$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa File: 5ef4a130-5004-3af8-ae4b-60307a05203c.roa (raw, json) Hash identifier: 3iQ49k75UTy7bpuXv5HiHpo8QCIAF5nm5x2B5ejlI/E= Subject key identifier: 9F:69:BC:67:B6:16:11:8E:D2:9B:CA:38:68:60:DE:C8:0B:83:27:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49744CF561A9D421CCC77F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:4c:f5:61:a9:d4:21:cc:c7:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cac11227-f2f7-4e2a-8e45-c3742e849d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:9b:3b:05:12:d6:4f:d4:41:cd:0c:14:f3: 2f:a9:9d:18:b8:fa:3b:95:bb:e2:a3:79:67:fb:55: 7a:a9:bf:4f:b5:29:2b:93:18:9f:f0:3b:a9:24:59: 39:90:73:f3:8b:32:e1:3e:62:88:4e:ea:f9:9e:4e: f0:fb:8f:b9:2e:89:fd:95:68:b7:84:60:89:8d:5d: 5b:cc:76:73:7e:8d:70:28:92:f9:9f:b2:06:47:e9: bb:3d:05:ff:c3:fd:ec:99:e5:8d:73:29:e8:2f:35: 23:a0:cc:d2:ae:bb:43:e0:57:11:8f:64:7a:6c:c8: a1:93:90:4f:36:ad:b7:92:58:65:7e:29:15:d7:ad: 7a:13:71:d3:75:44:6b:91:2f:85:50:fd:3f:8f:a8: d7:28:cc:b0:6f:e8:e7:81:39:a7:23:f1:d8:d7:af: 6a:f0:8f:51:ce:15:1e:36:6e:62:fc:48:24:66:d0: 87:c9:75:ea:40:64:70:08:33:63:7e:91:b3:d4:5b: fc:74:3c:35:7b:7a:5a:44:0c:53:89:bc:29:ab:33: 7b:a8:40:34:a4:58:5a:93:a4:6b:59:ea:e3:09:7d: ce:c4:ca:06:ba:38:91:9d:01:10:26:c8:04:2e:b7: 2c:b4:da:d5:30:ae:ae:16:fb:0c:23:21:1f:9f:4b: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:69:BC:67:B6:16:11:8E:D2:9B:CA:38:68:60:DE:C8:0B:83:27:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ef4a130-5004-3af8-ae4b-60307a05203c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0c:21:4e:36:4c:c5:c0:16:6a:4b:59:28:9f:2b:56:77:cf: 44:9a:1f:2f:a0:4f:91:14:de:68:18:e1:4b:49:cd:2f:51:8c: 31:99:7e:5a:81:ba:ed:53:00:ae:b1:be:57:03:0d:86:6d:51: 50:95:88:e8:7c:b9:e4:21:75:2a:43:75:b7:e3:a8:d1:cc:a6: 52:5c:b5:42:53:fe:76:4c:ed:38:29:07:98:78:91:2f:d6:52: cf:56:c8:8b:fb:24:8e:f3:ee:fd:6e:f7:c7:dd:4a:84:a3:eb: 33:55:c2:31:4d:b2:b0:03:72:84:59:87:a3:a5:64:cd:ad:50: bf:99:05:e3:f3:88:d6:cf:55:6c:58:eb:bb:6b:2e:1b:f8:51: f2:fb:71:b8:2e:0d:50:7a:97:ce:b0:c0:2e:9a:83:d4:0a:7e: 79:61:2d:f7:2e:2e:af:9a:72:ef:45:24:38:93:2c:5a:76:77: ef:ee:f4:f5:2b:94:59:ba:4b:76:2e:6f:c9:80:c3:8f:68:41: 8b:af:e9:43:e7:86:4c:ca:24:4f:19:1b:39:cd:a5:94:c1:5a: 2a:71:52:17:c5:59:05:f9:b9:76:5e:35:5c:fc:df:14:93:58: 51:1a:8f:48:8f:d0:08:6e:2f:a6:f5:91:73:6e:40:22:a3:4d: ea:ff:b9:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdEz1YanUIczHf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FjMTEyMjctZjJmNy00ZTJhLThlNDUtYzM3NDJlODQ5ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN+bOwUS1k/UQc0MFPMvqZ0YuPo7lbvio3ln +1V6qb9PtSkrkxif8DupJFk5kHPzizLhPmKITur5nk7w+4+5Lon9lWi3hGCJjV1b zHZzfo1wKJL5n7IGR+m7PQX/w/3smeWNcynoLzUjoMzSrrtD4FcRj2R6bMihk5BP Nq23klhlfikV1616E3HTdURrkS+FUP0/j6jXKMywb+jngTmnI/HY169q8I9RzhUe Nm5i/EgkZtCHyXXqQGRwCDNjfpGz1Fv8dDw1e3paRAxTibwpqzN7qEA0pFhak6Rr WerjCX3OxMoGujiRnQEQJsgELrcstNrVMK6uFvsMIyEfn0vU/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9pvGe2FhGO0pvKOGhg3sgLgycnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWVmNGExMzAtNTAwNC0z YWY4LWFlNGItNjAzMDdhMDUyMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8MIU42TMXAFmpLWSifK1Z3z0SaHy+gT5EU3mgY4UtJzS9RjDGZ flqBuu1TAK6xvlcDDYZtUVCViOh8ueQhdSpDdbfjqNHMplJctUJT/nZM7TgpB5h4 kS/WUs9WyIv7JI7z7v1u98fdSoSj6zNVwjFNsrADcoRZh6OlZM2tUL+ZBePziNbP VWxY67trLhv4UfL7cbguDVB6l86wwC6ag9QKfnlhLfcuLq+acu9FJDiTLFp2d+/u 9PUrlFm6S3Yub8mAw49oQYuv6UPnhkzKJE8ZGznNpZTBWipxUhfFWQX5uXZeNVz8 3xSTWFEaj0iP0AhuL6b1kXNuQCKjTer/uR0= -----END CERTIFICATE-----Generated at Fri Oct 2 01:09:06 2026 by rpki-client