$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c8a230f-0d15-3a64-baa4-e228f59c4f99.roa File: 9c8a230f-0d15-3a64-baa4-e228f59c4f99.roa (raw, json) Hash identifier: C+/h+/TxbVHvLnpnaUkIlonL4FZLUXhxM11Dqt1nS80= Subject key identifier: 80:9F:A3:0F:9F:69:AC:42:33:CE:5A:3D:81:D3:0A:54:2A:5D:53:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FE2FE0491F7AA2C463FF260 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c8a230f-0d15-3a64-baa4-e228f59c4f99.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:3780::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:fe:04:91:f7:aa:2c:46:3f:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=66599685-3e32-4177-97a3-5a4036ccfee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:75:2a:cc:4a:ff:2f:d6:07:45:48:75:26: 61:4e:41:0c:5c:a5:53:68:2b:de:75:52:cf:de:cb: 5d:64:aa:dd:40:c2:54:fb:3d:ef:68:0d:22:e6:2b: 83:39:a7:b0:9d:5c:c0:6f:54:70:d9:0f:66:45:32: 95:a4:81:12:82:ee:d2:a3:e0:72:34:b2:4f:e2:20: e5:0a:f4:e7:31:0b:4d:53:47:ae:03:80:c1:76:bb: c3:18:c0:25:65:17:79:62:8f:9b:bd:f2:8e:64:94: 77:d4:f4:0c:f0:1b:e9:58:30:99:36:2c:0c:93:01: 8d:4a:2f:85:2d:28:a2:f0:73:57:4a:ff:dd:dd:f1: 64:7d:10:25:f5:90:bc:ca:da:97:9d:9c:34:25:18: f7:b7:b0:04:4b:dc:6d:31:57:ef:f8:c9:06:1a:fc: ad:ca:5f:4b:3c:88:ab:e7:3c:5e:74:20:ea:ad:18: 02:30:74:60:cc:00:ab:4b:f0:1d:04:fd:fc:0d:cf: ec:3f:46:ff:cb:b5:9c:ee:58:37:6f:51:8e:7f:85: e1:c5:07:a7:00:a7:ed:b6:54:72:53:78:7f:0a:71: 43:fd:e7:0d:f0:9f:5f:ff:2e:af:7b:68:85:16:43: 08:25:0a:0c:50:42:35:41:93:62:c0:40:0e:e7:6c: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9F:A3:0F:9F:69:AC:42:33:CE:5A:3D:81:D3:0A:54:2A:5D:53:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c8a230f-0d15-3a64-baa4-e228f59c4f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:3780::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f6:d3:bc:52:28:3b:89:d0:78:de:22:99:4c:63:89:cf:d0: 21:94:2f:43:39:e3:0a:14:c1:2f:07:03:15:2b:28:cf:4f:d7: 4e:75:05:91:43:df:0d:a9:c4:3d:71:51:b0:57:bd:a5:fd:da: ab:16:d9:f9:c5:ad:ae:2f:b4:89:14:1b:82:58:92:18:b7:a8: 3d:7e:c8:78:69:09:91:63:29:e7:0e:f5:0f:7b:ab:81:0e:33: 7e:1f:e3:9d:05:14:68:9b:66:bd:66:d1:43:af:7b:86:8c:21: 46:81:1c:c0:9e:a2:72:1b:0e:ee:b4:10:0d:6c:44:b3:1c:f0: 24:f1:67:f7:2b:64:71:7c:3a:b5:57:07:c4:b6:d0:fc:a5:61: 9e:39:68:67:11:54:2d:7b:c4:de:d7:95:77:9d:21:d8:d2:d9: fa:41:ec:0e:e8:d4:c3:c4:35:fd:89:4e:7c:31:f7:24:1c:83: 5c:3c:40:9d:e7:3e:39:c6:9b:5e:70:2a:f3:22:39:3b:75:64: 6c:48:94:0b:ef:37:8d:2d:e1:a4:c3:8a:8a:1a:b6:04:21:92: 04:d6:68:13:cd:52:dd:6d:2e:bb:33:45:dd:09:21:1b:02:29: 80:a7:ea:ba:92:9a:ec:a7:d5:92:dd:07:84:27:1d:78:36:bf: a3:bb:39:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9/4v4EkfeqLEY/8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk NjY1OTk2ODUtM2UzMi00MTc3LTk3YTMtNWE0MDM2Y2NmZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqJ1KsxK/y/WB0VIdSZhTkEMXKVTaCvedVLP 3stdZKrdQMJU+z3vaA0i5iuDOaewnVzAb1Rw2Q9mRTKVpIESgu7So+ByNLJP4iDl CvTnMQtNU0euA4DBdrvDGMAlZRd5Yo+bvfKOZJR31PQM8BvpWDCZNiwMkwGNSi+F LSii8HNXSv/d3fFkfRAl9ZC8ytqXnZw0JRj3t7AES9xtMVfv+MkGGvytyl9LPIir 5zxedCDqrRgCMHRgzACrS/AdBP38Dc/sP0b/y7Wc7lg3b1GOf4XhxQenAKfttlRy U3h/CnFD/ecN8J9f/y6ve2iFFkMIJQoMUEI1QZNiwEAO52xHcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFICfow+faaxCM85aPYHTClQqXVPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWM4YTIzMGYtMGQxNS0z YTY0LWJhYTQtZTIyOGY1OWM0Zjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgTeA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFn207xSKDuJ0HjeIplMY4nP0CGUL0M54woUwS8HAxUrKM9P1051 BZFD3w2pxD1xUbBXvaX92qsW2fnFra4vtIkUG4JYkhi3qD1+yHhpCZFjKecO9Q97 q4EOM34f450FFGibZr1m0UOve4aMIUaBHMCeonIbDu60EA1sRLMc8CTxZ/crZHF8 OrVXB8S20PylYZ45aGcRVC17xN7XlXedIdjS2fpB7A7o1MPENf2JTnwx9yQcg1w8 QJ3nPjnGm15wKvMiOTt1ZGxIlAvvN40t4aTDiooatgQhkgTWaBPNUt1tLrszRd0J IRsCKYCn6rqSmuyn1ZLdB4QnHXg2v6O7OZQ= -----END CERTIFICATE-----Generated at Sun Nov 15 17:04:31 2026 by rpki-client