$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa File: 8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa (raw, json) Hash identifier: qZoQZqtbGzcGUAzc536oPg/iwnCAvuJu48lPe5uI7Xs= Subject key identifier: D6:20:B0:88:F8:35:A0:1C:CF:AE:99:79:B2:D4:42:CC:EA:96:6D:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F655D69B3462E420885ED9F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:69:b3:46:2e:42:08:85:ed:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=90aeb247-bf30-4ef5-9ff2-4fee63e64e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:e6:c5:d6:e0:b5:5c:be:a4:dd:62:14:13: 04:1a:59:6e:9d:9c:fb:ef:10:e5:a5:53:8d:cd:81: c3:0d:4e:3a:67:07:e9:92:fd:be:d4:3d:ce:f9:e0: cb:1b:f8:8e:2d:a7:60:ce:6e:ab:d3:20:35:4a:2f: 43:08:6d:1d:62:0c:e7:b9:d1:86:7c:cb:dc:15:3e: 5c:94:35:1c:4d:17:0c:fb:c9:32:d6:26:a3:82:7b: 81:29:51:2b:25:8b:66:47:b9:92:98:e2:17:91:f0: ae:08:ec:ad:31:0e:98:49:3d:25:96:5d:42:37:4a: a4:16:7b:19:09:66:30:2d:8d:82:55:4e:2a:e0:e9: 84:0f:cd:46:2a:e3:76:d0:60:34:b9:be:b2:ee:89: 27:6a:67:7a:05:d0:4a:8b:f7:ef:45:06:5e:60:23: 8d:26:30:20:b9:dc:7e:bd:96:69:d1:4d:75:e6:bc: f0:a1:ba:0b:63:23:a3:9b:bd:65:da:99:cf:24:fa: e6:e0:bb:fe:62:d7:b7:6c:45:72:cd:65:31:2b:2b: 92:25:03:b3:72:53:bf:e6:b0:e9:d3:22:b9:9e:eb: 5f:75:f1:9e:7f:5d:dd:fa:2d:86:68:5d:b9:ea:0a: 08:d2:cd:dc:ed:b7:71:a9:6d:e3:48:6a:5d:1f:88: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:B0:88:F8:35:A0:1C:CF:AE:99:79:B2:D4:42:CC:EA:96:6D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:280::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4c:22:8d:fb:d9:29:4b:38:62:2b:61:f5:4b:8a:5e:71:9f: fa:5e:21:8a:24:ef:26:8f:9c:36:30:84:b4:54:ee:a8:90:80: d0:71:7f:c5:79:b4:fc:3f:2f:a6:26:a7:3b:9d:6c:58:c4:97: 4e:8e:29:9c:de:16:70:9b:3d:3c:c5:78:37:72:cb:0b:12:e2: 9f:b6:f0:f7:be:31:b4:45:f2:16:30:0a:58:3d:89:52:4f:22: 08:3e:c2:8a:1b:75:ae:3d:7d:c3:e6:e6:50:6b:53:92:d8:19: 02:f0:e7:48:bf:05:2f:6e:a1:95:22:01:3e:43:5f:ff:3d:0e: 7f:6c:95:05:5c:54:19:11:ed:58:0d:a2:a1:5a:56:3c:87:86: aa:09:e5:c3:26:e6:c6:c1:3b:62:74:f6:48:e5:86:6e:d8:f3: 03:fe:aa:43:32:de:db:5f:91:e7:6b:1d:36:ef:1a:66:0a:f3: 13:97:cf:fd:6e:b8:bc:05:f9:32:12:e3:0d:b4:b7:72:72:1c: 23:fe:52:9e:c1:f0:ab:86:a4:7a:78:65:75:55:41:02:6b:89: b8:9c:b9:bc:8f:a9:02:05:ea:f0:a7:d8:00:dd:1d:04:4e:f0: 5d:84:0a:a2:f6:9f:e7:13:4d:9a:5e:0b:07:e0:b1:80:37:88: 28:ef:cb:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9lXWmzRi5CCIXtn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OTBhZWIyNDctYmYzMC00ZWY1LTlmZjItNGZlZTYzZTY0ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOHmxdbgtVy+pN1iFBMEGllunZz77xDlpVON zYHDDU46Zwfpkv2+1D3O+eDLG/iOLadgzm6r0yA1Si9DCG0dYgznudGGfMvcFT5c lDUcTRcM+8ky1iajgnuBKVErJYtmR7mSmOIXkfCuCOytMQ6YST0lll1CN0qkFnsZ CWYwLY2CVU4q4OmED81GKuN20GA0ub6y7oknamd6BdBKi/fvRQZeYCONJjAgudx+ vZZp0U115rzwoboLYyOjm71l2pnPJPrm4Lv+Yte3bEVyzWUxKyuSJQOzclO/5rDp 0yK5nutfdfGef13d+i2GaF256goI0s3c7bdxqW3jSGpdH4h1NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYgsIj4NaAcz66ZebLUQszqlm2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNkNDYxMWMtNjJiOC0z YTBiLWFkMDctYzBjNWI5YmJmN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9MIo372SlLOGIrYfVLil5xn/peIYok7yaPnDYwhLRU7qiQgNBx f8V5tPw/L6YmpzudbFjEl06OKZzeFnCbPTzFeDdyywsS4p+28Pe+MbRF8hYwClg9 iVJPIgg+woobda49fcPm5lBrU5LYGQLw50i/BS9uoZUiAT5DX/89Dn9slQVcVBkR 7VgNoqFaVjyHhqoJ5cMm5sbBO2J09kjlhm7Y8wP+qkMy3ttfkedrHTbvGmYK8xOX z/1uuLwF+TIS4w20t3JyHCP+Up7B8KuGpHp4ZXVVQQJribicubyPqQIF6vCn2ADd HQRO8F2ECqL2n+cTTZpeCwfgsYA3iCjvy/8= -----END CERTIFICATE-----Generated at Sun Oct 11 17:17:28 2026 by rpki-client