$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97d0e795-b9c9-3cce-87e8-22777db86927.roa File: 97d0e795-b9c9-3cce-87e8-22777db86927.roa (raw, json) Hash identifier: PEHuizGi456qQv611YS1XyvzdfGPQzV3qOqISD0kqNw= Subject key identifier: 1B:0F:6D:5F:32:57:A2:C5:5C:20:32:C9:B5:77:2E:3B:F2:5E:BA:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D2F5DA9B91F79F8F68B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97d0e795-b9c9-3cce-87e8-22777db86927.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 2604:2d80:3d80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2f:5d:a9:b9:1f:79:f8:f6:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=7baa62d3-1837-4276-9b87-a86e920304e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:37:ae:86:1b:87:28:c1:dd:c7:3e:23:12: db:41:d7:6c:a7:85:b4:f8:8c:51:27:eb:cb:3b:55: 9d:8d:e7:b4:ff:80:ad:9e:7b:e2:88:76:b2:86:44: d6:ef:bf:79:5d:11:ce:a3:85:af:2b:d3:86:f4:12: 28:bd:96:19:d7:df:37:6e:2c:63:c3:15:87:dd:56: 31:53:ae:a7:a4:08:49:57:15:3b:a8:c4:c6:e3:d4: 47:ca:26:ae:79:93:01:5f:23:95:60:d9:94:ef:fe: 98:14:3b:54:a8:2e:67:64:ed:59:cf:c1:5c:68:e7: 7f:64:da:42:41:25:c9:78:a9:e7:ba:c4:85:7a:3e: 20:5e:44:c8:f4:f6:1d:92:90:a6:18:57:c9:d2:a2: 23:92:45:44:9b:4d:f5:b9:3e:50:88:cf:8d:1c:4b: 3b:e6:2e:f7:7d:35:02:70:6f:75:04:ac:ae:64:12: 57:b1:7b:d0:43:5d:dc:5b:69:6e:b3:e2:40:39:df: 96:12:1c:c1:94:ac:e8:40:86:13:9e:d9:ad:b3:ad: 9f:1f:04:88:1b:a6:63:d0:16:81:73:d4:4c:ff:ac: 02:f4:25:2c:4e:9f:6d:47:82:9a:28:92:cf:ae:c2: 57:da:df:b1:f2:6f:15:b1:cc:28:7d:83:a1:f0:62: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0F:6D:5F:32:57:A2:C5:5C:20:32:C9:B5:77:2E:3B:F2:5E:BA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97d0e795-b9c9-3cce-87e8-22777db86927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:3d80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2c:70:27:c8:c7:b8:18:82:5c:00:82:9e:52:c0:bf:f9:68: 1f:d6:2b:0c:db:bb:31:8c:9e:82:ae:d4:3f:0d:9a:a6:05:f8: 2c:ce:9f:d4:d9:4a:f9:a2:d2:80:f0:6e:a3:2a:f4:ee:c5:09: 10:60:a1:1f:cf:33:ea:a3:11:6f:31:af:1f:b5:5d:ff:05:39: 3b:09:e2:16:bd:ae:56:a7:ca:89:18:d6:0c:b9:e4:13:f7:ce: a9:16:3e:f5:0b:57:d5:90:a7:66:6e:d2:db:c8:91:fe:8a:3a: b9:2f:db:f1:cf:19:15:2b:22:37:28:d1:31:c3:05:51:b8:11: cc:c4:a9:8f:0a:dd:5d:8f:1a:df:86:47:cc:62:ff:8d:22:23: 2b:c0:58:cc:97:98:85:d2:65:59:96:df:70:9f:dc:78:e2:f7: 57:2b:55:3a:bd:33:14:b7:9e:8a:33:74:aa:e3:07:94:e6:16: 50:79:d0:e4:25:d9:cf:44:96:50:5f:aa:f5:66:8a:0f:d9:83: 23:16:2d:0c:9f:f0:f4:af:41:a3:05:23:0c:c1:fa:0e:72:82: b6:aa:17:e2:1c:5a:b3:b6:4b:4e:fb:6b:6a:f3:13:59:ac:2c: 01:b5:fc:4a:63:8b:6f:4f:8c:89:c0:fe:d6:fc:33:ba:6a:e0: 29:0c:13:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8zHS9dqbkfefj2i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk N2JhYTYyZDMtMTgzNy00Mjc2LTliODctYTg2ZTkyMDMwNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAs3roYbhyjB3cc+IxLbQddsp4W0+IxRJ+vL O1Wdjee0/4CtnnviiHayhkTW7795XRHOo4WvK9OG9BIovZYZ1983bixjwxWH3VYx U66npAhJVxU7qMTG49RHyiaueZMBXyOVYNmU7/6YFDtUqC5nZO1Zz8FcaOd/ZNpC QSXJeKnnusSFej4gXkTI9PYdkpCmGFfJ0qIjkkVEm031uT5QiM+NHEs75i73fTUC cG91BKyuZBJXsXvQQ13cW2lus+JAOd+WEhzBlKzoQIYTntmts62fHwSIG6Zj0BaB c9RM/6wC9CUsTp9tR4KaKJLPrsJX2t+x8m8VscwofYOh8GLKVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsPbV8yV6LFXCAyybV3LjvyXrpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTdkMGU3OTUtYjljOS0z Y2NlLTg3ZTgtMjI3NzdkYjg2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgD2A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgscCfIx7gYglwAgp5SwL/5aB/WKwzbuzGMnoKu1D8NmqYF+CzO n9TZSvmi0oDwbqMq9O7FCRBgoR/PM+qjEW8xrx+1Xf8FOTsJ4ha9rlanyokY1gy5 5BP3zqkWPvULV9WQp2Zu0tvIkf6KOrkv2/HPGRUrIjco0THDBVG4EczEqY8K3V2P Gt+GR8xi/40iIyvAWMyXmIXSZVmW33Cf3Hji91crVTq9MxS3noozdKrjB5TmFlB5 0OQl2c9EllBfqvVmig/ZgyMWLQyf8PSvQaMFIwzB+g5ygraqF+IcWrO2S077a2rz E1msLAG1/Epji29PjInA/tb8M7pq4CkME7Y= -----END CERTIFICATE-----Generated at Tue Oct 6 03:42:24 2026 by rpki-client