$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa File: cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa (raw, json) Hash identifier: uJ/z/qJf/IcLy/dkpH0VEcKdC1DiVwwO1eTpZ6qKqxM= Subject key identifier: 09:6C:4C:9E:5F:FF:2F:72:6B:4F:C3:99:71:D2:41:55:EB:51:16:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F761D7AC70E3712B1C4FD0100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2d81:8900::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7a:c7:0e:37:12:b1:c4:fd:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=85ab119e-879e-4afc-b70f-b0444d24d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:8e:22:b8:d0:7b:d0:d1:64:e6:95:54:72: f6:f6:89:a5:42:20:ab:f0:7f:7c:0c:04:92:de:79: 60:eb:bc:03:ab:4d:74:a5:64:7f:d4:b5:7c:41:5a: ed:a8:98:0e:39:f9:d8:6c:9e:09:76:d0:3a:08:10: 83:4d:9f:72:d1:a4:47:97:d2:8c:68:76:8f:96:e6: 22:9f:48:8b:53:43:56:36:20:f8:35:60:e1:41:15: e6:46:19:af:c7:5e:26:8a:e4:35:88:61:4f:84:16: 43:89:96:f2:40:94:f1:3b:71:29:8d:6d:36:be:9e: 24:66:ff:42:09:d1:84:3a:cb:78:9d:99:0f:2c:a7: e3:3d:e0:a9:b2:0e:4c:62:6a:40:cd:a6:e9:d1:2e: ba:8a:ec:69:80:82:b6:6e:b0:c6:fd:87:13:e2:44: a7:aa:aa:27:60:2c:ff:8a:ee:85:9b:5c:fe:c1:5a: 7e:70:10:32:04:37:51:ab:d3:22:26:56:61:29:42: eb:88:f4:37:15:6a:30:1d:1d:d6:10:6e:4f:c3:b5: 0d:b0:a7:4b:e9:eb:13:5f:e5:32:2b:32:c9:15:f4: ce:bd:31:8c:f6:0f:5e:4e:21:02:38:a8:b2:c0:38: 25:87:91:40:54:50:5c:ab:8b:85:ee:47:bf:52:d9: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6C:4C:9E:5F:FF:2F:72:6B:4F:C3:99:71:D2:41:55:EB:51:16:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4b30e2-d7f4-34f3-bb08-48378d28c182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:8900::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5f:e7:59:ff:9a:4f:08:e8:be:b6:eb:c3:35:c2:e0:53:90: c7:aa:e5:0e:dc:ad:72:b9:8f:55:05:a1:e6:52:75:e0:9d:c1: 80:21:f0:6b:9f:94:06:7e:3f:27:bb:cf:26:51:dd:fc:b3:2a: 40:9e:a4:9e:58:9f:b1:2e:b7:76:03:19:42:a1:57:0f:35:9f: 77:ff:55:1e:91:0f:13:62:f5:6e:c7:20:13:c2:ac:17:39:30: 93:6c:02:f9:51:4f:12:c2:d9:36:3b:5f:a4:d9:cf:70:aa:e4: 40:7e:4f:d0:64:7e:28:49:05:6f:07:fd:05:55:52:af:2b:ca: ad:14:28:c1:79:25:11:83:c8:ff:55:e6:03:c6:ba:ee:14:5f: d7:45:b0:31:07:f2:6c:ca:02:fe:cb:2c:78:5a:aa:b2:86:e5: 9e:ca:d7:89:fb:0a:59:ff:ba:ed:93:ea:9f:1a:ce:20:69:88: 87:b7:87:2d:9e:3e:31:9b:0c:64:d2:14:69:0a:f2:89:8e:8e: 36:d6:a3:6b:fd:86:46:5b:17:52:75:b9:70:78:3f:86:f2:cf: 36:e8:4e:81:fd:54:40:fb:93:74:49:a1:6c:07:1e:25:bc:33: bf:3e:e8:32:52:39:89:d8:d7:bb:43:8d:87:87:37:8c:78:17: 0f:f9:40:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE92HXrHDjcSscT9AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk ODVhYjExOWUtODc5ZS00YWZjLWI3MGYtYjA0NDRkMjRkMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkWOIrjQe9DRZOaVVHL29omlQiCr8H98DASS 3nlg67wDq010pWR/1LV8QVrtqJgOOfnYbJ4JdtA6CBCDTZ9y0aRHl9KMaHaPluYi n0iLU0NWNiD4NWDhQRXmRhmvx14miuQ1iGFPhBZDiZbyQJTxO3EpjW02vp4kZv9C CdGEOst4nZkPLKfjPeCpsg5MYmpAzabp0S66iuxpgIK2brDG/YcT4kSnqqonYCz/ iu6Fm1z+wVp+cBAyBDdRq9MiJlZhKULriPQ3FWowHR3WEG5Pw7UNsKdL6esTX+Uy KzLJFfTOvTGM9g9eTiECOKiywDglh5FAVFBcq4uF7ke/UtlJDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAlsTJ5f/y9ya0/DmXHSQVXrURY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y0YjMwZTItZDdmNC0z NGYzLWJiMDgtNDgzNzhkMjhjMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYkA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5f51n/mk8I6L6268M1wuBTkMeq5Q7crXK5j1UFoeZSdeCdwYAh 8GuflAZ+Pye7zyZR3fyzKkCepJ5Yn7Eut3YDGUKhVw81n3f/VR6RDxNi9W7HIBPC rBc5MJNsAvlRTxLC2TY7X6TZz3Cq5EB+T9BkfihJBW8H/QVVUq8ryq0UKMF5JRGD yP9V5gPGuu4UX9dFsDEH8mzKAv7LLHhaqrKG5Z7K14n7Cln/uu2T6p8aziBpiIe3 hy2ePjGbDGTSFGkK8omOjjbWo2v9hkZbF1J1uXB4P4byzzboToH9VED7k3RJoWwH HiW8M78+6DJSOYnY17tDjYeHN4x4Fw/5QDQ= -----END CERTIFICATE-----Generated at Sun Oct 11 13:41:56 2026 by rpki-client