$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa File: bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa (raw, json) Hash identifier: /OgUUpcAegCVa1bYDNUmIPuUaU7XI7kVh6Ir/eVz1Mo= Subject key identifier: F8:2F:1A:2D:58:2B:DC:FC:5B:32:D9:7D:38:C9:C0:38:7B:8B:41:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA791495457E57662F0C71A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2d81:380::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:49:54:57:e5:76:62:f0:c7:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=461b5129-87b2-45c4-85dd-7cbc4eb15d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:e8:6c:3f:40:af:df:be:e6:df:99:7c:e8: 7d:7e:9a:94:93:2c:aa:57:a2:75:de:ab:45:5e:90: de:f7:a9:ee:65:d9:a0:24:59:e5:05:b6:f6:9e:c7: ba:25:9e:31:3b:39:d8:c5:5c:fd:53:40:ce:6a:8a: 9f:7c:9f:ab:4d:b6:1c:a8:fe:7c:49:18:46:70:62: e6:b1:88:6d:95:39:03:cc:7d:2e:08:0c:a0:63:92: d9:ae:0d:ca:12:f0:18:d3:d9:4f:97:1e:81:89:43: 28:c3:07:31:a6:32:bb:7a:a3:fe:33:a9:13:ba:df: 4d:35:36:f8:a8:dc:c5:81:54:81:15:3b:00:e6:eb: 67:45:ef:92:7b:67:73:e6:7e:29:10:93:c3:7e:1d: a5:22:5a:31:51:43:3d:40:14:67:ff:c0:b1:80:98: e1:d2:7d:a1:09:45:df:04:39:d5:7a:af:33:3f:a1: 96:1b:07:9d:8c:28:d7:bd:d2:d4:14:91:16:27:0a: c9:62:a5:34:23:b8:3b:5f:76:95:a4:06:c1:8b:66: 31:bb:0e:20:d7:93:23:c2:c6:df:17:1d:68:15:05: a9:a8:5c:67:a1:a9:78:71:c8:f1:fe:55:d6:f5:4f: de:6a:04:1f:02:87:da:a9:fb:27:59:c6:04:65:cd: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:1A:2D:58:2B:DC:FC:5B:32:D9:7D:38:C9:C0:38:7B:8B:41:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:380::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:bf:1f:fa:e0:c2:c4:05:8d:de:4c:97:3a:a7:02:43:82:3c: c0:d6:15:1b:78:72:c2:a7:79:fe:26:32:b4:b7:e7:5c:0a:3f: 31:9c:be:10:dc:3b:75:23:88:4d:ce:3b:d9:02:b4:95:db:c4: 52:6f:92:5a:0a:64:4e:a2:f4:00:9d:0f:6b:0a:57:0a:2a:49: 2c:f5:18:bc:9a:e5:e5:17:cd:d3:32:df:95:7d:3a:e9:ca:6f: 54:56:e4:4d:aa:bf:1b:a5:80:e5:2b:68:36:92:a3:3c:c2:3b: 6a:f7:1d:b3:32:9f:12:5e:20:e6:0d:bc:86:16:1d:99:dd:3f: e9:3f:96:8e:41:c1:9d:22:9b:ff:40:7b:b8:b5:72:ef:f4:63: df:9b:31:04:00:9b:11:2e:a4:e8:39:07:a1:09:2f:cd:96:3a: 7e:d0:3a:eb:00:d5:58:08:89:09:5b:64:90:7a:bb:13:66:72: 03:fd:be:6d:81:8e:6e:f0:26:d6:f6:36:e3:ca:fe:b6:ea:1c: c3:5f:55:d1:6f:63:b5:72:8b:7b:1b:6f:b1:f3:76:76:7a:1c: 2d:cb:b4:4d:93:39:09:1f:71:b3:94:c5:82:15:18:b8:d2:af: 9e:a4:6c:ed:2d:05:de:08:04:d5:cd:58:2f:c1:71:0e:50:0f: e9:d4:73:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkUlUV+V2YvDHGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDYxYjUxMjktODdiMi00NWM0LTg1ZGQtN2NiYzRlYjE1ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ3obD9Ar9++5t+ZfOh9fpqUkyyqV6J13qtF XpDe96nuZdmgJFnlBbb2nse6JZ4xOznYxVz9U0DOaoqffJ+rTbYcqP58SRhGcGLm sYhtlTkDzH0uCAygY5LZrg3KEvAY09lPlx6BiUMowwcxpjK7eqP+M6kTut9NNTb4 qNzFgVSBFTsA5utnRe+Se2dz5n4pEJPDfh2lIloxUUM9QBRn/8CxgJjh0n2hCUXf BDnVeq8zP6GWGwedjCjXvdLUFJEWJwrJYqU0I7g7X3aVpAbBi2Yxuw4g15Mjwsbf Fx1oFQWpqFxnoal4ccjx/lXW9U/eagQfAofaqfsnWcYEZc1pQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPgvGi1YK9z8WzLZfTjJwDh7i0GfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZkOWJmOGQtYjZlMy0z ZDAzLTliODQtMGY3NDgwN2ZmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQOA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADa/H/rgwsQFjd5MlzqnAkOCPMDWFRt4csKnef4mMrS351wKPzGc vhDcO3UjiE3OO9kCtJXbxFJvkloKZE6i9ACdD2sKVwoqSSz1GLya5eUXzdMy35V9 OunKb1RW5E2qvxulgOUraDaSozzCO2r3HbMynxJeIOYNvIYWHZndP+k/lo5BwZ0i m/9Ae7i1cu/0Y9+bMQQAmxEupOg5B6EJL82WOn7QOusA1VgIiQlbZJB6uxNmcgP9 vm2Bjm7wJtb2NuPK/rbqHMNfVdFvY7Vyi3sbb7HzdnZ6HC3LtE2TOQkfcbOUxYIV GLjSr56kbO0tBd4IBNXNWC/BcQ5QD+nUcz0= -----END CERTIFICATE-----Generated at Fri Aug 21 01:01:24 2026 by rpki-client