$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa File: aaac33d9-9851-3e29-a8fb-c6896545a96d.roa (raw, json) Hash identifier: fFhxLsjl3yvJDAWnxMC4XLHUA38JCLYZWuczJmC/Zgw= Subject key identifier: 7C:68:10:DF:0C:20:FB:BF:0C:A0:EA:9D:CD:C3:E5:3A:05:74:E1:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974CE7136E95AD2375ACCE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ce:71:36:e9:5a:d2:37:5a:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f4005b8-595a-4a32-93d3-fcd6610a93dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:63:be:81:41:44:86:db:89:a6:1d:ef:be: 0f:c2:98:ca:cf:09:40:45:e5:18:d4:d2:e0:72:f2: de:0f:6c:58:b2:a3:98:d0:77:f3:20:80:7d:4f:e1: 31:df:cd:0a:51:21:47:00:03:10:70:cd:96:49:30: 53:4c:31:10:58:60:e8:5e:0d:a9:5b:37:dc:01:63: 20:55:a2:fb:32:59:e7:45:fb:60:1e:f7:40:19:7f: ca:96:99:47:8f:f7:46:4d:3c:21:14:af:a1:b7:2f: 48:47:78:5b:2f:b5:d0:d9:e8:34:c7:44:40:21:6a: fd:c1:ab:c6:44:c1:b6:a9:1b:06:6c:47:13:7f:64: 93:64:6f:ec:42:65:d6:b2:82:30:0d:f0:88:64:b1: 84:5f:b2:e6:9a:85:51:7c:1a:1a:7c:f7:02:0f:8f: 75:24:8d:fd:03:14:3c:ee:75:37:07:9e:52:f8:64: 95:b5:4d:31:bb:85:87:d0:99:65:34:37:c9:79:2b: 2f:10:3e:31:4c:6b:b0:42:24:52:00:84:ea:ab:b2: 2e:ec:a5:53:a7:1a:e6:1d:e7:b7:f6:58:4b:6b:e8: a9:25:70:e5:32:92:b9:9a:f0:09:eb:fe:80:c8:89: 7f:a9:68:d0:28:00:b5:1f:90:57:96:af:94:06:fc: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:10:DF:0C:20:FB:BF:0C:A0:EA:9D:CD:C3:E5:3A:05:74:E1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f0:fd:d1:04:7b:a2:41:a1:0f:d7:81:74:54:bf:21:24:d8: 5c:ba:37:f7:8b:71:b8:8f:c0:76:52:59:e3:63:c7:bf:a3:20: 08:10:a4:1f:89:98:c4:ed:07:7c:ba:65:de:55:4d:17:ca:e6: 4c:ce:4d:32:6b:da:62:39:72:0d:72:2f:92:e9:dd:3e:02:39: 56:b6:6b:5d:f4:66:42:85:1e:b2:a9:c4:d8:b4:91:7d:26:f0: 17:cf:15:9c:fb:69:fa:cf:9c:51:05:e3:a1:44:37:aa:6b:b5: e4:78:6e:e3:bf:14:c1:6a:38:33:66:7f:04:00:f9:52:a9:7b: 65:e8:77:c7:09:ac:74:aa:ea:ea:d1:d8:64:04:fc:00:86:85: 2b:4d:68:99:2f:35:9a:63:be:5c:9f:9d:a6:8b:1a:fb:0a:ec: 8d:01:36:c8:50:7d:ce:04:59:e4:84:16:7a:fa:30:79:ae:2a: 42:5d:33:4b:fe:8c:2e:fb:a1:4d:bc:a4:48:78:a7:57:74:21: 08:f8:d3:2e:d0:b9:0f:84:6b:a4:09:5f:26:99:2d:75:8e:17: ba:ca:cf:a2:09:10:4d:e1:31:a3:d4:78:c2:29:2a:86:2a:cd: b3:4f:22:fd:52:40:e9:86:27:9a:fa:f5:86:8e:fd:c9:e7:59: 3b:d2:26:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdM5xNula0jdazOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y0MDA1YjgtNTk1YS00YTMyLTkzZDMtZmNkNjYxMGE5M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcBjvoFBRIbbiaYd774PwpjKzwlAReUY1NLg cvLeD2xYsqOY0HfzIIB9T+Ex380KUSFHAAMQcM2WSTBTTDEQWGDoXg2pWzfcAWMg VaL7MlnnRftgHvdAGX/KlplHj/dGTTwhFK+hty9IR3hbL7XQ2eg0x0RAIWr9wavG RMG2qRsGbEcTf2STZG/sQmXWsoIwDfCIZLGEX7LmmoVRfBoafPcCD491JI39AxQ8 7nU3B55S+GSVtU0xu4WH0JllNDfJeSsvED4xTGuwQiRSAITqq7Iu7KVTpxrmHee3 9lhLa+ipJXDlMpK5mvAJ6/6AyIl/qWjQKAC1H5BXlq+UBvwd5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHxoEN8MIPu/DKDqnc3D5ToFdOEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFhYzMzZDktOTg1MS0z ZTI5LWE4ZmItYzY4OTY1NDVhOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgA0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF7w/dEEe6JBoQ/XgXRUvyEk2Fy6N/eLcbiPwHZSWeNjx7+jIAgQ pB+JmMTtB3y6Zd5VTRfK5kzOTTJr2mI5cg1yL5Lp3T4COVa2a130ZkKFHrKpxNi0 kX0m8BfPFZz7afrPnFEF46FEN6prteR4buO/FMFqODNmfwQA+VKpe2Xod8cJrHSq 6urR2GQE/ACGhStNaJkvNZpjvlyfnaaLGvsK7I0BNshQfc4EWeSEFnr6MHmuKkJd M0v+jC77oU28pEh4p1d0IQj40y7QuQ+Ea6QJXyaZLXWOF7rKz6IJEE3hMaPUeMIp KoYqzbNPIv1SQOmGJ5r69YaO/cnnWTvSJho= -----END CERTIFICATE-----Generated at Sat Sep 26 18:46:37 2026 by rpki-client