$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa File: d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa (raw, json) Hash identifier: qnP1F3gtyOAwFSmA0Ge4SBb/7m6q0LKHkf+hjel/bRE= Subject key identifier: D8:6D:9E:55:83:C2:8F:AE:65:4E:E6:1D:3C:65:2F:40:9F:07:92:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497331C975C71DC915F02680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:b200::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:31:c9:75:c7:1d:c9:15:f0:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=665ad799-dd73-41ea-b595-66cd0deac3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:38:bc:ff:16:45:b9:c0:32:6d:ca:b2:29: a5:d0:67:7b:7a:5a:6b:61:b5:16:b9:b4:ed:c5:a3: 06:42:d6:43:cc:65:57:7b:60:c0:8d:a6:04:fc:d4: 74:49:69:33:15:c9:e8:c6:77:94:96:b0:2d:1c:47: 1c:47:34:6c:99:43:41:08:2f:10:1f:35:04:c6:54: d5:cc:cd:9b:70:90:9f:e8:9c:a9:a4:97:d7:95:54: 12:b1:2d:a6:68:d1:9d:ce:ac:a7:be:55:86:88:d7: 36:9c:14:0a:f5:b6:83:e9:04:18:c1:01:1d:ef:6d: 43:97:35:9d:4a:2d:20:5f:5c:9d:8a:cf:4e:4f:a8: 98:0c:45:ba:a3:a0:9c:6c:50:69:19:3d:15:f3:ce: ef:38:bd:f5:c4:53:a8:73:81:fd:77:f1:57:81:94: d0:c7:f2:15:28:08:8c:64:2e:17:dc:22:8c:1f:6f: 20:6a:6a:d9:4c:ef:9d:22:28:55:82:0b:0e:38:60: 81:ee:80:e1:96:1f:b9:ef:2e:2a:7e:e7:e5:0a:fb: 11:30:cb:36:80:72:3b:83:5f:d8:e4:6d:56:79:b1: a7:73:20:8c:fd:b7:aa:19:3d:87:5a:ff:3b:a6:f0: 7b:62:c7:bd:db:0b:45:95:c5:da:c4:55:1e:82:23: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6D:9E:55:83:C2:8F:AE:65:4E:E6:1D:3C:65:2F:40:9F:07:92:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d32a0c8a-88ad-35b9-9bbf-eb4588d06e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:b200::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4d:71:e3:13:7d:3b:d7:50:65:7e:a8:e3:6e:d2:c3:78:c4: e5:04:d0:16:80:15:dd:e0:9a:f0:09:4e:e7:aa:b3:93:8d:4f: e3:21:dd:61:fd:0c:26:25:e9:3b:6d:b7:23:52:ea:01:fa:c2: 52:f0:18:4f:0c:d7:ae:df:f0:7e:2c:48:55:0b:27:bc:16:fa: 9e:e4:d0:14:19:41:57:5e:35:a6:f0:88:4e:26:49:c6:56:18: b4:9d:ac:1b:d1:fa:f2:38:98:66:75:67:cc:67:03:9a:5f:26: 25:48:86:97:87:b5:cd:31:49:eb:d7:33:eb:55:91:90:61:45: 2a:31:a6:3f:ca:42:1f:b9:a6:96:79:1a:81:bd:49:0a:0d:d6: f7:b2:1b:0d:6f:1e:2a:26:45:66:d2:6f:6e:08:1b:26:94:bc: 0b:97:0f:97:12:4d:da:4d:11:b5:fb:64:c0:50:02:58:f9:2f: 8d:7b:97:c7:9c:c6:ae:a4:f1:26:12:bc:fe:06:27:45:e6:fe: a4:51:63:52:56:de:8f:0f:57:99:ab:b4:8b:61:fc:bd:db:61: 60:af:e2:00:17:a9:89:64:1b:b4:5e:d4:dc:b3:c6:86:e4:5e: 76:db:96:7c:a5:53:15:c8:31:3b:37:55:76:2b:c1:6b:e5:62: e0:ff:73:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JczHJdccdyRXwJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY1YWQ3OTktZGQ3My00MWVhLWI1OTUtNjZjZDBkZWFjM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1M4vP8WRbnAMm3Ksiml0Gd7elprYbUWubTt xaMGQtZDzGVXe2DAjaYE/NR0SWkzFcnoxneUlrAtHEccRzRsmUNBCC8QHzUExlTV zM2bcJCf6JyppJfXlVQSsS2maNGdzqynvlWGiNc2nBQK9baD6QQYwQEd721DlzWd Si0gX1ydis9OT6iYDEW6o6CcbFBpGT0V887vOL31xFOoc4H9d/FXgZTQx/IVKAiM ZC4X3CKMH28gamrZTO+dIihVggsOOGCB7oDhlh+57y4qfuflCvsRMMs2gHI7g1/Y 5G1WebGncyCM/beqGT2HWv87pvB7Yse92wtFlcXaxFUegiN59QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhtnlWDwo+uZU7mHTxlL0CfB5LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDMyYTBjOGEtODhhZC0z NWI5LTliYmYtZWI0NTg4ZDA2ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhNceMTfTvXUGV+qONu0sN4xOUE0BaAFd3gmvAJTueqs5ONT+Mh 3WH9DCYl6TtttyNS6gH6wlLwGE8M167f8H4sSFULJ7wW+p7k0BQZQVdeNabwiE4m ScZWGLSdrBvR+vI4mGZ1Z8xnA5pfJiVIhpeHtc0xSevXM+tVkZBhRSoxpj/KQh+5 ppZ5GoG9SQoN1veyGw1vHiomRWbSb24IGyaUvAuXD5cSTdpNEbX7ZMBQAlj5L417 l8ecxq6k8SYSvP4GJ0Xm/qRRY1JW3o8PV5mrtIth/L3bYWCv4gAXqYlkG7Re1Nyz xobkXnbblnylUxXIMTs3VXYrwWvlYuD/cyQ= -----END CERTIFICATE-----Generated at Sat Sep 26 00:01:53 2026 by rpki-client