$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa File: cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa (raw, json) Hash identifier: 4/OFLub5NtK4hfHbrVFltKVhjge/UK/5VvR0EuPPSHA= Subject key identifier: E7:82:D0:2C:D9:FC:15:D2:41:69:39:93:97:B7:60:42:27:5D:BE:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584FB50BC1A32FFA758B60BD2280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa Signing time: Mon 02 Nov 2026 14:00:14 +0000 ROA not before: Mon 02 Nov 2026 14:00:14 +0000 ROA not after: Sun 31 Jan 2027 14:00:14 +0000 asID: 30036 IP address blocks: 2604:2d81:2000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:0b:c1:a3:2f:fa:75:8b:60:bd:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 2 14:00:14 2026 GMT Not After : Jan 31 14:00:14 2027 GMT Subject: CN=a5b70f1e-0abe-4316-8557-66f00f30fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:44:a7:18:5c:e2:9c:b6:88:17:bf:5f:d2: d2:f5:40:df:8d:59:3b:b8:91:ea:e0:8d:84:ca:86: 10:a5:7f:e6:7e:9d:e2:85:b4:95:ed:28:ad:ba:53: d9:f1:25:e1:05:55:78:91:5e:18:24:b9:af:76:74: c4:a4:3d:bc:62:fe:0b:23:78:15:ea:72:c5:7a:38: de:cf:c5:a5:b7:d5:6b:4b:0d:35:a9:ee:60:6f:5c: 74:f9:5a:de:2d:60:bb:38:5f:1a:4a:e9:c9:3a:88: 05:0e:bb:4b:27:33:82:39:26:da:27:64:77:65:eb: 3d:22:8a:ea:8c:07:3c:dc:d6:59:22:4d:f7:29:59: d1:5c:e0:d3:8e:89:60:83:86:47:a8:55:bb:54:d5: fe:be:be:e6:a9:79:85:27:b9:84:97:01:a4:c2:f4: 0f:2a:23:e5:6c:77:a3:57:4c:22:17:57:a5:d4:3f: ab:be:0e:96:22:32:d9:c4:67:1e:f8:bc:14:3c:80: 37:52:b6:a4:51:ba:57:19:ce:86:33:21:46:7d:95: 36:8e:26:de:0b:09:65:6e:c9:f6:4b:ed:a7:1b:51: 20:41:07:b0:b5:46:73:92:f5:40:ec:b9:c7:c4:f8: 8a:d2:ff:96:f8:10:8e:43:7f:3a:c5:29:bc:5b:d5: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:82:D0:2C:D9:FC:15:D2:41:69:39:93:97:B7:60:42:27:5D:BE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:36:12:b6:d6:89:a3:a2:35:cd:70:5e:77:be:fb:d3:6c:c3: ec:ed:b1:12:47:b8:21:70:59:d0:ea:fc:3c:8e:29:9c:9c:ef: e9:6e:a2:8c:a5:c6:1e:fb:1c:cd:43:cb:1b:a1:30:4e:06:aa: 70:07:ad:3b:a2:6c:bc:92:e2:87:3d:7e:2e:a9:b1:17:ed:db: 88:ce:13:f1:1c:21:4a:c5:9b:4f:b3:df:4b:ec:88:76:3f:6f: fa:92:23:14:56:41:6c:9a:06:48:4e:39:08:6b:8a:17:43:93: a3:da:d5:df:5b:ab:01:20:d3:ef:cf:31:50:1b:40:9f:16:3e: eb:26:ab:a3:4e:05:3d:dc:58:76:c9:5f:2e:d4:c7:bc:60:a4: 5a:69:15:de:51:63:20:79:4d:5a:58:5f:c4:b8:97:0a:92:ab: de:58:86:d9:26:4c:88:81:b4:cb:18:55:44:3c:9a:7e:27:b6: 48:58:25:49:46:3e:e3:66:7e:07:67:71:92:45:81:9b:59:28: 57:e0:77:47:e3:2f:25:06:fe:59:54:bd:65:5f:45:9a:fd:fa: 5e:5e:96:1c:a8:18:45:c5:82:ba:4d:54:02:b0:27:2f:d7:c6: a8:d3:86:d1:77:a8:16:4b:a4:3f:53:a3:64:9a:f5:98:45:b3: bf:40:bf:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+1C8GjL/p1i2C9IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTEwMjE0MDAxNFoXDTI3MDEzMTE0MDAxNFowLzEtMCsGA1UEAxMk YTViNzBmMWUtMGFiZS00MzE2LTg1NTctNjZmMDBmMzBmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsodEpxhc4py2iBe/X9LS9UDfjVk7uJHq4I2E yoYQpX/mfp3ihbSV7SitulPZ8SXhBVV4kV4YJLmvdnTEpD28Yv4LI3gV6nLFejje z8Wlt9VrSw01qe5gb1x0+VreLWC7OF8aSunJOogFDrtLJzOCOSbaJ2R3Zes9Iorq jAc83NZZIk33KVnRXODTjolgg4ZHqFW7VNX+vr7mqXmFJ7mElwGkwvQPKiPlbHej V0wiF1el1D+rvg6WIjLZxGce+LwUPIA3UrakUbpXGc6GMyFGfZU2jibeCwllbsn2 S+2nG1EgQQewtUZzkvVA7LnHxPiK0v+W+BCOQ386xSm8W9WQMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOeC0CzZ/BXSQWk5k5e3YEInXb5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2NlMWFjZWMtOWVlZS0z YjdkLTllZDQtZTVhOTA3M2I3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABI2ErbWiaOiNc1wXne++9Nsw+ztsRJHuCFwWdDq/DyOKZyc7+lu ooylxh77HM1DyxuhME4GqnAHrTuibLyS4oc9fi6psRft24jOE/EcIUrFm0+z30vs iHY/b/qSIxRWQWyaBkhOOQhrihdDk6Pa1d9bqwEg0+/PMVAbQJ8WPusmq6NOBT3c WHbJXy7Ux7xgpFppFd5RYyB5TVpYX8S4lwqSq95YhtkmTIiBtMsYVUQ8mn4ntkhY JUlGPuNmfgdncZJFgZtZKFfgd0fjLyUG/llUvWVfRZr9+l5elhyoGEXFgrpNVAKw Jy/XxqjThtF3qBZLpD9To2Sa9ZhFs79Av2w= -----END CERTIFICATE-----Generated at Sun Nov 15 20:48:59 2026 by rpki-client