$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0aad84c-0a5a-3767-ab04-27da15352632.roa File: c0aad84c-0a5a-3767-ab04-27da15352632.roa (raw, json) Hash identifier: N59gnGuOv8qAth2M0UOijTigKy1VMtHl3W/+3L2tE1c= Subject key identifier: 02:21:4F:27:C8:B8:15:3E:8D:00:A2:31:A2:4F:A1:32:65:98:E7:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4986CA3438B0C981FFDBC940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0aad84c-0a5a-3767-ab04-27da15352632.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:5900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:ca:34:38:b0:c9:81:ff:db:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a19717e-612a-45c7-8b54-f11b593b1301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:83:67:52:d7:c2:81:8e:b6:cf:51:df:c4: ff:90:7f:85:c0:81:7d:e2:24:e5:9b:d0:06:92:ab: 13:a4:87:cb:91:1f:76:c5:c7:f1:9a:36:6f:26:46: 08:83:53:0c:31:0d:a7:eb:33:18:3d:92:c5:2a:b7: ad:0c:17:5e:70:05:de:74:13:bd:61:d2:2e:e7:f1: 86:b7:98:db:07:96:93:2a:f8:0c:ae:7d:e0:2c:ed: 38:73:71:f4:fc:a1:2d:c6:d0:0f:66:71:9e:ae:1e: 5b:21:22:f7:cd:4c:e6:80:05:69:1a:28:2f:13:66: 36:af:16:33:9d:a1:c0:08:d0:25:45:5d:25:9e:52: ef:a8:eb:2f:1a:9a:cd:a3:b2:5c:09:5a:fe:de:a8: 9e:7d:84:09:7f:af:41:50:71:46:71:58:d1:d7:5c: 96:dc:ec:d1:2f:ce:66:99:3d:2a:a4:ec:f6:f5:0d: e5:2f:67:23:1c:39:08:67:0c:e4:ba:b0:ee:05:0d: 94:c0:7d:37:48:f7:fa:23:5f:95:22:c3:7f:cd:40: 37:e6:06:cc:a6:f5:d0:c3:f5:0c:e8:7c:7a:c3:90: 1a:be:27:13:8a:31:a7:40:a7:73:cd:f4:eb:32:0e: 6e:7f:59:6e:d4:a2:c4:cc:60:80:58:d1:9a:e8:dc: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:4F:27:C8:B8:15:3E:8D:00:A2:31:A2:4F:A1:32:65:98:E7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0aad84c-0a5a-3767-ab04-27da15352632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ce:7d:4f:0f:cf:27:9a:a5:5d:d3:5c:1c:f1:ce:bb:60:4d: 39:50:a1:f6:31:02:e7:34:76:23:d9:d9:5c:cf:63:04:5b:6d: 64:93:a0:3c:cd:b4:a8:aa:1a:66:d1:74:5b:08:d4:4d:15:96: 47:14:10:89:c0:0c:a1:a5:f9:fd:fd:c0:f0:6c:f9:3c:de:58: 39:71:d0:2e:cf:95:8f:89:c5:62:e7:52:2a:d6:62:9e:2a:c2: 34:68:a2:67:3a:b2:26:8e:97:f6:ab:02:20:50:b2:04:4b:2c: 7b:e3:7a:e4:88:bc:35:a4:c3:28:f7:8c:18:e5:52:0f:d0:70: 2e:27:94:61:7f:56:08:6b:15:0f:d7:18:c3:4f:13:a5:3c:6f: ce:be:af:f6:cf:3a:20:d5:dc:23:c7:7c:48:fc:59:45:80:c3: be:3e:61:4b:82:9f:6b:62:a6:eb:28:7d:a8:7d:45:e8:48:23: 36:e4:cf:44:5e:9e:3c:9d:c1:41:c6:41:46:ba:c0:01:d9:3f: 71:77:2d:f3:c7:e2:9c:e7:22:f9:1b:ce:83:7e:41:13:30:9b: 49:26:24:23:a6:ea:b9:01:ff:49:53:7e:2c:46:57:74:89:26: 74:5c:40:2f:f6:fc:0d:56:7b:62:0f:5a:02:6b:f9:93:52:10: 6d:c1:4f:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhso0OLDJgf/byUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGExOTcxN2UtNjEyYS00NWM3LThiNTQtZjExYjU5M2IxMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ODZ1LXwoGOts9R38T/kH+FwIF94iTlm9AG kqsTpIfLkR92xcfxmjZvJkYIg1MMMQ2n6zMYPZLFKretDBdecAXedBO9YdIu5/GG t5jbB5aTKvgMrn3gLO04c3H0/KEtxtAPZnGerh5bISL3zUzmgAVpGigvE2Y2rxYz naHACNAlRV0lnlLvqOsvGprNo7JcCVr+3qiefYQJf69BUHFGcVjR11yW3OzRL85m mT0qpOz29Q3lL2cjHDkIZwzkurDuBQ2UwH03SPf6I1+VIsN/zUA35gbMpvXQw/UM 6Hx6w5AavicTijGnQKdzzfTrMg5uf1lu1KLEzGCAWNGa6NwwAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIhTyfIuBU+jQCiMaJPoTJlmOc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBhYWQ4NGMtMGE1YS0z NzY3LWFiMDQtMjdkYTE1MzUyNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjOfU8PzyeapV3TXBzxzrtgTTlQofYxAuc0diPZ2VzPYwRbbWST oDzNtKiqGmbRdFsI1E0VlkcUEInADKGl+f39wPBs+TzeWDlx0C7PlY+JxWLnUirW Yp4qwjRoomc6siaOl/arAiBQsgRLLHvjeuSIvDWkwyj3jBjlUg/QcC4nlGF/Vghr FQ/XGMNPE6U8b86+r/bPOiDV3CPHfEj8WUWAw74+YUuCn2tipusofah9RehIIzbk z0RenjydwUHGQUa6wAHZP3F3LfPH4pznIvkbzoN+QRMwm0kmJCOm6rkB/0lTfixG V3SJJnRcQC/2/A1We2IPWgJr+ZNSEG3BT/0= -----END CERTIFICATE-----Generated at Sat Sep 26 17:23:10 2026 by rpki-client