$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa File: 410b7467-8dc1-343d-be62-6eca5954139a.roa (raw, json) Hash identifier: 4IEqaEOCkPY2RO9YRZKFRDisa2Vg9porA1yCJgslAfE= Subject key identifier: 4B:A8:25:E8:1B:EF:51:22:30:1B:14:53:F9:DE:7E:90:A6:BD:07:8F Certificate issuer: /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Certificate serial: 010D0C9F4328584F2EED17BCCEA773FD06BFDA00 Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 399494 IP address blocks: 2604:3b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:17:bc:ce:a7:73:fd:06:bf:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=28c427d1-d2c1-4dde-9195-06aa9df26021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:a9:d9:a5:7c:8c:c5:46:55:92:ec:a8:f8: f6:03:87:17:e0:30:96:51:fe:84:be:79:49:40:ff: 6f:6f:4a:5c:f9:32:af:fe:6a:ad:ed:fe:f1:35:f9: 49:fe:be:ea:47:6f:f6:87:6d:29:49:53:88:25:82: 79:55:56:a7:f4:41:9d:b2:cd:3b:d6:5a:37:c7:3c: 51:1c:c3:99:2b:48:f4:70:a1:dc:94:91:14:43:4d: ec:9f:b1:46:fa:b3:9f:20:6b:fd:7d:61:1d:bb:fa: 14:38:27:b1:66:19:01:d3:33:e0:43:0b:38:99:ad: 6f:9d:99:29:57:c8:b1:77:e0:64:99:12:61:e4:60: e9:c0:73:36:38:42:c7:e2:55:20:82:0f:9b:d2:95: c3:0c:04:63:58:9f:b5:ca:ca:17:33:ea:ff:93:93: 3d:8e:2f:8c:a1:d2:37:b3:0c:77:0f:5e:68:4c:7f: f9:fd:17:2c:57:10:d6:7c:78:bf:b2:1a:d3:dd:fd: 5d:6e:82:64:6e:00:13:2a:67:50:91:58:cd:b9:57: 1d:17:78:6a:17:e0:8a:4d:b8:57:f5:05:f6:f6:86: f1:68:15:d6:d1:4d:b2:35:cc:4d:f3:0c:f3:65:c7: 6f:e3:41:8b:03:07:51:60:cd:f1:e6:6e:76:f5:09: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A8:25:E8:1B:EF:51:22:30:1B:14:53:F9:DE:7E:90:A6:BD:07:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/410b7467-8dc1-343d-be62-6eca5954139a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl X509v3 Authority Key Identifier: keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer sbgp-ipAddrBlock: critical IPv6: 2604:3b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e1:eb:6e:4b:ee:cf:c1:bb:87:50:03:c9:30:82:21:20:e9: 99:eb:93:cf:a3:15:94:ac:50:e2:75:cc:43:ca:b3:39:6b:96: 49:25:fe:5a:d1:b6:e5:ca:32:da:50:86:d9:ee:98:cb:c1:a2: ce:67:10:1b:5d:36:4b:52:5d:79:86:34:66:c0:a1:cb:1d:94: bb:ce:29:5d:e3:8a:0a:1c:86:64:d4:43:b9:06:5c:f6:88:84: c0:3c:ce:bc:63:2d:f4:e9:ce:81:55:a4:3c:00:8f:b9:c6:77: 33:6e:b8:eb:f6:bc:09:8e:18:eb:20:37:f6:c0:b6:49:d8:a9: 7d:5c:76:e9:c6:e7:45:ea:d7:06:e3:45:08:da:a2:4f:d0:59: 89:76:bd:1f:9d:1b:5e:dc:0d:7f:5a:c2:83:0b:fa:be:1d:f5: 90:2f:28:a9:3e:8a:74:3d:46:1d:31:25:5b:7b:21:02:3f:27: 81:d2:41:8d:30:cf:38:6b:14:00:3d:59:de:a8:e7:25:73:ce: f6:0e:9d:a2:1f:e3:98:ed:f4:47:fe:17:10:54:1c:3d:f0:b8: c7:40:be:ed:70:9f:f5:3e:9f:83:1b:aa:98:73:ed:2b:ff:71: 50:12:d4:dd:62:a8:31:e8:38:34:23:6c:b8:4b:91:77:0f:44: c3:74:1d:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7Re8zqdz/Qa/2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNmYjM4OTctZmQxNC00OGVlLWFkODQtODEyYzQwOGNm NDZlMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MjhjNDI3ZDEtZDJjMS00ZGRlLTkxOTUtMDZhYTlkZjI2MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo2p2aV8jMVGVZLsqPj2A4cX4DCWUf6EvnlJ QP9vb0pc+TKv/mqt7f7xNflJ/r7qR2/2h20pSVOIJYJ5VVan9EGdss071lo3xzxR HMOZK0j0cKHclJEUQ03sn7FG+rOfIGv9fWEdu/oUOCexZhkB0zPgQws4ma1vnZkp V8ixd+BkmRJh5GDpwHM2OELH4lUggg+b0pXDDARjWJ+1ysoXM+r/k5M9ji+ModI3 swx3D15oTH/5/RcsVxDWfHi/shrT3f1dboJkbgATKmdQkVjNuVcdF3hqF+CKTbhX 9QX29obxaBXW0U2yNcxN8wzzZcdv40GLAwdRYM3x5m529QmwIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEuoJegb71EiMBsUU/nefpCmvQePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Zi Mzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJjNDA4Y2Y0NmUvNDEwYjc0NjctOGRjMS0z NDNkLWJlNjItNmVjYTU5NTQxMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNmYjM4OTctZmQxNC00OGVlLWFk ODQtODEyYzQwOGNmNDZlL2MzZmIzODk3LWZkMTQtNDhlZS1hZDg0LTgxMmM0MDhj ZjQ2ZS5jcmwwHwYDVR0jBBgwFoAUgZwK5yjcYjVE9BCFuNcSWRpX3fYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2ZiMzg5Ny1mZDE0LTQ4ZWUtYWQ4NC04MTJj NDA4Y2Y0NmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQ7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq4etuS+7PwbuHUAPJMIIhIOmZ65PPoxWUrFDidcxDyrM5a5ZJJf5a 0bblyjLaUIbZ7pjLwaLOZxAbXTZLUl15hjRmwKHLHZS7zild44oKHIZk1EO5Blz2 iITAPM68Yy306c6BVaQ8AI+5xnczbrjr9rwJjhjrIDf2wLZJ2Kl9XHbpxudF6tcG 40UI2qJP0FmJdr0fnRte3A1/WsKDC/q+HfWQLyipPop0PUYdMSVbeyECPyeB0kGN MM84axQAPVneqOclc872Dp2iH+OY7fRH/hcQVBw98LjHQL7tcJ/1Pp+DG6qYc+0r /3FQEtTdYqgx6Dg0I2y4S5F3D0TDdB0S -----END CERTIFICATE-----Generated at Sat Oct 10 11:28:51 2026 by rpki-client