$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa File: 0538e659-a944-3257-be44-736283fffb2a.roa (raw, json) Hash identifier: bf/GrqXidR/TQMPFLT0GNEkWm3CTVV8y+xGcBRBKR10= Subject key identifier: 40:85:E9:D2:DE:9E:77:31:85:40:7A:F5:93:60:1B:FD:18:F8:0E:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4F08305C47E3EC80BE25A200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:30:5c:47:e3:ec:80:be:25:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=0446c6e5-39b0-4cb9-8880-70a054aa67ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:7b:76:b1:d4:6b:5b:4d:60:29:f3:07:03: ac:54:9e:98:a4:d9:85:18:df:e3:f2:ff:dd:53:e2: df:54:f6:f6:d0:af:a2:56:95:8d:bc:8c:b2:2f:3f: 83:19:72:38:88:c7:78:40:5b:55:65:9b:d7:84:b0: fc:0d:72:93:5b:89:d7:51:61:be:1b:5a:35:42:14: 4d:a5:10:e5:b1:8a:03:ae:a4:d8:a2:ce:af:cf:08: 18:4f:26:61:50:d8:e7:b1:36:4d:6a:01:46:df:f7: 1f:ad:e3:dd:19:46:6f:2a:11:31:0b:2a:1e:c9:63: a0:fe:a5:e0:aa:ff:d7:7f:b5:fa:31:cd:77:48:89: 72:fc:62:84:8e:48:6a:bb:31:5b:f4:f4:ca:1d:c0: aa:39:9f:96:59:59:ea:85:e8:25:a0:07:4a:b0:78: b6:2b:d3:21:43:ea:35:39:cb:0a:1f:73:8d:69:da: ab:83:e6:b9:aa:4c:c4:27:1c:5b:37:47:bc:e8:67: 8a:5e:a3:75:1d:19:93:4d:7b:f1:07:7f:b5:34:ea: 4f:c2:77:38:6c:a3:83:53:6a:8b:22:a5:79:af:48: de:a1:0f:7f:13:e4:7d:ab:d6:78:c7:b8:7b:d7:22: 28:62:11:c0:e4:45:f2:2e:44:6d:9f:67:be:61:55: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:E9:D2:DE:9E:77:31:85:40:7A:F5:93:60:1B:FD:18:F8:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0538e659-a944-3257-be44-736283fffb2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ce:cd:1c:fb:20:47:40:ac:a2:5b:00:f5:90:9e:f9:dd:9d: de:08:aa:e2:d8:d4:3d:b7:f8:cc:27:38:84:f0:54:81:82:2a: d4:75:50:34:3d:59:e8:97:ac:ed:a2:49:e4:51:3f:7b:19:e5: b3:d3:ae:b4:ac:47:44:67:e4:07:7d:3d:a2:00:f3:c8:2d:7b: 13:a6:f5:e7:aa:9b:7d:30:94:81:7c:84:01:4f:62:9d:2e:5b: 25:d2:75:0e:fc:4f:33:cc:05:e5:7b:2c:07:25:92:04:f9:df: 84:c3:60:99:68:55:40:ef:42:d1:77:25:ed:62:3b:1e:e6:f9: 2a:1d:07:a8:c8:d8:a9:ce:a1:3b:0f:9c:97:50:bf:dd:6d:eb: 4c:72:a0:ea:9b:04:b9:db:7e:9e:ed:d5:7f:4e:0f:89:f6:06: e4:eb:b4:01:65:b5:8f:be:1c:df:06:98:ab:c9:d3:9a:f0:a0: 28:a9:0d:6b:75:3f:f8:43:62:ee:87:04:fe:23:75:2e:18:e8: f8:3f:05:d6:05:c0:c0:24:23:00:7a:37:0a:02:aa:0f:a4:31: 95:26:07:98:e9:d8:36:04:59:f3:34:c5:0a:02:bb:0b:70:df: 09:57:46:5c:b2:9a:a7:7f:97:9b:a5:cf:f9:7e:76:1a:22:f2: e2:bf:ea:6b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9PCDBcR+PsgL4logAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MDQ0NmM2ZTUtMzliMC00Y2I5LTg4ODAtNzBhMDU0YWE2N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubF7drHUa1tNYCnzBwOsVJ6YpNmFGN/j8v/d U+LfVPb20K+iVpWNvIyyLz+DGXI4iMd4QFtVZZvXhLD8DXKTW4nXUWG+G1o1QhRN pRDlsYoDrqTYos6vzwgYTyZhUNjnsTZNagFG3/cfrePdGUZvKhExCyoeyWOg/qXg qv/Xf7X6Mc13SIly/GKEjkhquzFb9PTKHcCqOZ+WWVnqhegloAdKsHi2K9MhQ+o1 OcsKH3ONadqrg+a5qkzEJxxbN0e86GeKXqN1HRmTTXvxB3+1NOpPwnc4bKODU2qL IqV5r0jeoQ9/E+R9q9Z4x7h71yIoYhHA5EXyLkRtn2e+YVVBtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFECF6dLenncxhUB69ZNgG/0Y+A4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDUzOGU2NTktYTk0NC0z MjU3LWJlNDQtNzM2MjgzZmZmYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgSQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB87NHPsgR0CsolsA9ZCe+d2d3giq4tjUPbf4zCc4hPBUgYIq1HVQ ND1Z6Jes7aJJ5FE/exnls9OutKxHRGfkB309ogDzyC17E6b156qbfTCUgXyEAU9i nS5bJdJ1DvxPM8wF5XssByWSBPnfhMNgmWhVQO9C0Xcl7WI7Hub5Kh0HqMjYqc6h Ow+cl1C/3W3rTHKg6psEudt+nu3Vf04PifYG5Ou0AWW1j74c3waYq8nTmvCgKKkN a3U/+ENi7ocE/iN1Lhjo+D8F1gXAwCQjAHo3CgKqD6QxlSYHmOnYNgRZ8zTFCgK7 C3DfCVdGXLKap3+Xm6XP+X52GiLy4r/qaw== -----END CERTIFICATE-----Generated at Sun Oct 11 21:58:01 2026 by rpki-client