$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa File: a677600a-64f7-3858-91a8-e43fe2ddcc59.roa (raw, json) Hash identifier: M711cGvElrY1Mc2OJsP8rBeHbDUh5vwLRcxGZC+JFxs= Subject key identifier: 09:BA:EC:CA:AA:E4:1B:0E:B8:02:C8:9B:75:A6:96:9D:24:0D:FC:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498962A57721B55569A76F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2d80:5700::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:62:a5:77:21:b5:55:69:a7:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09c0d164-7ecd-498c-b7a2-1eea9f99a953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:3f:ca:3f:6b:84:0b:46:ab:07:a0:d2:67: 57:85:dd:5d:fc:2a:78:88:65:60:48:5f:e5:58:fd: 14:7d:21:70:f3:70:21:bd:d5:60:1d:f4:e9:9a:4e: d1:a7:9e:89:cf:65:bf:49:1d:ed:e7:9c:73:93:73: 1b:41:17:da:e6:86:49:31:72:10:d2:7b:9b:de:95: 21:04:db:b2:dc:9e:71:d0:c8:d9:6d:c0:22:4f:3d: 0e:35:5b:a1:5a:3b:50:a7:13:a9:3f:9c:72:e8:b1: 77:83:68:5d:1c:26:63:59:a1:c8:92:9a:f2:3a:d1: 8b:70:8f:fe:98:f7:e1:5c:ec:e3:0e:43:32:1b:bc: bc:85:24:f5:28:f8:89:8d:4d:ef:85:e4:8f:5a:4c: 46:da:0e:85:5a:a0:b2:a2:d1:c6:8e:bc:9a:10:c1: bb:93:b0:6c:9d:81:23:79:8e:76:dc:e0:03:23:ab: 44:3d:d8:cf:33:85:02:b6:39:b8:91:55:db:c7:d8: 61:01:c4:21:10:e1:44:9b:46:fa:9b:df:65:5e:12: c2:ec:ff:32:eb:bf:63:aa:92:8b:5b:38:5b:34:57: 21:18:45:49:00:cd:fa:61:bd:a7:51:6f:a2:c1:e4: 7d:52:b4:5e:52:3f:2d:3e:2a:d9:f3:14:9e:74:c3: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BA:EC:CA:AA:E4:1B:0E:B8:02:C8:9B:75:A6:96:9D:24:0D:FC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a677600a-64f7-3858-91a8-e43fe2ddcc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:5700::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bb:f2:fb:81:35:0f:26:7e:24:60:a5:b8:65:f0:7b:19:06: 62:65:14:59:49:b3:c5:08:d6:f5:4d:a2:56:18:3c:17:d6:30: d8:5c:74:e2:89:b7:a3:76:6e:3a:bc:e1:0d:22:73:e5:ca:da: 0a:8a:b1:46:82:09:69:65:b2:e3:1c:17:2c:08:0f:d9:bd:b9: a4:55:11:e6:da:57:88:ea:98:02:84:18:86:08:f2:bb:a7:9d: ad:bd:7a:09:3a:c1:43:89:97:b3:68:fb:3c:d9:fa:15:46:4c: ea:68:f7:be:d7:8e:96:e2:92:d0:8f:77:9d:4e:8c:38:01:a5: 57:c6:2e:f3:b2:fe:c0:fb:60:48:56:12:36:17:7b:10:3b:e7: 29:9b:7e:15:f0:1b:d5:a0:00:f6:b3:32:6e:8c:23:90:bc:b8: aa:05:f2:5f:a8:a7:49:47:54:00:b7:fc:9d:11:a3:3c:0d:dc: a5:08:22:92:d3:15:c8:4d:4b:ea:80:e9:d8:37:26:2e:3b:95: 5a:e7:77:5c:9d:54:d3:c8:91:8b:54:d6:3d:90:7a:06:40:be: 60:18:b6:02:54:46:2c:3c:5a:c1:21:35:64:51:c1:26:ce:a6: 40:f8:c3:84:c5:b7:e4:48:95:6d:62:27:2c:9a:37:30:b3:2a: a2:e6:78:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiWKldyG1VWmnb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDljMGQxNjQtN2VjZC00OThjLWI3YTItMWVlYTlmOTlhOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4/yj9rhAtGqweg0mdXhd1d/Cp4iGVgSF/l WP0UfSFw83AhvdVgHfTpmk7Rp56Jz2W/SR3t55xzk3MbQRfa5oZJMXIQ0nub3pUh BNuy3J5x0MjZbcAiTz0ONVuhWjtQpxOpP5xy6LF3g2hdHCZjWaHIkpryOtGLcI/+ mPfhXOzjDkMyG7y8hST1KPiJjU3vheSPWkxG2g6FWqCyotHGjryaEMG7k7BsnYEj eY523OADI6tEPdjPM4UCtjm4kVXbx9hhAcQhEOFEm0b6m99lXhLC7P8y679jqpKL WzhbNFchGEVJAM36Yb2nUW+iweR9UrReUj8tPirZ8xSedMODuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAm67Mqq5BsOuALIm3Wmlp0kDfwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY3NzYwMGEtNjRmNy0z ODU4LTkxYTgtZTQzZmUyZGRjYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFcA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEy78vuBNQ8mfiRgpbhl8HsZBmJlFFlJs8UI1vVNolYYPBfWMNhc dOKJt6N2bjq84Q0ic+XK2gqKsUaCCWllsuMcFywID9m9uaRVEebaV4jqmAKEGIYI 8runna29egk6wUOJl7No+zzZ+hVGTOpo977XjpbiktCPd51OjDgBpVfGLvOy/sD7 YEhWEjYXexA75ymbfhXwG9WgAPazMm6MI5C8uKoF8l+op0lHVAC3/J0RozwN3KUI IpLTFchNS+qA6dg3Ji47lVrnd1ydVNPIkYtU1j2QegZAvmAYtgJURiw8WsEhNWRR wSbOpkD4w4TFt+RIlW1iJyyaNzCzKqLmeHs= -----END CERTIFICATE-----Generated at Mon Oct 12 07:54:40 2026 by rpki-client