$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7235b040-2fd1-392c-bc82-67e41b8a90e9.roa File: 7235b040-2fd1-392c-bc82-67e41b8a90e9.roa (raw, json) Hash identifier: E0WTvv16Dy60ClvnGEC8DyjjwSGGslaIiOe9l7vIsPY= Subject key identifier: 01:D6:74:92:A1:E3:50:2F:65:B8:16:97:20:0C:D6:C0:19:86:ED:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972FEFC7351CFB17824D880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7235b040-2fd1-392c-bc82-67e41b8a90e9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:ad00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fe:fc:73:51:cf:b1:78:24:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a4b5de2-e1df-417b-9a54-c56b1513d3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:40:b4:9d:fb:7e:dd:dc:3f:27:c6:57:f9:ad: d9:56:4b:28:d2:e9:9b:4c:ee:ae:b7:04:c9:49:d7: ac:64:3e:5f:c4:78:99:33:e4:26:8b:3d:50:7f:9a: 3b:28:35:e6:68:a4:95:fc:6e:ca:c3:d9:32:fb:d1: ae:96:2d:7d:e2:90:6b:b3:ef:da:1b:9d:ce:fc:09: 81:9d:33:79:9e:57:b6:f9:dc:27:20:04:4a:3c:43: 90:2a:7d:84:ad:d9:ad:92:ae:b4:8b:05:1c:58:4c: 8b:96:b7:09:f5:17:c7:db:fe:79:a3:97:70:99:26: 10:41:c2:10:2e:9c:29:35:8e:99:39:43:21:68:a1: 72:18:4e:f0:89:e2:38:6d:78:90:59:b9:aa:4b:73: 74:1d:32:15:20:86:ee:6b:6d:07:f2:eb:61:5c:92: f9:d9:a3:4f:12:16:15:a8:41:f1:36:09:70:96:17: 5f:f2:6c:c6:36:c6:9d:7e:97:39:c0:58:1d:18:04: fd:48:5f:b5:67:26:e2:34:26:f6:cf:01:cc:d0:03: 82:7b:52:b1:c9:06:df:f4:78:57:8e:4d:c1:5f:10: fa:e1:a5:58:b6:84:c0:1c:70:7e:f6:6e:43:2c:9d: 90:38:27:aa:dd:e9:fb:6f:e3:77:96:14:d0:10:a5: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D6:74:92:A1:E3:50:2F:65:B8:16:97:20:0C:D6:C0:19:86:ED:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7235b040-2fd1-392c-bc82-67e41b8a90e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:ad00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a4:2d:d2:69:51:f7:ff:36:7b:ab:a2:17:05:1e:f4:67:aa: a8:ff:d8:fc:d7:29:f3:e7:25:66:b1:22:67:be:3b:b7:d8:f5: 23:33:ff:5c:03:eb:c6:69:d9:c7:84:b5:07:6a:17:e3:ce:0a: 6d:cc:42:07:86:dd:82:77:55:02:f1:14:03:8c:57:56:00:6e: 45:f7:c6:21:0a:11:6d:ce:15:d4:dd:a1:93:40:1c:65:ca:08: 47:04:c4:3d:50:98:7d:ee:c4:99:10:7c:d4:59:da:9c:90:99: d1:a2:77:4e:82:65:15:73:48:67:59:14:bc:29:57:ed:89:d5: 99:04:84:fd:1a:36:60:1f:e8:71:9b:2b:f8:9b:04:5d:c2:64: 56:4b:33:85:33:db:b2:fe:0a:02:f9:70:72:95:6a:3e:92:c2: 1a:69:1c:18:0c:0d:fc:1b:52:c1:e0:89:f0:f9:0d:f9:c0:70: 33:23:9a:c5:ad:f7:fd:49:bc:bd:c9:e2:67:33:aa:71:9d:f6: f7:33:51:6e:e9:bf:3f:16:1c:f5:5a:00:aa:b9:d1:76:63:42: 4b:4c:b7:8e:ce:c3:2c:50:91:14:ea:e4:ac:38:5c:14:93:14: 11:c1:b1:f9:b8:a4:6f:b7:a6:2d:c9:7f:3a:d9:02:0b:84:93: 3b:e6:df:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcv78c1HPsXgk2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE0YjVkZTItZTFkZi00MTdiLTlhNTQtYzU2YjE1MTNkM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUC0nft+3dw/J8ZX+a3ZVkso0umbTO6utwTJ SdesZD5fxHiZM+Qmiz1Qf5o7KDXmaKSV/G7Kw9ky+9Guli194pBrs+/aG53O/AmB nTN5nle2+dwnIARKPEOQKn2Erdmtkq60iwUcWEyLlrcJ9RfH2/55o5dwmSYQQcIQ LpwpNY6ZOUMhaKFyGE7wieI4bXiQWbmqS3N0HTIVIIbua20H8uthXJL52aNPEhYV qEHxNglwlhdf8mzGNsadfpc5wFgdGAT9SF+1ZybiNCb2zwHM0AOCe1KxyQbf9HhX jk3BXxD64aVYtoTAHHB+9m5DLJ2QOCeq3en7b+N3lhTQEKWixwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHWdJKh41AvZbgWlyAM1sAZhu3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzIzNWIwNDAtMmZkMS0z OTJjLWJjODItNjdlNDFiOGE5MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgK0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEekLdJpUff/NnurohcFHvRnqqj/2PzXKfPnJWaxIme+O7fY9SMz /1wD68Zp2ceEtQdqF+POCm3MQgeG3YJ3VQLxFAOMV1YAbkX3xiEKEW3OFdTdoZNA HGXKCEcExD1QmH3uxJkQfNRZ2pyQmdGid06CZRVzSGdZFLwpV+2J1ZkEhP0aNmAf 6HGbK/ibBF3CZFZLM4Uz27L+CgL5cHKVaj6SwhppHBgMDfwbUsHgifD5DfnAcDMj msWt9/1JvL3J4mczqnGd9vczUW7pvz8WHPVaAKq50XZjQktMt47OwyxQkRTq5Kw4 XBSTFBHBsfm4pG+3pi3JfzrZAguEkzvm3/Y= -----END CERTIFICATE-----Generated at Fri Sep 25 21:52:49 2026 by rpki-client