$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/536f874b-ead1-31dc-93e2-4b4cf25c3ea2.roa File: 536f874b-ead1-31dc-93e2-4b4cf25c3ea2.roa (raw, json) Hash identifier: ZNfuABOCzQ1rzH8fp5dVr8ZIf0DpY8RXaE42DUsIn1s= Subject key identifier: A1:EC:D1:98:A4:1B:2E:A4:50:E6:DF:36:DC:DD:2B:03:3B:81:36:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497490086ABE2DFD722AC400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/536f874b-ead1-31dc-93e2-4b4cf25c3ea2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:7c80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:90:08:6a:be:2d:fd:72:2a:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c68eddb8-2471-41f5-a680-e451b8caa290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:97:0f:14:a5:fc:0c:f6:4f:fc:6c:f4:62: 7f:01:1d:50:08:4f:27:0f:bd:56:f1:1e:6a:95:85: 14:1c:e1:d7:ec:14:35:e1:af:ca:a7:b8:cc:a7:95: 3d:ad:a1:1d:86:34:d4:5f:05:63:e3:e6:4a:45:ac: 26:8e:23:71:98:d7:64:dc:1f:72:21:58:de:8c:dc: 77:12:6c:d9:ed:13:b9:26:2a:15:aa:24:49:11:6a: 53:ba:cb:08:48:59:33:3d:8e:94:06:ad:92:59:a9: 56:f5:92:0d:19:7a:04:8f:ab:aa:e0:c6:52:e6:54: ed:ee:d0:f3:5a:8e:55:bb:43:f3:63:53:52:bd:1c: 22:63:ac:ea:9d:cf:3e:b7:f4:a1:9d:ee:27:3a:af: 6a:12:c1:79:16:da:2e:6b:34:9e:ff:bb:f3:e6:5f: ae:f1:cf:83:01:59:8e:54:5a:d6:3f:14:56:ae:4c: a3:74:d5:74:f9:cc:7e:36:94:ef:68:48:48:93:e6: 66:11:3e:93:24:b7:83:57:16:b2:02:cf:6f:72:04: 47:bb:d1:53:b8:6c:5e:77:f0:84:26:24:c9:d4:a8: c9:29:11:5f:04:be:ab:e8:65:1c:d6:37:f7:db:6a: c9:04:cf:6e:17:ee:b2:7b:ea:50:01:3b:9a:c9:df: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:D1:98:A4:1B:2E:A4:50:E6:DF:36:DC:DD:2B:03:3B:81:36:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/536f874b-ead1-31dc-93e2-4b4cf25c3ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:7c80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:34:77:9a:cc:0a:cb:39:ee:5f:88:6b:84:ee:08:a4:b3:a5: b4:b1:1a:60:0d:65:76:7b:ce:6f:ed:bf:93:ce:ec:77:48:c5: 3b:2e:2e:39:55:6d:1d:3e:57:4c:7b:ae:e7:1c:dd:7b:e5:2d: 43:94:ea:9c:c4:5d:fc:b9:48:20:53:ae:96:a2:b4:6b:ea:72: 4a:f5:32:09:3b:89:c1:b0:88:64:01:ca:92:23:26:50:a0:0d: a7:c6:58:bb:8e:94:cb:0b:83:21:2b:15:0a:8d:af:f7:d4:7b: ff:e9:97:b6:f6:fc:38:2d:86:1d:14:e7:df:1e:f4:3b:fc:74: 45:8d:03:ee:29:9e:2f:4a:c9:ac:67:19:20:ce:08:13:3f:d2: ef:b7:cf:e1:c7:25:dc:60:c3:90:80:42:fa:f8:9e:1c:94:d2: df:3e:b8:6e:d3:76:c7:27:f2:4b:ea:41:bc:f0:36:d5:be:c7: f4:df:83:e6:42:21:ce:51:d2:33:48:d6:8a:23:23:cb:41:46: 9b:98:a0:c3:fd:be:55:9e:ba:41:64:b8:9b:2c:91:22:fc:68: 11:e2:a0:e6:7d:c2:68:79:0e:dc:0e:7b:cc:83:69:c9:d6:26: a0:07:94:e4:f0:df:98:b6:f2:f2:f6:3e:fc:b7:db:0f:21:03: 13:70:74:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdJAIar4t/XIqxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY4ZWRkYjgtMjQ3MS00MWY1LWE2ODAtZTQ1MWI4Y2FhMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEKXDxSl/Az2T/xs9GJ/AR1QCE8nD71W8R5q lYUUHOHX7BQ14a/Kp7jMp5U9raEdhjTUXwVj4+ZKRawmjiNxmNdk3B9yIVjejNx3 EmzZ7RO5JioVqiRJEWpTussISFkzPY6UBq2SWalW9ZINGXoEj6uq4MZS5lTt7tDz Wo5Vu0PzY1NSvRwiY6zqnc8+t/Shne4nOq9qEsF5FtouazSe/7vz5l+u8c+DAVmO VFrWPxRWrkyjdNV0+cx+NpTvaEhIk+ZmET6TJLeDVxayAs9vcgRHu9FTuGxed/CE JiTJ1KjJKRFfBL6r6GUc1jf322rJBM9uF+6ye+pQATuayd9glQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHs0ZikGy6kUObfNtzdKwM7gTZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTM2Zjg3NGItZWFkMS0z MWRjLTkzZTItNGI0Y2YyNWMzZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgHyA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACo0d5rMCss57l+Ia4TuCKSzpbSxGmANZXZ7zm/tv5PO7HdIxTsu LjlVbR0+V0x7rucc3XvlLUOU6pzEXfy5SCBTrpaitGvqckr1Mgk7icGwiGQBypIj JlCgDafGWLuOlMsLgyErFQqNr/fUe//pl7b2/Dgthh0U598e9Dv8dEWNA+4pni9K yaxnGSDOCBM/0u+3z+HHJdxgw5CAQvr4nhyU0t8+uG7Tdscn8kvqQbzwNtW+x/Tf g+ZCIc5R0jNI1oojI8tBRpuYoMP9vlWeukFkuJsskSL8aBHioOZ9wmh5DtwOe8yD acnWJqAHlOTw35i28vL2Pvy32w8hAxNwdC0= -----END CERTIFICATE-----Generated at Sun Oct 11 17:15:07 2026 by rpki-client