$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa File: 6240cee6-1e14-3e37-bf10-08847f3f442c.roa (raw, json) Hash identifier: QzSmXeJiRnWRsJEHpzhYVIb+GscLY1rYKp2OCIuXFFM= Subject key identifier: 21:63:04:5A:72:9E:1A:E1:52:E4:C5:55:82:9E:DE:F2:BA:90:45:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F305289BB5744A3B0E9DE3580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:89:bb:57:44:a3:b0:e9:de:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=08b649f9-9bf7-4faa-92e9-99836f472b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:d8:3d:0a:37:a8:da:79:f4:c2:ea:63:bd: 2f:6b:d7:7f:b1:bb:b4:42:2c:82:90:08:74:41:d9: 0c:cd:70:86:fa:94:d3:e3:60:d8:27:7b:93:2b:fa: ac:6a:2f:0e:64:fa:1b:e8:9d:b9:26:59:67:ae:2b: 86:6a:ba:38:df:98:87:d0:19:87:9a:51:03:31:ad: 33:9c:27:7a:84:8e:17:b7:b4:2c:33:a9:23:36:f2: 85:5b:f1:53:65:95:53:c6:49:34:66:63:72:51:1b: 51:df:1c:c2:63:47:cb:33:b5:6f:90:d0:12:60:f1: bd:6d:64:ed:e2:a7:3e:aa:8c:14:00:63:65:87:15: f8:dc:2f:9c:e5:8d:48:2f:b2:2f:70:fa:06:bf:02: af:63:03:c7:e3:3f:95:08:43:43:a8:82:53:2f:84: d2:24:70:6b:dc:3d:0b:70:79:32:2d:22:b0:28:98: e2:7c:62:bf:06:d4:a5:67:f9:18:8c:24:de:12:5b: 85:8e:33:81:73:48:da:de:b0:4a:bb:1a:b9:b2:ac: f1:64:17:c8:76:76:7c:bb:60:c2:15:fe:b1:93:46: 4d:d3:c0:c4:25:78:ab:cf:7d:50:32:a2:b1:a6:db: 41:17:0b:b9:9d:96:5b:6e:4d:4d:0c:18:61:60:7e: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:04:5A:72:9E:1A:E1:52:E4:C5:55:82:9E:DE:F2:BA:90:45:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6240cee6-1e14-3e37-bf10-08847f3f442c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:13:a9:0f:00:17:b0:40:26:cf:89:2c:fd:bd:39:3a:b6:86: e8:56:65:d6:4a:0a:7f:17:e8:8f:a4:eb:b8:b9:7f:65:88:52: 5e:03:7e:cb:ff:51:a9:98:d3:df:ec:6f:9d:ea:db:8f:9c:7d: 95:ff:e4:6e:a3:1a:11:a8:ab:cd:bb:df:74:a1:61:d7:3d:13: 99:90:c6:c0:2b:10:5a:88:d2:07:e6:89:03:98:73:c4:ec:d5: e1:b7:d9:5b:a7:e1:ec:f1:53:7d:e7:85:dc:ab:b4:c1:0b:94: 8d:58:f3:29:16:4e:44:76:3b:86:76:bd:75:e0:ac:10:9a:a7: 86:3b:de:6a:80:d2:93:95:de:e4:b2:fa:77:0e:d7:1b:8f:d2: 37:43:41:a7:33:4f:43:67:f1:a8:1e:b2:1a:d2:14:6c:5e:ad: fc:60:7b:ef:c0:f8:4f:56:d4:bf:4a:50:d5:5d:77:52:08:c9: ce:91:e4:40:1a:9a:df:51:a9:20:d0:af:38:a2:00:87:2d:9d: 7c:c5:5a:d9:94:69:fc:30:36:46:6a:e9:fa:ea:f7:53:35:63: 55:ea:08:09:62:48:b2:11:f8:92:41:4b:51:79:e2:9e:a2:f2: ab:b2:fa:97:78:37:9d:81:74:64:bf:fc:32:95:40:1a:b8:c7: 46:4e:82:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8wUom7V0SjsOneNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MDhiNjQ5ZjktOWJmNy00ZmFhLTkyZTktOTk4MzZmNDcyYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5zYPQo3qNp59MLqY70va9d/sbu0QiyCkAh0 QdkMzXCG+pTT42DYJ3uTK/qsai8OZPob6J25JllnriuGaro435iH0BmHmlEDMa0z nCd6hI4Xt7QsM6kjNvKFW/FTZZVTxkk0ZmNyURtR3xzCY0fLM7VvkNASYPG9bWTt 4qc+qowUAGNlhxX43C+c5Y1IL7IvcPoGvwKvYwPH4z+VCENDqIJTL4TSJHBr3D0L cHkyLSKwKJjifGK/BtSlZ/kYjCTeEluFjjOBc0ja3rBKuxq5sqzxZBfIdnZ8u2DC Ff6xk0ZN08DEJXirz31QMqKxpttBFwu5nZZbbk1NDBhhYH7A6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCFjBFpynhrhUuTFVYKe3vK6kEUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI0MGNlZTYtMWUxNC0z ZTM3LWJmMTAtMDg4NDdmM2Y0NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgJww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWxOpDwAXsEAmz4ks/b05OraG6FZl1koKfxfoj6TruLl/ZYhSXgN+ y/9RqZjT3+xvnerbj5x9lf/kbqMaEairzbvfdKFh1z0TmZDGwCsQWojSB+aJA5hz xOzV4bfZW6fh7PFTfeeF3Ku0wQuUjVjzKRZORHY7hna9deCsEJqnhjveaoDSk5Xe 5LL6dw7XG4/SN0NBpzNPQ2fxqB6yGtIUbF6t/GB778D4T1bUv0pQ1V13UgjJzpHk QBqa31GpINCvOKIAhy2dfMVa2ZRp/DA2Rmrp+ur3UzVjVeoICWJIshH4kkFLUXni nqLyq7L6l3g3nYF0ZL/8MpVAGrjHRk6C8g== -----END CERTIFICATE-----Generated at Tue Sep 29 08:30:39 2026 by rpki-client