$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa File: 4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa (raw, json) Hash identifier: DWki/zvXBiDpEQ3fxqIbZ7LJvEpcJ1z4rJpgDPFz8zc= Subject key identifier: 48:68:0E:6F:B0:9B:18:15:A9:9C:B4:24:F1:B9:83:CB:D1:33:2F:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE6E9C2B4C683ED22C6A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:9900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e6:e9:c2:b4:c6:83:ed:22:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=04176e15-4102-497f-98fc-c3e45850300d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:80:63:df:ef:50:02:34:14:16:04:0b:b5: 6d:a2:72:67:f9:78:be:08:52:25:d9:c7:60:d0:5c: 43:4c:39:66:8f:74:2a:84:ed:83:84:c7:a2:d0:15: 72:9b:75:2c:89:da:aa:0d:ae:4e:44:aa:41:51:28: 25:d4:3f:69:bb:c8:20:9b:cb:e2:76:0c:7f:bf:7b: b2:4a:24:e1:dc:81:92:f5:05:06:5c:f2:70:bf:8f: e8:78:29:1c:40:58:26:c1:ca:14:87:8b:ec:5e:33: 43:96:de:5b:55:42:3c:58:9d:9d:42:5d:ec:24:bd: 75:4b:7b:0e:aa:2a:c4:80:4b:56:82:29:11:02:ac: f9:05:94:ef:1a:73:f3:9f:ed:13:be:d5:a7:bc:44: 44:da:23:a6:ef:61:76:c1:6e:be:cb:2a:fb:08:c2: 7d:83:fa:10:e8:a8:27:27:a7:e1:f0:da:e1:5a:15: 41:e4:69:11:2f:4e:ae:78:56:f8:a0:98:c6:eb:d9: 4e:6a:60:c1:c9:f0:d8:ef:ff:b4:7c:9f:e6:c8:8c: b7:de:8e:57:dd:2b:6b:11:8a:dd:14:30:fa:c4:93: bd:fb:1e:62:80:b5:32:19:b7:71:78:cd:19:fa:99: 87:22:28:b4:71:a8:fc:98:2d:fa:e7:f7:c0:c5:5d: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:68:0E:6F:B0:9B:18:15:A9:9C:B4:24:F1:B9:83:CB:D1:33:2F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4e85c1b3-cc18-3afd-9b2f-67b937490c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:72:f6:56:4a:21:cf:42:bb:02:09:47:6b:4f:dd:27:3a:2e: 4b:2b:0a:8e:39:c4:cc:81:99:66:be:58:d2:47:9e:fd:9e:bd: f8:8f:d7:87:66:fe:53:28:a3:be:b7:08:18:a5:da:51:16:71: bf:7f:ca:3a:d9:14:dc:be:03:a4:3f:38:f7:77:60:93:9b:cb: 2f:5f:86:6a:b3:19:49:fc:0b:e3:f1:1e:18:d3:63:72:9b:50: 14:df:9a:3f:cb:fb:61:09:ab:1c:91:d2:fa:50:0e:25:91:b3: 21:f7:eb:7d:57:f5:9d:63:72:37:87:ca:f1:5c:0b:44:3c:dc: b1:26:43:27:af:0d:ba:01:c2:b5:c1:1a:d2:35:ab:0b:be:14: 58:b4:39:2b:ce:bb:52:a4:ce:01:52:f4:25:a1:e4:93:51:ff: 10:fb:82:29:cb:99:b3:7f:c6:54:0d:94:3e:1b:2c:4b:3a:53: 00:72:8f:81:25:19:ee:6c:9b:77:83:9b:cc:e6:b8:ee:0b:f9: 9d:92:f4:53:d8:22:3c:58:65:6c:9b:4a:21:a9:0d:a6:df:b7: 2d:7f:74:f6:9d:0f:02:73:6a:2b:d7:eb:f5:bb:a3:07:33:cf: b6:a7:db:ef:4c:78:fc:38:5a:5e:fb:16:b0:e7:dc:8f:77:b7: c7:bc:90:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPebpwrTGg+0ixqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDQxNzZlMTUtNDEwMi00OTdmLTk4ZmMtYzNlNDU4NTAzMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vOAY9/vUAI0FBYEC7VtonJn+Xi+CFIl2cdg 0FxDTDlmj3QqhO2DhMei0BVym3UsidqqDa5ORKpBUSgl1D9pu8ggm8vidgx/v3uy SiTh3IGS9QUGXPJwv4/oeCkcQFgmwcoUh4vsXjNDlt5bVUI8WJ2dQl3sJL11S3sO qirEgEtWgikRAqz5BZTvGnPzn+0TvtWnvERE2iOm72F2wW6+yyr7CMJ9g/oQ6Kgn J6fh8NrhWhVB5GkRL06ueFb4oJjG69lOamDByfDY7/+0fJ/myIy33o5X3StrEYrd FDD6xJO9+x5igLUyGbdxeM0Z+pmHIii0caj8mC365/fAxV3xiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEhoDm+wmxgVqZy0JPG5g8vRMy8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGU4NWMxYjMtY2MxOC0z YWZkLTliMmYtNjdiOTM3NDkwYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxy9lZKIc9CuwIJR2tP3Sc6LksrCo45xMyBmWa+WNJHnv2evfiP 14dm/lMoo763CBil2lEWcb9/yjrZFNy+A6Q/OPd3YJObyy9fhmqzGUn8C+PxHhjT Y3KbUBTfmj/L+2EJqxyR0vpQDiWRsyH3631X9Z1jcjeHyvFcC0Q83LEmQyevDboB wrXBGtI1qwu+FFi0OSvOu1KkzgFS9CWh5JNR/xD7ginLmbN/xlQNlD4bLEs6UwBy j4ElGe5sm3eDm8zmuO4L+Z2S9FPYIjxYZWybSiGpDabfty1/dPadDwJzaivX6/W7 owczz7an2+9MePw4Wl77FrDn3I93t8e8kMg= -----END CERTIFICATE-----Generated at Sun Oct 11 17:12:56 2026 by rpki-client