0:9e:66:a6:20:7e:41:5d:9b:ff:8a:d2:bb:8d: ac:96:db:c8:94:2a:36:f3:41:f7:82:69:a3:29:5b: e5:7b:c8:f7:98:ae:31:72:1f:3b:92:0c:44:dc:c2: 78:d4:fa:5e:0c:c0:2c:14:5b:e2:24:60:a3:e1:61: 4a:40:c2:aa:27:db:17:dd:87:53:52:62:3a:0b:bb: e3:fc:dd:36:d2:25:95:71:3c:41:d3:b1:8c:40:fe: ed:12:f6:8e:2a:44:8a:66:82:5d:52:42:49:6e:7d: 18:f1:9d:75:11:f0:42:a0:2f:00:01:3f:98:5a:49: 1c:7d:3c:96:19:13:d8:6e:de:ce:50:93:18:72:d8: 5c:7e:30:e2:29:0e:e6:e5:a5:fd:dd:e6:2d:8c:be: 7b:a8:30:dc:80:f6:27:09:15:da:02:8d:31:be:0b: 18:f9:42:de:f2:8a:51:6c:88:81:c4:07:26:d9:3f: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:60:7E:11:D5:91:B4:A0:95:FE:11:29:46:1D:56:2E:7F:80:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:67:e4:d9:64:73:9b:a0:c0:3a:f4:a0:31:bd:d3:9f:a0:06: ec:a8:f9:01:56:ec:bf:c3:3e:1c:d3:f9:fd:b6:2e:43:26:3c: af:8d:e9:cd:70:ff:b4:d8:72:cf:a8:7d:dd:c3:7c:09:ad:db: 52:52:a1:88:af:14:46:80:ec:d1:eb:8b:b5:52:85:73:0b:b7: ce:a9:b2:e1:db:ba:5c:72:ae:98:44:35:08:9c:7c:e9:53:c2: 2d:81:f1:dc:cb:f3:19:c1:e1:5d:51:89:00:50:51:b3:a4:4b: a5:8d:04:ce:c3:12:a9:44:70:85:ec:5c:c2:66:ff:f3:09:27: 52:18:ed:62:7d:ce:85:88:f8:e6:0c:00:4e:6d:39:98:5e:39: cd:1d:31:09:b5:d2:14:19:5c:06:cf:41:05:5d:17:40:1b:db: 7c:5b:a5:14:af:64:92:c7:5b:05:73:14:d2:8c:ab:88:54:2d: 25:1f:79:33:04:3a:f5:33:2c:60:97:d9:e7:4a:39:1a:66:b5: 27:e8:1f:aa:58:1c:8b:25:38:36:5d:fa:57:e9:a2:f2:6e:e5: ec:73:e9:da:b9:70:3c:8d:a2:a1:a6:1c:7a:71:3e:a0:7a:68: 4d:9a:ef:bf:56:f2:dc:34:b3:5c:a2:5f:f3:cb:79:78:5b:67: 39:81:58:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPV1WBEDBVLPbEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzQyOTdkMTgtM2UzMS00NDJkLWE5OTYtYjRlMDE4NjBkY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVd2gv5wuWDHg3PQk+Mg8lOTHHkjX87zViUl 73j2awGxvRQxYSmdgx1avsgWHnZDOncaJuC0yBuiY8TVA/J2mtupykEIpuNcZwhu wJ5mpiB+QV2b/4rSu42sltvIlCo280H3gmmjKVvle8j3mK4xch87kgxE3MJ41Ppe DMAsFFviJGCj4WFKQMKqJ9sX3YdTUmI6C7vj/N020iWVcTxB07GMQP7tEvaOKkSK ZoJdUkJJbn0Y8Z11EfBCoC8AAT+YWkkcfTyWGRPYbt7OUJMYcthcfjDiKQ7m5aX9 3eYtjL57qDDcgPYnCRXaAo0xvgsY+ULe8opRbIiBxAcm2T9w+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEyGYH4R1ZG0oJX+ESlGHVYuf4DPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI0YTYzYmYtNGM2Yy0z M2M1LThmMTYtZWJmYTAyMTE0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJn5Nlkc5ugwDr0oDG905+gBuyo+QFW7L/DPhzT+f22LkMmPK+N 6c1w/7TYcs+ofd3DfAmt21JSoYivFEaA7NHri7VShXMLt86psuHbulxyrphENQic fOlTwi2B8dzL8xnB4V1RiQBQUbOkS6WNBM7DEqlEcIXsXMJm//MJJ1IY7WJ9zoWI +OYMAE5tOZheOc0dMQm10hQZXAbPQQVdF0Ab23xbpRSvZJLHWwVzFNKMq4hULSUf eTMEOvUzLGCX2edKORpmtSfoH6pYHIslODZd+lfpovJu5exz6dq5cDyNoqGmHHpx PqB6aE2a779W8tw0s1yiX/PLeXhbZzmBWEA= -----END CERTIFICATE-----Generated at Sat Sep 26 12:54:17 2026 by rpki-client