$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa File: 91c931f3-5995-35dd-a833-dd487ec4b69b.roa (raw, json) Hash identifier: T1Xuvao5TdLJvu+aYFSj/qQkJRdvMmFCymdZwPWo06E= Subject key identifier: FD:11:F3:A7:C8:06:D5:D0:3B:7A:CD:2A:77:CD:FF:5B:22:4C:8E:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE1A1C177039C799CC100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:d080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e1:a1:c1:77:03:9c:79:9c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b131187e-ac00-4782-87c1-a5509e8f1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:7f:ae:83:58:3b:02:ff:d7:3c:a9:af:92: c1:d0:03:67:1d:8e:b8:ea:04:d1:61:f4:47:85:3a: c0:c5:bb:75:2d:3f:03:8d:50:81:77:b1:9f:2a:b9: 7a:ca:ae:e9:51:44:d5:c6:38:bb:b5:8d:a5:d6:a3: 0e:d0:06:da:e3:b0:64:42:85:2a:03:ed:f1:fa:53: 62:3d:d1:64:dd:fd:d3:93:cb:a6:c0:c6:3f:31:c6: 3e:9a:83:69:07:2d:7e:84:ac:77:c3:57:e0:d6:2d: 60:7f:d3:f8:e5:05:35:0f:dd:90:67:d7:02:ea:92: 3f:a6:d7:1a:62:46:2b:43:ca:d9:8c:63:5e:b3:5f: 20:31:ac:6c:5c:bc:33:db:79:bd:4c:36:25:49:20: 71:7b:6c:43:32:3c:04:fe:78:48:92:c2:65:df:52: bd:0b:65:89:d2:1a:80:4f:8a:f2:b5:86:c9:b9:8e: d6:74:78:9f:0a:bb:32:f2:e2:fe:95:e4:f5:1d:3b: d4:1a:3f:11:3d:13:f8:af:e5:70:0b:30:bb:62:23: ac:1c:12:5a:41:a7:10:87:a0:60:55:a5:d6:0c:11: 2a:32:80:28:bb:1f:eb:e9:1f:80:af:06:80:89:9f: 63:a0:0c:8e:23:27:86:a8:e8:91:1a:ce:24:fa:4c: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:11:F3:A7:C8:06:D5:D0:3B:7A:CD:2A:77:CD:FF:5B:22:4C:8E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:83:19:73:b8:0d:86:b8:4e:18:36:bc:eb:2a:97:dd:95:08: d4:a6:f3:fd:d9:41:d1:06:cd:67:02:91:d0:17:af:b8:6f:fa: fa:1f:24:6b:6b:53:79:85:eb:5f:b2:43:b7:66:64:b4:b6:82: 5e:dd:b3:76:1c:e1:11:15:bd:1b:e6:4d:3a:a7:dc:54:85:62: 98:f5:80:69:5e:10:74:71:b4:3e:49:de:e9:c7:b4:cb:13:cc: 5b:41:20:e0:a8:07:3d:9e:96:98:30:39:2e:49:de:e3:bd:ff: ae:b5:98:8a:96:e9:35:61:7d:09:e5:a9:e3:98:6f:a3:a9:9d: 41:6f:90:b0:9a:58:f6:62:43:7d:49:db:48:c2:55:80:05:85: e3:8f:7a:cd:3e:0e:b6:5d:63:ad:ad:da:43:3a:60:43:3e:db: 3a:6f:ec:e6:6e:c4:68:76:92:95:6d:c8:58:43:89:ce:68:55: d2:45:10:f2:e9:ed:3c:e2:f3:ce:a8:42:ac:97:cd:76:6a:4a: 90:8b:12:5a:74:86:f5:c6:04:27:6f:30:c4:c1:7a:40:4a:af: 7b:50:14:a2:1e:20:60:a1:8d:ca:02:09:f6:1b:35:bd:d1:a1: f0:b9:3f:cf:25:ac:5d:04:7d:68:f2:0e:39:9c:91:e2:b7:f7: 44:f8:e5:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPeGhwXcDnHmcwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjEzMTE4N2UtYWMwMC00NzgyLTg3YzEtYTU1MDllOGYxZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBJ/roNYOwL/1zypr5LB0ANnHY646gTRYfRH hTrAxbt1LT8DjVCBd7GfKrl6yq7pUUTVxji7tY2l1qMO0Aba47BkQoUqA+3x+lNi PdFk3f3Tk8umwMY/McY+moNpBy1+hKx3w1fg1i1gf9P45QU1D92QZ9cC6pI/ptca YkYrQ8rZjGNes18gMaxsXLwz23m9TDYlSSBxe2xDMjwE/nhIksJl31K9C2WJ0hqA T4rytYbJuY7WdHifCrsy8uL+leT1HTvUGj8RPRP4r+VwCzC7YiOsHBJaQacQh6Bg VaXWDBEqMoAoux/r6R+ArwaAiZ9joAyOIyeGqOiRGs4k+kwjlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0R86fIBtXQO3rNKnfN/1siTI5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTFjOTMxZjMtNTk5NS0z NWRkLWE4MzMtZGQ0ODdlYzRiNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6DGXO4DYa4Thg2vOsql92VCNSm8/3ZQdEGzWcCkdAXr7hv+vof JGtrU3mF61+yQ7dmZLS2gl7ds3Yc4REVvRvmTTqn3FSFYpj1gGleEHRxtD5J3unH tMsTzFtBIOCoBz2elpgwOS5J3uO9/661mIqW6TVhfQnlqeOYb6OpnUFvkLCaWPZi Q31J20jCVYAFheOPes0+DrZdY62t2kM6YEM+2zpv7OZuxGh2kpVtyFhDic5oVdJF EPLp7Tzi886oQqyXzXZqSpCLElp0hvXGBCdvMMTBekBKr3tQFKIeIGChjcoCCfYb Nb3RofC5P88lrF0EfWjyDjmckeK390T45bI= -----END CERTIFICATE-----Generated at Sat Sep 26 09:09:16 2026 by rpki-client