$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa File: 96855132-a9dc-371f-b2ce-9585609d73cf.roa (raw, json) Hash identifier: 3LjqUh6NbsSDpK6YTRvqYtwe7yrdZoVyCs3YCy7CnoU= Subject key identifier: 71:4F:D1:37:23:14:83:FE:E3:61:05:72:C4:21:FB:4A:07:2F:5C:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D502882C9C824EA241780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d80:de00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:50:28:82:c9:c8:24:ea:24:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dd2b784d-6281-46cf-8b4c-f4f1f1992691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:e5:f6:2f:ba:7d:5e:bb:e3:b9:27:f8:ae: 61:19:36:f7:8f:df:21:e7:9d:f1:5d:c6:2f:1d:a5: 37:7d:bf:22:98:8b:ae:cf:17:dc:fd:8f:17:81:b3: c9:21:9a:fe:78:15:84:6c:bc:06:b4:9c:ac:e9:f6: b5:23:e1:c9:e4:c1:97:08:82:b6:7e:5c:1e:43:7d: 49:a7:cb:a0:93:5a:69:50:d3:95:b2:df:a5:b6:08: 17:cc:b6:bc:af:c8:d2:f1:4f:2b:3d:e8:5c:9b:7e: df:7f:10:1d:5c:ac:3e:6f:e7:63:73:58:08:09:e8: 96:45:c9:6d:b6:35:b2:56:33:22:a0:e1:8f:f2:35: ce:72:32:d3:97:09:ae:ef:a0:32:d6:d8:ee:b3:6e: ce:72:09:75:d2:05:9a:ba:8f:9d:e5:ab:a3:e4:b2: 62:9a:f5:4e:c3:eb:16:c3:d6:c7:f6:b7:98:f4:75: e8:d7:9d:07:bf:e0:c0:cd:5b:42:7c:f0:db:cb:a5: bd:f1:63:63:03:ee:89:4c:ff:35:8c:53:19:4d:df: 2c:7d:af:32:95:8a:d9:88:a5:48:0f:fa:60:61:fc: 6a:4f:0a:a3:f2:c8:ac:ed:ab:fc:70:bb:c9:8a:6c: d7:6f:31:b2:0b:34:ea:58:84:44:66:66:7d:15:ed: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4F:D1:37:23:14:83:FE:E3:61:05:72:C4:21:FB:4A:07:2F:5C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96855132-a9dc-371f-b2ce-9585609d73cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:de00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0b:aa:8b:4b:35:dd:7e:e8:f4:cc:4b:5e:9f:56:26:9e:aa: f8:56:c4:0e:05:0f:1c:a2:be:ec:00:40:5c:ee:31:aa:2a:55: b0:b1:a5:26:d8:d2:89:d9:ed:11:56:83:89:7e:b5:71:cd:65: d7:30:b7:37:d5:10:cc:3e:b9:84:53:94:2f:e9:be:7c:53:77: 41:33:2e:74:c7:a9:60:f5:b9:47:b1:2b:13:85:64:01:25:69: 1f:24:8c:f5:b5:2a:3e:d9:dc:ad:90:4f:d1:98:72:3d:1c:4a: d3:2b:63:67:0e:a1:b8:51:7d:2d:22:54:71:06:ed:1e:bd:b2: a2:a2:98:09:e6:9f:90:4e:53:07:6c:e0:b7:87:ee:13:de:a8: 12:1f:84:f1:95:ca:80:b4:20:88:15:11:fd:54:c2:26:1a:c7: 7d:2f:83:8d:a5:3c:90:38:7b:74:b7:b9:6e:05:35:81:0b:f6: e7:a3:0d:39:17:6f:14:81:5f:d4:bb:5f:5e:0a:01:11:d6:ce: b5:5b:49:7e:94:e5:45:2f:31:65:c1:6a:09:35:da:1a:05:22: 17:fe:47:53:41:87:37:92:3c:f0:00:96:f5:fa:ed:3c:2c:5d: f5:de:0f:d4:75:ab:0a:85:be:1a:c4:cd:da:c2:ed:5f:ff:34: 3c:3c:7d:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9MPVAogsnIJOokF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGQyYjc4NGQtNjI4MS00NmNmLThiNGMtZjRmMWYxOTkyNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUrl9i+6fV6747kn+K5hGTb3j98h553xXcYv HaU3fb8imIuuzxfc/Y8XgbPJIZr+eBWEbLwGtJys6fa1I+HJ5MGXCIK2flweQ31J p8ugk1ppUNOVst+ltggXzLa8r8jS8U8rPehcm37ffxAdXKw+b+djc1gICeiWRclt tjWyVjMioOGP8jXOcjLTlwmu76Ay1tjus27Ocgl10gWauo+d5auj5LJimvVOw+sW w9bH9reY9HXo150Hv+DAzVtCfPDby6W98WNjA+6JTP81jFMZTd8sfa8ylYrZiKVI D/pgYfxqTwqj8sis7av8cLvJimzXbzGyCzTqWIREZmZ9Fe1pHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFP0TcjFIP+42EFcsQh+0oHL1wWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY4NTUxMzItYTlkYy0z NzFmLWIyY2UtOTU4NTYwOWQ3M2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgN4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMLqotLNd1+6PTMS16fViaeqvhWxA4FDxyivuwAQFzuMaoqVbCx pSbY0onZ7RFWg4l+tXHNZdcwtzfVEMw+uYRTlC/pvnxTd0EzLnTHqWD1uUexKxOF ZAElaR8kjPW1Kj7Z3K2QT9GYcj0cStMrY2cOobhRfS0iVHEG7R69sqKimAnmn5BO Uwds4LeH7hPeqBIfhPGVyoC0IIgVEf1UwiYax30vg42lPJA4e3S3uW4FNYEL9uej DTkXbxSBX9S7X14KARHWzrVbSX6U5UUvMWXBagk12hoFIhf+R1NBhzeSPPAAlvX6 7TwsXfXeD9R1qwqFvhrEzdrC7V//NDw8fe8= -----END CERTIFICATE-----Generated at Sun Oct 11 13:44:16 2026 by rpki-client