$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d193be92-6474-3f4e-9378-f2ef53adb3a8.roa File: d193be92-6474-3f4e-9378-f2ef53adb3a8.roa (raw, json) Hash identifier: 0bH8uogOj5AVXeDOOmrwduL3Msv1urw+cJSXOMoqrOU= Subject key identifier: D3:8C:39:AC:7A:C6:06:5A:DF:50:33:88:53:EE:52:FB:B2:F9:80:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49877A2653715E46AF449C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d193be92-6474-3f4e-9378-f2ef53adb3a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:bb00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:7a:26:53:71:5e:46:af:44:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49592be5-4bcf-4f6c-9d98-50f16166a904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:33:0f:c0:fd:b0:ba:a7:ad:73:02:26:e8: 66:7d:61:8d:87:75:40:05:51:6b:2f:7f:e0:79:c2: 44:88:86:26:26:e5:17:69:14:d4:15:d2:f3:c5:71: 9c:af:60:74:37:be:50:cf:6d:0e:11:50:d2:1e:ed: d9:af:22:c8:51:46:af:d6:51:28:2e:1f:f0:01:30: 60:4f:07:d8:90:0e:58:4c:5d:a3:e5:89:03:be:09: f3:29:cd:ea:e4:bb:2a:d4:71:c5:89:bd:63:45:26: 49:a1:ce:c0:a8:ed:6e:af:a2:2a:f7:32:04:a8:99: 27:58:6b:3c:cb:13:0f:b6:0a:56:96:bd:7c:94:e7: b8:97:10:8e:78:d7:fa:87:db:7a:67:7c:2a:07:a5: 0f:96:3a:d1:bf:6c:2e:e9:08:f8:23:39:8a:7d:6e: 87:f7:04:34:36:a2:a5:96:b6:c4:b3:b1:34:17:30: 6b:77:08:fd:36:7e:40:bc:c9:4d:9b:4c:45:c8:6c: 28:65:cb:36:2f:e2:50:d1:cd:64:02:a0:5f:26:6c: 82:e7:37:12:6c:e9:69:40:ff:25:e6:5b:d2:eb:36: 87:21:3c:38:45:3d:59:33:8f:8f:79:f5:ed:83:15: 83:86:f5:7f:59:15:71:ed:d1:00:2e:07:61:9d:58: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8C:39:AC:7A:C6:06:5A:DF:50:33:88:53:EE:52:FB:B2:F9:80:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d193be92-6474-3f4e-9378-f2ef53adb3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:bb00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:02:f4:32:28:75:20:84:89:82:d2:8f:ab:bb:00:6b:e9:f8: 53:4e:e9:6c:19:b0:3b:a4:19:8a:0a:85:9a:d5:f2:07:f4:f8: 7d:02:3b:24:f5:3c:5f:eb:16:5f:a4:37:c2:3c:48:4c:12:51: 71:b6:bc:15:8b:b1:d6:d1:a9:54:5d:d0:c7:c8:dd:ea:1f:44: 6e:34:b8:b4:8c:34:15:b2:0c:22:b9:f8:b5:5d:55:1e:a2:ca: 0a:c1:44:60:c3:5b:17:02:dd:8e:cc:29:19:37:88:b0:e1:26: c1:3f:e4:6f:7e:78:1d:d1:db:23:5e:33:aa:4f:b5:0a:5f:3c: b3:b0:54:e9:af:8c:25:c2:48:67:97:fe:11:26:74:d8:2a:45: 72:d5:99:b2:dc:cb:85:02:7a:0e:83:fa:14:06:06:16:f6:c9: d0:48:aa:b4:c1:e3:8b:fb:70:66:cc:27:ad:66:20:b1:4f:03: 78:bf:e2:50:6e:25:3c:16:e1:3d:5f:56:77:36:b0:dd:60:3e: 65:dc:19:e4:94:86:99:8d:ac:96:24:77:4b:80:64:4e:9f:52: 42:3b:cf:29:fd:0c:64:65:76:0a:06:fb:aa:e5:e6:61:ea:81: 1b:4b:f1:81:ba:04:ba:67:d4:d7:a2:02:8c:33:4d:ff:b5:eb: 80:6f:14:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh3omU3FeRq9EnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDk1OTJiZTUtNGJjZi00ZjZjLTlkOTgtNTBmMTYxNjZhOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysozD8D9sLqnrXMCJuhmfWGNh3VABVFrL3/g ecJEiIYmJuUXaRTUFdLzxXGcr2B0N75Qz20OEVDSHu3ZryLIUUav1lEoLh/wATBg TwfYkA5YTF2j5YkDvgnzKc3q5Lsq1HHFib1jRSZJoc7AqO1ur6Iq9zIEqJknWGs8 yxMPtgpWlr18lOe4lxCOeNf6h9t6Z3wqB6UPljrRv2wu6Qj4IzmKfW6H9wQ0NqKl lrbEs7E0FzBrdwj9Nn5AvMlNm0xFyGwoZcs2L+JQ0c1kAqBfJmyC5zcSbOlpQP8l 5lvS6zaHITw4RT1ZM4+PefXtgxWDhvV/WRVx7dEALgdhnVg7SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOMOax6xgZa31AziFPuUvuy+YDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDE5M2JlOTItNjQ3NC0z ZjRlLTkzNzgtZjJlZjUzYWRiM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8C9DIodSCEiYLSj6u7AGvp+FNO6WwZsDukGYoKhZrV8gf0+H0C OyT1PF/rFl+kN8I8SEwSUXG2vBWLsdbRqVRd0MfI3eofRG40uLSMNBWyDCK5+LVd VR6iygrBRGDDWxcC3Y7MKRk3iLDhJsE/5G9+eB3R2yNeM6pPtQpfPLOwVOmvjCXC SGeX/hEmdNgqRXLVmbLcy4UCeg6D+hQGBhb2ydBIqrTB44v7cGbMJ61mILFPA3i/ 4lBuJTwW4T1fVnc2sN1gPmXcGeSUhpmNrJYkd0uAZE6fUkI7zyn9DGRldgoG+6rl 5mHqgRtL8YG6BLpn1NeiAowzTf+164BvFNE= -----END CERTIFICATE-----Generated at Sat Sep 26 12:56:58 2026 by rpki-client