$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa File: ffa67dac-9013-3d2d-a4f6-1d307d212778.roa (raw, json) Hash identifier: OIB0SrWQ1e4ZHXaI/FhyFGsvILZWLRziysf2AT7s9qU= Subject key identifier: 22:52:B3:A6:B7:2D:DC:D9:C4:12:01:76:38:DA:CC:84:8C:57:E9:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974D3CEE6BE1388D7D9C940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:1700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d3:ce:e6:be:13:88:d7:d9:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a4cbcef-fe8a-48e0-abaf-f0c968a1cc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:72:3d:a8:18:f8:ae:17:e7:8e:14:96:15: c2:fd:97:ac:2f:04:8d:38:01:57:0b:3d:17:6a:42: 1a:44:84:f6:a8:62:6a:02:f1:13:18:36:53:6b:ad: 95:59:33:4a:19:43:54:b1:1e:1f:05:2c:cc:68:bd: bc:3a:a5:06:f0:df:77:5f:16:83:af:43:f6:85:00: 09:38:4d:a0:ea:67:34:36:eb:22:b7:50:87:8b:bd: 3f:56:b1:d7:4a:ce:ca:be:19:16:1c:bc:28:01:66: 34:6c:06:d3:11:a3:d5:81:14:00:f7:8f:e6:19:ec: 95:9c:ed:03:cf:33:a7:a6:8b:a9:16:5a:e4:9b:d6: 92:77:e0:e1:14:31:f5:24:e5:6b:08:15:78:f9:c8: 37:bf:47:6a:a6:2c:19:de:31:bb:a4:9d:27:a6:26: f1:04:d1:26:75:46:bc:52:6d:ad:cc:38:cf:08:dc: 35:f1:c0:ba:5c:0e:39:e2:cc:5a:95:f0:69:d9:08: 2c:9b:f5:c4:6e:97:13:69:bf:fa:75:3d:03:7c:de: 58:a1:6b:2a:a3:e5:db:37:06:d9:60:77:b6:3f:86: 84:d9:fa:53:6e:bb:8e:8e:50:ca:66:2b:af:3c:7c: de:8a:71:ec:20:b5:e4:6f:af:73:94:4d:01:96:e8: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:B3:A6:B7:2D:DC:D9:C4:12:01:76:38:DA:CC:84:8C:57:E9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffa67dac-9013-3d2d-a4f6-1d307d212778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:1700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:44:2c:fe:8d:3b:04:45:6c:67:63:0f:b3:78:7c:11:ca:0b: 2d:8e:20:e0:65:b1:c2:fc:3c:b5:50:3a:1c:96:e9:3d:a8:49: c7:60:ef:b5:2e:c1:1a:26:51:ee:28:98:76:89:5a:d3:3e:77: 00:19:73:ec:87:ea:ea:62:2a:b4:6a:f6:9e:01:3b:18:f0:af: 4c:c3:03:88:0a:10:2b:6d:06:7e:dc:42:da:b1:74:45:dc:a7: 02:a3:c1:2c:14:2f:79:df:59:fb:4a:bb:a4:69:a7:55:8d:ed: e4:4e:cc:5e:fc:03:7a:e5:6f:76:84:9f:ea:10:b0:03:92:73: 6b:2a:29:09:32:28:ad:d2:8c:28:e9:c3:07:88:e9:08:b1:50: cd:4d:3b:10:02:43:43:64:11:30:48:0b:da:5b:6d:7d:65:01: 67:51:2a:f7:da:41:95:c0:c5:7a:b4:3f:f7:59:a2:f9:16:ac: 46:22:c8:8f:93:2c:eb:c8:5d:15:26:f8:b1:88:85:30:6b:3e: a1:76:73:d3:51:da:dd:ae:26:3b:7d:f8:e4:e1:18:f2:54:84: 55:23:68:6b:8b:b0:bf:db:b8:3c:8a:82:3d:1c:c2:32:e4:11: 62:c7:2a:85:ed:df:9b:2b:60:ed:ca:a9:b5:07:ca:f3:e5:5a: 67:33:da:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdNPO5r4TiNfZyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE0Y2JjZWYtZmU4YS00OGUwLWFiYWYtZjBjOTY4YTFjYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlndyPagY+K4X544UlhXC/ZesLwSNOAFXCz0X akIaRIT2qGJqAvETGDZTa62VWTNKGUNUsR4fBSzMaL28OqUG8N93XxaDr0P2hQAJ OE2g6mc0Nusit1CHi70/VrHXSs7KvhkWHLwoAWY0bAbTEaPVgRQA94/mGeyVnO0D zzOnpoupFlrkm9aSd+DhFDH1JOVrCBV4+cg3v0dqpiwZ3jG7pJ0npibxBNEmdUa8 Um2tzDjPCNw18cC6XA454sxalfBp2Qgsm/XEbpcTab/6dT0DfN5YoWsqo+XbNwbZ YHe2P4aE2fpTbruOjlDKZiuvPHzeinHsILXkb69zlE0BluijSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJSs6a3LdzZxBIBdjjazISMV+mdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZhNjdkYWMtOTAxMy0z ZDJkLWE0ZjYtMWQzMDdkMjEyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9ELP6NOwRFbGdjD7N4fBHKCy2OIOBlscL8PLVQOhyW6T2oScdg 77UuwRomUe4omHaJWtM+dwAZc+yH6upiKrRq9p4BOxjwr0zDA4gKECttBn7cQtqx dEXcpwKjwSwUL3nfWftKu6Rpp1WN7eROzF78A3rlb3aEn+oQsAOSc2sqKQkyKK3S jCjpwweI6QixUM1NOxACQ0NkETBIC9pbbX1lAWdRKvfaQZXAxXq0P/dZovkWrEYi yI+TLOvIXRUm+LGIhTBrPqF2c9NR2t2uJjt9+OThGPJUhFUjaGuLsL/buDyKgj0c wjLkEWLHKoXt35srYO3KqbUHyvPlWmcz2gc= -----END CERTIFICATE-----Generated at Sat Sep 26 05:40:27 2026 by rpki-client