$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa File: be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa (raw, json) Hash identifier: R52xQD7vQc+R0cCy/+7bGJGBsy4s0QymxAMoxjeeLOc= Subject key identifier: 6E:E4:76:1E:50:9E:E2:62:86:E8:F9:65:6C:9F:D4:0B:80:A5:85:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498BA8CC9FD25BC5B0CC1A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:9c00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a8:cc:9f:d2:5b:c5:b0:cc:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b75f81c-4ef1-4082-99bd-e94cdecaf561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f4:43:73:25:81:fd:59:fe:58:a9:d9:6c:71: 35:b0:6b:ef:0f:0c:13:4f:9e:e0:65:bb:6a:e6:a5: 76:2c:76:ab:9b:4d:1f:1e:9b:33:8e:7d:8a:a7:97: 30:64:2e:a5:d9:62:49:13:ae:53:f7:f6:86:bd:99: d9:83:5a:01:10:c8:c6:ba:1d:fd:af:3e:16:a4:ba: ef:13:0d:4a:87:5b:b2:ba:d1:ee:72:59:79:4a:c2: 40:28:eb:03:d9:02:8e:41:18:e4:3f:b1:89:dc:f3: 26:c5:b8:78:2d:6d:a2:df:ad:a8:cf:a6:f1:63:5f: 20:ad:8b:47:29:ad:34:42:fa:b3:7f:f0:6c:70:a6: 35:0e:58:ce:82:d8:7e:9f:78:6f:5a:08:b8:42:35: 4a:42:2a:81:33:e6:12:18:62:ac:11:e8:dc:bc:3e: 21:12:cb:bf:5f:d3:90:d5:b0:3c:db:a4:54:60:5c: 77:7d:3b:fc:f0:52:c8:01:c8:82:37:ee:0a:25:9e: 33:fc:47:4c:18:95:f0:22:ec:28:63:fd:69:de:2c: b7:76:d8:5c:3d:e9:f2:61:23:12:26:33:91:c5:aa: a0:17:bc:b9:b0:45:37:45:69:d7:29:2e:8c:0a:62: 9a:a5:4d:36:b8:b2:0b:63:b6:9c:6f:17:7f:24:dc: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E4:76:1E:50:9E:E2:62:86:E8:F9:65:6C:9F:D4:0B:80:A5:85:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be9b411f-0ed1-3759-9415-d3b57b9f3d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9c00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c4:b6:8b:b4:53:b0:77:1a:71:73:77:a1:ce:fb:92:96:35: ef:fc:f9:a5:b5:85:4c:c9:5f:32:57:06:99:b4:c8:6c:31:26: 26:61:7a:1b:f9:b4:a3:e0:53:d4:d6:18:c7:14:c8:1b:2f:9e: 4d:0a:d9:a4:58:c6:46:45:33:da:4b:37:65:57:9d:0c:48:e4: a0:e6:2f:1d:cf:90:7d:7f:f3:19:fe:31:cc:74:c0:bf:b2:d0: 1a:bc:14:48:9d:5e:ea:1c:f9:3d:55:fe:c5:fe:0e:74:72:f8: 27:7a:9f:17:ce:c6:e3:c3:37:3f:3f:a0:8b:a9:7d:b0:e0:a6: aa:ee:57:1a:b7:aa:bf:da:64:c5:5e:e4:71:da:a8:a6:a2:13: 9b:aa:a2:36:e9:9b:6f:96:af:ae:87:0d:5e:e7:b0:78:5c:da: 77:30:7e:1c:e3:a4:22:ef:bb:e9:59:ae:9d:d1:fb:a7:34:41: e7:75:b5:a3:37:7b:43:67:48:27:b1:e5:ac:e1:ac:4a:51:bd: e9:1c:72:d5:bc:e0:36:c9:db:be:a9:99:47:3a:a8:6a:c4:95: 65:e1:70:5e:ae:40:4d:b9:a9:76:94:44:d4:da:a7:6f:8d:e1: c7:81:d5:c9:cc:e6:3f:87:2e:b2:ac:7e:41:22:fc:4a:88:c7: b7:3a:74:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji6jMn9JbxbDMGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI3NWY4MWMtNGVmMS00MDgyLTk5YmQtZTk0Y2RlY2FmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/RDcyWB/Vn+WKnZbHE1sGvvDwwTT57gZbtq 5qV2LHarm00fHpszjn2Kp5cwZC6l2WJJE65T9/aGvZnZg1oBEMjGuh39rz4WpLrv Ew1Kh1uyutHucll5SsJAKOsD2QKOQRjkP7GJ3PMmxbh4LW2i362oz6bxY18grYtH Ka00Qvqzf/BscKY1DljOgth+n3hvWgi4QjVKQiqBM+YSGGKsEejcvD4hEsu/X9OQ 1bA826RUYFx3fTv88FLIAciCN+4KJZ4z/EdMGJXwIuwoY/1p3iy3dthcPenyYSMS JjORxaqgF7y5sEU3RWnXKS6MCmKapU02uLILY7acbxd/JNwmpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7kdh5QnuJihuj5ZWyf1AuApYXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU5YjQxMWYtMGVkMS0z NzU5LTk0MTUtZDNiNTdiOWYzZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLEtou0U7B3GnFzd6HO+5KWNe/8+aW1hUzJXzJXBpm0yGwxJiZh ehv5tKPgU9TWGMcUyBsvnk0K2aRYxkZFM9pLN2VXnQxI5KDmLx3PkH1/8xn+Mcx0 wL+y0Bq8FEidXuoc+T1V/sX+DnRy+Cd6nxfOxuPDNz8/oIupfbDgpqruVxq3qr/a ZMVe5HHaqKaiE5uqojbpm2+Wr66HDV7nsHhc2ncwfhzjpCLvu+lZrp3R+6c0Qed1 taM3e0NnSCex5azhrEpRvekcctW84DbJ276pmUc6qGrElWXhcF6uQE25qXaURNTa p2+N4ceB1cnM5j+HLrKsfkEi/EqIx7c6dK8= -----END CERTIFICATE-----Generated at Mon Sep 28 01:49:32 2026 by rpki-client