$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced09c22-0c71-3b60-a5d9-dac1e1462155.roa File: ced09c22-0c71-3b60-a5d9-dac1e1462155.roa (raw, json) Hash identifier: 52NCtMuSi49Byihw6y/fd0bwCvrR8B+pvzY81sx+l8I= Subject key identifier: 77:E3:18:86:D1:8E:DE:C5:FA:1B:F6:7B:71:6C:2D:80:02:A5:13:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A99C40A9C350C06631B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced09c22-0c71-3b60-a5d9-dac1e1462155.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2d80:9080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:99:c4:0a:9c:35:0c:06:63:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c24408f-eb19-4a06-96a6-9e69c96b7cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:da:c1:1f:e1:c6:93:13:1e:44:2d:81:9f: 99:14:d3:a5:b8:72:cd:2c:57:1b:31:b6:ab:6b:b5: 78:6e:97:75:3b:86:14:e7:eb:6d:c8:10:ef:75:3f: 37:86:94:72:19:aa:9f:d6:fb:e2:bb:78:38:ba:32: ff:98:39:95:f7:54:c1:f1:fe:e0:82:ca:12:a5:c8: 14:d4:1c:65:5d:50:59:db:12:f7:18:b6:0d:77:48: 31:5b:e1:dd:42:b0:07:9e:07:5c:5f:55:aa:13:3a: f9:78:dd:48:95:55:39:fc:d9:45:7d:59:aa:c1:b2: a3:7e:fa:59:c0:d6:49:f3:07:5c:39:1e:72:de:fe: 10:3a:cf:ab:35:ae:3b:a2:c9:0a:93:c5:68:37:36: 84:70:15:4e:32:7c:b3:ef:f0:fb:e1:4e:37:66:29: 9f:c1:b4:84:e7:61:96:79:f9:c5:12:52:8e:f7:53: 15:d3:6e:93:67:53:fb:51:4e:17:df:8b:3e:c5:f2: a0:b1:14:3e:f7:cb:c5:be:7c:91:59:83:8a:d5:d6: 44:1b:01:8a:a1:c5:b7:10:17:4b:88:9f:3d:ec:60: 11:e0:d2:ce:fc:4e:0d:64:a0:bc:01:df:d2:21:17: 0f:8b:08:e3:4c:e6:b2:bb:ef:91:cd:20:91:98:4a: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:18:86:D1:8E:DE:C5:FA:1B:F6:7B:71:6C:2D:80:02:A5:13:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ced09c22-0c71-3b60-a5d9-dac1e1462155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:9080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:29:13:52:c1:c3:9f:f2:99:36:c7:7f:49:e3:92:08:62: 62:33:62:f2:3f:9f:ac:cc:95:cf:59:c6:f7:70:48:d7:4f:cd: 6f:64:a8:97:42:89:0d:37:ae:65:7f:c8:73:46:77:4a:7d:a8: 44:97:12:9a:a5:49:81:7e:54:54:cd:36:4d:a2:3f:41:93:83: 1e:19:1a:f3:10:1d:f0:bd:fd:cd:67:9a:0e:5e:7f:8d:51:eb: 4d:14:19:c0:8a:77:fc:6b:b3:56:19:1f:9b:d8:e4:22:84:78: 75:e7:42:9d:45:4b:e7:e5:2f:46:d2:83:54:ba:37:00:57:e9: 6c:f9:6f:a8:c9:7d:59:cf:c4:40:28:8a:67:f6:81:e3:d4:bd: cd:43:ff:6f:d0:08:1a:f6:11:40:c3:22:c0:cc:da:d6:8e:5e: 4a:20:3c:77:a0:48:05:f7:5d:c1:9d:a4:f7:59:29:61:43:53: 8d:9e:ba:67:58:d2:16:6f:61:39:33:89:7b:45:ac:27:d5:bc: 3c:b7:ce:64:6d:6a:de:d6:db:e3:61:12:34:c6:c3:aa:70:aa: 29:81:8e:36:80:c6:ec:e6:5b:09:10:da:b5:ec:7d:dd:75:c2: b3:55:ed:18:22:0a:83:13:3e:30:c4:31:17:f1:c9:b4:ab:89: 3c:29:ea:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JipnECpw1DAZjG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGMyNDQwOGYtZWIxOS00YTA2LTk2YTYtOWU2OWM5NmI3Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhDawR/hxpMTHkQtgZ+ZFNOluHLNLFcbMbar a7V4bpd1O4YU5+ttyBDvdT83hpRyGaqf1vviu3g4ujL/mDmV91TB8f7ggsoSpcgU 1BxlXVBZ2xL3GLYNd0gxW+HdQrAHngdcX1WqEzr5eN1IlVU5/NlFfVmqwbKjfvpZ wNZJ8wdcOR5y3v4QOs+rNa47oskKk8VoNzaEcBVOMnyz7/D74U43ZimfwbSE52GW efnFElKO91MV026TZ1P7UU4X34s+xfKgsRQ+98vFvnyRWYOK1dZEGwGKocW3EBdL iJ897GAR4NLO/E4NZKC8Ad/SIRcPiwjjTOayu++RzSCRmEo1HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfjGIbRjt7F+hv2e3FsLYACpROnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2VkMDljMjItMGM3MS0z YjYwLWE1ZDktZGFjMWUxNDYyMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+cKRNSwcOf8pk2x39J45IIYmIzYvI/n6zMlc9ZxvdwSNdPzW9k qJdCiQ03rmV/yHNGd0p9qESXEpqlSYF+VFTNNk2iP0GTgx4ZGvMQHfC9/c1nmg5e f41R600UGcCKd/xrs1YZH5vY5CKEeHXnQp1FS+flL0bSg1S6NwBX6Wz5b6jJfVnP xEAoimf2gePUvc1D/2/QCBr2EUDDIsDM2taOXkogPHegSAX3XcGdpPdZKWFDU42e umdY0hZvYTkziXtFrCfVvDy3zmRtat7W2+NhEjTGw6pwqimBjjaAxuzmWwkQ2rXs fd11wrNV7RgiCoMTPjDEMRfxybSriTwp6sM= -----END CERTIFICATE-----Generated at Mon Oct 12 04:41:15 2026 by rpki-client