$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa File: cd44eacc-c882-382e-aad6-db91ce3e7552.roa (raw, json) Hash identifier: kt4Ny4W4ROXWza8GL/jVYbzdjBG8V87YFAjfcEkhGl0= Subject key identifier: 38:92:9C:70:4C:68:1F:D7:A3:91:6A:32:8E:FC:CB:78:91:9D:79:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972DC03A0283F93A5FBC6E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:7d00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:dc:03:a0:28:3f:93:a5:fb:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77970dc5-c0c7-40f8-a73e-ecd230dc35ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:23:6b:02:58:62:21:69:a7:28:0b:d4:d1: 40:8c:ea:db:8e:f7:b2:64:2f:79:2b:7a:61:a6:22: 2e:6d:2a:88:20:40:87:01:94:3e:4f:0c:ea:2c:bd: c4:46:d1:4a:23:8f:f7:89:7d:65:3c:d3:78:06:6e: 96:0c:5c:23:b7:b0:dc:8b:2f:b9:74:91:27:cf:a2: 4f:ed:1b:7f:81:b4:a1:2a:ee:06:6f:47:59:f8:1a: 38:ba:5a:54:3e:0f:0e:04:23:20:bb:ec:6a:28:11: a8:1f:74:54:5c:78:f8:a2:49:17:5b:87:14:98:be: 1a:2c:01:68:09:d4:c0:d8:03:b6:7f:d0:94:e3:72: bf:a8:0f:59:c2:c9:26:23:99:a8:20:d0:00:52:08: 6d:98:98:ee:e8:ea:01:02:bd:e6:2c:ae:63:d5:84: d4:d6:51:e9:20:63:93:31:e6:9f:3b:a6:4b:35:f7: 16:34:4e:ed:a7:a2:dc:93:b6:b4:b6:e6:2a:69:a7: 53:ca:d1:38:68:28:de:36:a9:1d:c3:24:12:96:5f: d3:b8:0b:c4:68:b1:7d:46:0b:b1:5b:12:7e:9e:e9: 9b:5f:00:12:b6:38:48:35:04:51:6f:2f:18:36:0b: 2d:ac:3c:95:46:02:ca:1d:7c:d8:34:23:e6:9e:2f: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:92:9C:70:4C:68:1F:D7:A3:91:6A:32:8E:FC:CB:78:91:9D:79:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd44eacc-c882-382e-aad6-db91ce3e7552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7d00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:46:0b:fe:64:d3:62:b7:dc:38:8b:ee:33:9f:5b:82:d9:24: 4b:98:26:6c:63:47:de:6f:03:15:43:ca:62:cf:67:5d:68:b3: 64:df:cf:46:a9:2c:2b:b3:8d:82:eb:4c:bc:e5:23:43:88:c8: e1:e2:cb:64:9e:02:5e:ab:e5:ef:57:a4:88:0a:fa:54:92:b1: eb:be:04:6e:37:87:75:52:97:9f:64:71:fd:ff:64:84:16:64: 15:50:d1:cf:2f:a4:3f:01:97:dc:a8:6d:05:de:00:0b:01:b2: fb:e8:d7:d4:91:dc:83:5c:5a:fb:81:db:4d:08:23:1b:f9:6c: b2:7e:46:31:0a:92:81:64:10:0e:d2:ca:3c:d8:db:9b:20:fe: c9:9a:a4:00:d0:37:b4:09:1d:1d:7c:55:46:55:c2:68:8e:6c: 9f:8c:36:2c:1a:26:2b:a7:bf:11:65:92:33:e2:97:41:84:80: ca:30:68:ba:ce:63:e5:85:eb:40:7d:77:c4:c7:06:9a:81:bf: 1e:f6:48:ce:c8:35:36:f7:4d:2b:22:53:f4:22:cc:24:00:ff: 96:e5:24:5b:12:06:37:b1:ad:1e:15:05:b7:7e:32:10:b4:6e: c7:86:53:61:00:d7:9e:74:fe:96:ba:72:71:87:d3:7e:24:49: 03:1c:be:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JctwDoCg/k6X7xuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzc5NzBkYzUtYzBjNy00MGY4LWE3M2UtZWNkMjMwZGMzNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAjawJYYiFppygL1NFAjOrbjveyZC95K3ph piIubSqIIECHAZQ+TwzqLL3ERtFKI4/3iX1lPNN4Bm6WDFwjt7Dciy+5dJEnz6JP 7Rt/gbShKu4Gb0dZ+Bo4ulpUPg8OBCMgu+xqKBGoH3RUXHj4okkXW4cUmL4aLAFo CdTA2AO2f9CU43K/qA9ZwskmI5moINAAUghtmJju6OoBAr3mLK5j1YTU1lHpIGOT MeafO6ZLNfcWNE7tp6Lck7a0tuYqaadTytE4aCjeNqkdwyQSll/TuAvEaLF9Rgux WxJ+numbXwAStjhINQRRby8YNgstrDyVRgLKHXzYNCPmni+q8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDiSnHBMaB/Xo5FqMo78y3iRnXlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Q0NGVhY2MtYzg4Mi0z ODJlLWFhZDYtZGI5MWNlM2U3NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgH0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1GC/5k02K33DiL7jOfW4LZJEuYJmxjR95vAxVDymLPZ11os2Tf z0apLCuzjYLrTLzlI0OIyOHiy2SeAl6r5e9XpIgK+lSSseu+BG43h3VSl59kcf3/ ZIQWZBVQ0c8vpD8Bl9yobQXeAAsBsvvo19SR3INcWvuB200IIxv5bLJ+RjEKkoFk EA7SyjzY25sg/smapADQN7QJHR18VUZVwmiObJ+MNiwaJiunvxFlkjPil0GEgMow aLrOY+WF60B9d8THBpqBvx72SM7INTb3TSsiU/QizCQA/5blJFsSBjexrR4VBbd+ MhC0bseGU2EA1550/pa6cnGH034kSQMcvrI= -----END CERTIFICATE-----Generated at Fri Sep 25 06:55:55 2026 by rpki-client