$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa File: db37c17f-050f-342f-aee5-a6889e623c6b.roa (raw, json) Hash identifier: I6qMYQdIbQYLQHEbNXEF6UupbvN+K6p0weoTZt7/JLE= Subject key identifier: 97:52:71:5F:BC:07:CC:4A:BD:AA:CE:4B:B4:6D:F3:22:9A:6E:93:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974FB3CDCA3B00C5997C700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:db80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:fb:3c:dc:a3:b0:0c:59:97:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32e1c7ed-11ca-4d9d-8b04-2717dc3a1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:ec:fb:8c:c5:a7:8a:e1:e7:ea:89:9c:50: c9:e3:f7:3b:d2:c6:ad:be:ef:fc:5a:c7:17:87:26: e5:88:ac:4e:56:f0:38:26:63:5d:08:78:be:93:e4: 84:46:ab:48:ad:eb:15:93:bf:a1:c2:7a:a2:bd:e7: 23:99:a2:17:ad:f8:11:3a:6c:72:56:0f:8c:be:a4: 6a:a4:b9:44:86:18:59:f0:16:c0:7c:27:ae:e2:c4: 60:69:e5:e1:1b:10:66:83:6c:0a:60:cc:12:fe:91: 7c:b3:db:2e:d9:bc:f5:10:62:d8:46:a5:d1:d7:17: b0:ce:ba:8f:c0:65:0c:e5:fd:89:95:96:0b:c1:e0: 30:9a:99:6f:47:cd:1f:5d:1e:af:90:81:d4:c9:f1: 90:bd:6d:88:2f:ea:e8:43:ea:1e:74:4b:bd:37:38: 1a:28:ad:cb:35:c0:0b:df:f7:77:92:38:bf:d1:01: f9:b4:09:3e:1c:6c:28:19:bd:88:b6:2e:8f:55:79: 53:00:30:27:03:3e:4f:33:94:b2:5a:53:7b:dd:1d: 9f:9e:ab:27:e3:99:15:05:71:b4:4a:0e:41:32:b3: 87:7f:8e:96:0a:1e:a0:b7:33:80:e4:27:25:09:99: 55:6d:9f:6a:29:43:25:25:7f:0f:eb:b4:db:54:82: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:71:5F:BC:07:CC:4A:BD:AA:CE:4B:B4:6D:F3:22:9A:6E:93:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db37c17f-050f-342f-aee5-a6889e623c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:db80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cd:c1:a5:15:bd:a9:3b:97:f7:7a:17:88:dd:81:e5:6e:49: 07:08:c6:df:5f:a3:bf:e5:5f:69:f1:d6:76:fa:d1:aa:2e:65: 40:2a:e5:c9:78:a6:cb:67:21:22:8e:b8:1f:df:bf:76:94:77: 29:5d:06:b5:d0:51:5c:f9:30:03:5f:a1:2a:cf:4b:42:32:c5: da:40:09:58:f5:2e:cf:bd:bf:01:ae:ef:8c:c2:f5:f3:1b:a4: ae:19:12:d8:e6:1b:55:f7:9d:c1:4b:7c:c4:30:f4:2a:0f:86: ce:ba:f8:b9:d4:89:7d:82:f3:f4:f9:f7:16:78:c9:92:5b:c1: 9c:a2:38:bc:43:c2:1a:cd:1f:c3:ac:e5:59:a2:9a:f8:3d:f4: 1a:a6:71:8c:e0:e2:3d:54:a7:92:6f:f7:ca:0c:6c:99:12:55: cb:05:74:94:e0:cb:54:ad:eb:ad:04:00:d0:51:2c:c3:8b:d1: ad:a4:ff:14:ec:e6:c3:98:ea:ba:e2:da:f5:0d:00:8b:a8:f0: 32:de:9c:14:cf:8d:fb:82:85:db:1d:d4:67:c7:47:54:83:0f: 18:ef:99:3d:0f:e4:8f:11:ed:e6:71:95:da:fd:40:de:c9:ed: 28:be:53:60:70:1c:ae:a3:b8:27:15:c2:c8:2a:87:58:08:a5: c7:aa:84:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdPs83KOwDFmXxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJlMWM3ZWQtMTFjYS00ZDlkLThiMDQtMjcxN2RjM2ExNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIHs+4zFp4rh5+qJnFDJ4/c70satvu/8WscX hybliKxOVvA4JmNdCHi+k+SERqtIresVk7+hwnqivecjmaIXrfgROmxyVg+MvqRq pLlEhhhZ8BbAfCeu4sRgaeXhGxBmg2wKYMwS/pF8s9su2bz1EGLYRqXR1xewzrqP wGUM5f2JlZYLweAwmplvR80fXR6vkIHUyfGQvW2IL+roQ+oedEu9NzgaKK3LNcAL 3/d3kji/0QH5tAk+HGwoGb2Iti6PVXlTADAnAz5PM5SyWlN73R2fnqsn45kVBXG0 Sg5BMrOHf46WCh6gtzOA5CclCZlVbZ9qKUMlJX8P67TbVIIxyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdScV+8B8xKvarOS7Rt8yKabpNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIzN2MxN2YtMDUwZi0z NDJmLWFlZTUtYTY4ODllNjIzYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfNwaUVvak7l/d6F4jdgeVuSQcIxt9fo7/lX2nx1nb60aouZUAq 5cl4pstnISKOuB/fv3aUdyldBrXQUVz5MANfoSrPS0IyxdpACVj1Ls+9vwGu74zC 9fMbpK4ZEtjmG1X3ncFLfMQw9CoPhs66+LnUiX2C8/T59xZ4yZJbwZyiOLxDwhrN H8Os5Vmimvg99BqmcYzg4j1Up5Jv98oMbJkSVcsFdJTgy1St660EANBRLMOL0a2k /xTs5sOY6rri2vUNAIuo8DLenBTPjfuChdsd1GfHR1SDDxjvmT0P5I8R7eZxldr9 QN7J7Si+U2BwHK6juCcVwsgqh1gIpceqhB0= -----END CERTIFICATE-----Generated at Sat Sep 26 18:13:38 2026 by rpki-client