$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa File: a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa (raw, json) Hash identifier: rOvpBPvFTnb/FJd0L66pgNHqLADOPnAZPnK/okUJ8V8= Subject key identifier: 21:8C:7D:88:65:5B:0E:66:98:06:AB:6A:74:3C:31:55:D5:6F:41:5D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A2118F2F07F89427CB380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:6800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:21:18:f2:f0:7f:89:42:7c:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2f979ba5-79af-4407-bdea-c6a98db8dbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:ed:4f:73:80:67:48:b6:45:c3:3b:52:54: 53:b0:98:e2:4d:46:90:71:65:4e:59:44:7f:49:0e: 69:ea:b9:6f:e1:bc:f4:b8:33:81:43:ed:21:f6:91: a9:d2:1e:ea:95:39:c9:88:4a:db:60:72:36:83:59: c6:91:19:38:d9:8a:b5:fa:5f:75:75:7d:80:41:7d: 9a:31:05:72:3c:43:18:21:a0:4c:38:c0:73:4a:50: d5:0c:30:7b:35:a7:77:84:5c:c6:8c:c8:93:ef:b8: d6:46:d6:27:e2:ee:ba:2e:47:eb:b6:e1:a5:85:00: 3d:57:88:14:f8:31:95:1c:50:df:6d:23:16:f8:cc: 77:8e:df:b4:f5:18:19:46:72:a1:15:4c:30:db:ff: 9a:5a:1f:29:ff:64:c0:4d:bd:4f:f2:09:12:d6:1e: a8:67:15:63:08:7d:e6:3c:f0:de:95:52:34:b5:62: 04:df:ce:b2:f7:5e:07:20:52:b5:dc:dc:f7:d6:58: 04:09:f3:dd:06:f3:65:5c:f3:ad:5f:fd:06:e1:7c: 97:0c:52:29:69:c5:8a:bb:b1:24:3f:99:d6:eb:4e: 67:ce:40:c2:49:99:63:e4:4b:c6:04:e0:40:76:38: 2d:77:5c:cb:64:da:a1:2c:cd:09:cd:3a:17:3f:13: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:7D:88:65:5B:0E:66:98:06:AB:6A:74:3C:31:55:D5:6F:41:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a860acbc-fb2b-3daf-9414-d0cc53c6d924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:6800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:99:ea:0f:93:e8:4d:40:c6:8c:49:b0:62:74:04:6d:bf:0d: 62:39:32:80:5a:f1:d3:2f:e9:9f:07:b5:d7:c0:20:43:d8:93: 49:a0:09:c7:ba:c9:77:6c:73:29:5e:09:ad:c5:25:10:05:cd: 8e:37:de:ba:84:d9:26:8e:93:6f:ce:6d:a7:e0:c9:4c:b7:86: e4:bc:53:f2:b1:d2:a6:5b:16:7a:4a:06:3e:1c:b7:55:fe:c3: fb:9d:ce:14:b4:10:6f:c2:69:18:4d:1e:5e:01:61:1c:09:42: 52:0f:f4:95:1d:e9:cc:46:9e:6c:8f:9e:7f:39:92:a4:c2:66: 39:c4:6c:28:47:db:35:ad:fd:8f:02:fb:09:f8:b4:d2:37:bc: e3:8b:75:d1:9b:b6:2f:95:71:b2:14:47:a0:8c:aa:b4:6f:42: 54:50:cd:35:39:04:03:ba:ab:bb:af:82:1b:cc:5e:0b:70:52: 84:46:d3:71:55:ee:a8:6c:e9:8d:b8:86:71:b7:35:dd:b3:78: 10:6a:58:16:5e:4c:2d:12:82:6c:21:dd:dd:51:18:92:48:7b: 0c:2e:54:29:52:8c:ec:c0:7a:65:65:1e:c5:5b:8b:8b:f3:64: bd:64:2b:f8:03:1c:bf:73:b0:f8:ac:5d:0f:3f:11:aa:39:fe: 87:7a:50:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiiEY8vB/iUJ8s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmY5NzliYTUtNzlhZi00NDA3LWJkZWEtYzZhOThkYjhkYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAPtT3OAZ0i2RcM7UlRTsJjiTUaQcWVOWUR/ SQ5p6rlv4bz0uDOBQ+0h9pGp0h7qlTnJiErbYHI2g1nGkRk42Yq1+l91dX2AQX2a MQVyPEMYIaBMOMBzSlDVDDB7Nad3hFzGjMiT77jWRtYn4u66LkfrtuGlhQA9V4gU +DGVHFDfbSMW+Mx3jt+09RgZRnKhFUww2/+aWh8p/2TATb1P8gkS1h6oZxVjCH3m PPDelVI0tWIE386y914HIFK13Nz31lgECfPdBvNlXPOtX/0G4XyXDFIpacWKu7Ek P5nW605nzkDCSZlj5EvGBOBAdjgtd1zLZNqhLM0JzToXPxObdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGMfYhlWw5mmAaranQ8MVXVb0FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg2MGFjYmMtZmIyYi0z ZGFmLTk0MTQtZDBjYzUzYzZkOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgGgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGZ6g+T6E1AxoxJsGJ0BG2/DWI5MoBa8dMv6Z8HtdfAIEPYk0mg Cce6yXdscyleCa3FJRAFzY433rqE2SaOk2/ObafgyUy3huS8U/Kx0qZbFnpKBj4c t1X+w/udzhS0EG/CaRhNHl4BYRwJQlIP9JUd6cxGnmyPnn85kqTCZjnEbChH2zWt /Y8C+wn4tNI3vOOLddGbti+VcbIUR6CMqrRvQlRQzTU5BAO6q7uvghvMXgtwUoRG 03FV7qhs6Y24hnG3Nd2zeBBqWBZeTC0Sgmwh3d1RGJJIewwuVClSjOzAemVlHsVb i4vzZL1kK/gDHL9zsPisXQ8/Eao5/od6UL0= -----END CERTIFICATE-----Generated at Fri Sep 25 18:45:28 2026 by rpki-client