$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa File: 67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa (raw, json) Hash identifier: j020gBsVZiflOgwFaaIrEXrfw+p2WqToURJeZv+OOF0= Subject key identifier: C9:E3:78:0F:63:52:FC:B8:32:7F:88:13:AC:FB:55:5F:66:80:E2:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE092BD5D5D049B12DB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:d380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:92:bd:5d:5d:04:9b:12:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f170ac6a-47f3-4b35-b196-a2c709514c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:c6:68:8c:ae:8c:ee:98:df:e5:19:d0:62: d2:c7:85:65:4f:4a:02:0a:6b:54:cd:bd:97:45:80: a6:c9:f1:4f:6f:aa:99:ad:5e:ea:6e:9c:2a:ee:34: e6:07:29:cf:2b:7f:f5:6d:44:66:5d:ea:b0:15:02: 5e:48:3a:3f:a6:f4:33:39:f7:4d:26:1e:8f:e9:ad: 67:4a:00:27:d0:92:e8:4c:36:90:14:9c:e7:17:4f: 24:4c:64:99:03:40:3b:48:df:75:81:b6:c7:38:82: b6:d9:3d:97:0a:8f:ca:13:7d:42:17:0b:2b:42:22: 8c:f1:ef:93:9a:1d:c0:b9:57:30:5c:1b:27:b8:b9: cb:da:ea:00:d5:a1:66:6f:15:7a:bc:f9:8f:4f:42: 0b:a5:1c:03:65:b2:95:8e:67:fd:0c:e5:32:c3:d3: 9d:cd:6a:8f:f3:af:e5:b2:a3:0e:17:b4:8f:50:85: 74:02:5e:d9:90:ce:93:2d:36:71:77:3e:2a:7a:a4: c1:97:24:1d:08:4e:a7:79:41:eb:a0:13:7f:a3:a4: ee:64:cb:f4:5c:bb:d5:70:20:53:e4:d3:2c:81:68: 42:06:1a:17:f1:4e:90:97:01:76:a3:7c:0d:f4:58: 17:17:43:a6:47:0a:66:64:d0:fa:db:e9:38:c5:c5: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E3:78:0F:63:52:FC:B8:32:7F:88:13:AC:FB:55:5F:66:80:E2:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67cf753e-4d7f-3e3c-acb0-0a6a347b4e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:d380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9b:58:c6:93:57:c3:bc:0e:c8:30:e4:2f:9b:54:d0:4e:a4: 4d:c7:65:a3:a6:af:8a:ea:f4:c5:7f:99:be:6b:be:bc:59:d9: 7b:25:4e:1a:ac:3e:36:a7:94:cd:ab:45:e3:9e:5d:05:96:3c: dc:a2:12:c2:aa:85:dd:02:8c:ee:17:bc:64:7a:0c:7c:47:b9: c8:45:08:29:b9:3a:17:74:d2:80:6b:a6:b2:75:87:e1:dc:95: c1:73:cd:27:fb:e4:39:fc:63:16:f0:a0:a4:32:13:74:4c:61: c7:5c:7d:b6:6e:91:8c:a9:5c:b0:6e:8c:24:2c:93:b2:93:c8: e5:43:99:de:4c:1f:e4:1e:53:6e:ce:79:a6:b9:97:31:96:e4: 65:74:8d:0b:a3:47:c5:dc:c1:3a:2c:6b:1f:ef:41:1c:32:d4: f1:1f:e1:bd:47:dc:d2:ae:08:b6:32:4f:2a:89:69:34:bd:22: e1:6c:6e:15:77:6f:5c:0b:ad:da:0f:48:16:86:15:2e:2c:c6: 3a:ed:28:43:88:e5:a7:8a:fa:cc:cd:a2:71:7e:ef:e4:2f:6b: c3:7d:d8:46:08:74:bb:d0:58:72:4b:c6:47:6d:b2:40:0c:83: bf:c3:03:79:e3:09:74:c3:cb:bb:b6:d9:70:7d:a0:ca:b7:62: 2f:6f:96:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPeCSvV1dBJsS2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjE3MGFjNmEtNDdmMy00YjM1LWIxOTYtYTJjNzA5NTE0YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQPGaIyujO6Y3+UZ0GLSx4VlT0oCCmtUzb2X RYCmyfFPb6qZrV7qbpwq7jTmBynPK3/1bURmXeqwFQJeSDo/pvQzOfdNJh6P6a1n SgAn0JLoTDaQFJznF08kTGSZA0A7SN91gbbHOIK22T2XCo/KE31CFwsrQiKM8e+T mh3AuVcwXBsnuLnL2uoA1aFmbxV6vPmPT0ILpRwDZbKVjmf9DOUyw9OdzWqP86/l sqMOF7SPUIV0Al7ZkM6TLTZxdz4qeqTBlyQdCE6neUHroBN/o6TuZMv0XLvVcCBT 5NMsgWhCBhoX8U6QlwF2o3wN9FgXF0OmRwpmZND62+k4xcV7sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnjeA9jUvy4Mn+IE6z7VV9mgOJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdjZjc1M2UtNGQ3Zi0z ZTNjLWFjYjAtMGE2YTM0N2I0ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgNOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADubWMaTV8O8Dsgw5C+bVNBOpE3HZaOmr4rq9MV/mb5rvrxZ2Xsl ThqsPjanlM2rReOeXQWWPNyiEsKqhd0CjO4XvGR6DHxHuchFCCm5Ohd00oBrprJ1 h+HclcFzzSf75Dn8YxbwoKQyE3RMYcdcfbZukYypXLBujCQsk7KTyOVDmd5MH+Qe U27Oeaa5lzGW5GV0jQujR8XcwTosax/vQRwy1PEf4b1H3NKuCLYyTyqJaTS9IuFs bhV3b1wLrdoPSBaGFS4sxjrtKEOI5aeK+szNonF+7+Qva8N92EYIdLvQWHJLxkdt skAMg7/DA3njCXTDy7u22XB9oMq3Yi9vlrA= -----END CERTIFICATE-----Generated at Tue Oct 13 12:54:22 2026 by rpki-client