$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa File: 8ed9f108-f0c7-3142-902c-df61a40adce5.roa (raw, json) Hash identifier: NYDYZ9jgBagwE4JZAbsXPLDr8VtHxqFxffPVjmwcJQA= Subject key identifier: 70:4D:3E:EE:03:6F:1A:01:11:4D:14:18:A3:53:32:CE:CD:2F:90:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F20F7B0FA73C1192B046C8940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:100::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b0:fa:73:c1:19:2b:04:6c:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f05b2921-d48b-4a6d-8603-d2d9fb869bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b3:a6:ea:7e:63:54:b2:b2:3b:a5:58:95:a1: 20:6f:78:73:6c:68:c4:89:c4:ac:51:4e:7b:09:4f: 69:73:db:8a:b7:36:7d:72:f0:9f:b7:d6:1a:fd:42: 35:e0:68:91:8e:91:37:95:7f:5c:ed:e0:89:e4:bc: 2f:8d:1b:e6:ba:c3:33:01:3b:1a:58:ef:d8:a4:e9: 10:38:09:4f:71:0e:bc:c0:c3:3f:d8:fa:00:0a:7a: 79:2f:70:05:2e:76:57:d5:0f:c7:3c:11:00:68:9c: 51:5b:0f:d7:a6:44:3a:ae:bc:84:4f:ca:86:1a:c2: 2f:8e:b9:01:61:de:ed:16:a3:2c:b0:d7:66:09:fe: ee:9f:93:f7:3d:83:43:bb:82:7d:66:f3:1b:1f:14: cf:98:d0:5d:ba:20:fe:f6:da:9a:3f:ef:7f:d4:2e: 23:97:a8:58:81:7a:b9:e4:6c:ab:c1:81:6a:ee:32: 7d:b8:10:66:9d:2b:c2:44:84:cb:0e:26:33:cb:c5: d1:f7:c7:38:48:03:3c:af:c2:15:6a:05:68:34:39: 56:19:25:d8:ad:b9:08:b2:f4:c5:ed:10:9e:76:f4: df:34:e0:bd:5a:2f:88:a8:5e:44:39:db:84:41:64: ca:f9:3f:d8:2a:16:86:7f:a3:1f:ff:d7:fd:47:ed: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:3E:EE:03:6F:1A:01:11:4D:14:18:A3:53:32:CE:CD:2F:90:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed9f108-f0c7-3142-902c-df61a40adce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:100::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:15:1e:c3:c1:9a:84:7e:f4:45:32:f2:0c:b6:4a:94:32:d5: 46:d5:16:58:d3:fd:9e:03:ad:9d:79:fd:59:f4:68:dd:10:da: fa:b6:c6:ec:65:0d:b4:6b:72:50:9d:ed:f7:39:14:0e:b5:c0: c6:f1:ad:5b:f5:8d:8b:b7:d6:aa:27:8f:3d:d6:9c:a0:3e:84: 50:0b:ce:18:b2:96:83:17:4c:12:d4:46:82:2e:27:ee:f2:63: 6a:9e:e4:bf:4b:6e:56:9a:22:de:71:b1:75:dc:80:3c:9f:76: 34:57:85:a9:d9:cf:36:c8:f6:9f:68:f6:e0:a6:85:e1:5b:7e: f6:ba:e2:4a:90:a8:94:3c:48:05:cc:ec:dc:14:f6:7e:9d:1f: 9a:a0:a5:56:18:fa:3a:29:c8:00:59:07:81:13:25:a2:37:09: 64:4e:26:d3:d2:8c:ff:a6:b0:4a:12:05:26:22:e5:ce:06:af: ae:f3:9b:82:b8:c4:22:3f:96:80:ec:3c:cf:43:5e:c2:9e:d0: 0d:6c:fa:d2:08:8f:d2:4c:ee:5b:88:a7:db:d8:4a:f1:b4:96: 9c:14:92:7b:a2:ae:20:1f:28:c9:d9:1d:58:3d:c0:5f:4c:d2: cb:ed:77:4b:a9:9e:54:8b:07:57:bb:76:91:06:ca:47:7b:af: eb:e3:ec:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g97D6c8EZKwRsiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjA1YjI5MjEtZDQ4Yi00YTZkLTg2MDMtZDJkOWZiODY5YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLOm6n5jVLKyO6VYlaEgb3hzbGjEicSsUU57 CU9pc9uKtzZ9cvCft9Ya/UI14GiRjpE3lX9c7eCJ5LwvjRvmusMzATsaWO/YpOkQ OAlPcQ68wMM/2PoACnp5L3AFLnZX1Q/HPBEAaJxRWw/XpkQ6rryET8qGGsIvjrkB Yd7tFqMssNdmCf7un5P3PYNDu4J9ZvMbHxTPmNBduiD+9tqaP+9/1C4jl6hYgXq5 5GyrwYFq7jJ9uBBmnSvCRITLDiYzy8XR98c4SAM8r8IVagVoNDlWGSXYrbkIsvTF 7RCedvTfNOC9Wi+IqF5EOduEQWTK+T/YKhaGf6Mf/9f9R+1WAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBNPu4DbxoBEU0UGKNTMs7NL5CgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGVkOWYxMDgtZjBjNy0z MTQyLTkwMmMtZGY2MWE0MGFkY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUVHsPBmoR+9EUy8gy2SpQy1UbVFljT/Z4DrZ15/Vn0aN0Q2vq2 xuxlDbRrclCd7fc5FA61wMbxrVv1jYu31qonjz3WnKA+hFALzhiyloMXTBLURoIu J+7yY2qe5L9LblaaIt5xsXXcgDyfdjRXhanZzzbI9p9o9uCmheFbfva64kqQqJQ8 SAXM7NwU9n6dH5qgpVYY+jopyABZB4ETJaI3CWROJtPSjP+msEoSBSYi5c4Gr67z m4K4xCI/loDsPM9DXsKe0A1s+tIIj9JM7luIp9vYSvG0lpwUknuiriAfKMnZHVg9 wF9M0svtd0upnlSLB1e7dpEGykd7r+vj7Ek= -----END CERTIFICATE-----Generated at Tue Oct 6 11:10:39 2026 by rpki-client