$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa File: 043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa (raw, json) Hash identifier: BUWbG/0PBwud1RFQHPvFY/yGgd6+40e3krmI4aqWrxk= Subject key identifier: 6E:49:FC:2C:D0:0A:9C:33:1A:E5:D5:C4:D1:4D:62:3F:32:77:C0:85 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3D73C7BE20CAA968A91340 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8b:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:73:c7:be:20:ca:a9:68:a9:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=de688ba1-96eb-4b03-ad2a-3098dccd8818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:a7:0a:93:7f:0b:80:c6:a4:c8:1b:91:e2: 76:4d:74:5c:85:ce:fb:f8:eb:5e:57:77:5b:cd:97: f5:5a:a7:48:51:a5:66:37:8b:86:a3:ae:53:83:0f: b0:ef:23:6a:d6:3b:c1:ff:97:59:1e:de:30:df:4e: 29:20:7b:4c:3f:c5:06:87:15:ca:80:68:09:ff:ab: af:10:9d:00:81:cc:ad:b2:1b:df:95:c2:a8:c6:a8: d8:3d:e0:b0:2f:18:c0:69:02:ef:0f:6e:94:b8:7e: 8b:05:c9:c5:6e:6a:84:73:bf:5f:b6:82:5f:6e:61: 57:37:ed:ca:3a:db:d8:90:bf:eb:66:31:43:28:cf: 74:c2:c7:e8:19:6d:d5:dd:36:85:bd:c7:44:ce:e3: bc:27:5f:34:d1:74:09:40:8f:f9:33:af:b9:d6:53: 59:e2:e5:f1:77:4a:86:79:44:c0:23:72:7b:d9:22: aa:fa:0b:4d:3d:ef:ff:f8:5e:81:59:86:04:81:ea: ad:5d:3d:8b:a7:ab:30:91:45:fa:2f:21:1b:c4:79: 15:88:4c:cf:53:fa:9b:7c:d6:b4:17:5e:74:11:54: d5:a4:75:a6:cb:a6:b4:98:42:fd:17:9f:b8:7f:a3: de:3d:a0:20:88:78:c8:07:a7:74:73:ce:56:78:b7: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:49:FC:2C:D0:0A:9C:33:1A:E5:D5:C4:D1:4D:62:3F:32:77:C0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/043e1d1c-7030-3cea-8e6c-6cbe2de9b6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8b:70:21:73:37:aa:03:0d:54:09:39:ed:0c:58:8e:88:2d: 7b:ee:e5:af:17:90:18:0f:7f:82:c5:7e:8b:e5:72:6b:85:0e: a3:f6:66:5d:9d:25:ad:50:c3:8c:61:a0:44:e7:b2:dc:24:58: 57:c5:45:26:dc:89:9b:d1:ac:85:87:b8:ec:b7:fb:1c:45:c7: a1:f3:d4:26:a2:d8:b0:1d:10:2b:57:e5:23:2b:5d:17:d9:1c: 06:e5:d1:a6:fd:d2:54:0c:f2:1b:84:a4:29:ce:20:29:6d:11: 44:d6:42:4c:56:ac:d5:c5:dc:f7:83:fd:88:58:69:3d:8f:99: 80:ad:81:93:26:be:4c:af:cc:30:54:90:f0:e7:bc:33:87:57: d9:c1:be:c8:ea:04:b9:64:9d:3e:43:4d:49:54:60:50:cb:6e: 53:ce:7f:7a:35:21:b7:27:cb:0a:ed:0a:dd:c1:71:3e:0d:42: f4:28:fb:42:96:86:6f:0e:db:a6:38:d2:31:a4:7c:f2:56:61: a4:94:46:12:5f:e6:eb:f3:02:9e:e8:86:1f:da:5c:0f:fe:17: 48:2d:19:4f:c9:83:48:58:29:89:f8:df:34:a1:a3:a7:48:a3: e1:16:07:bc:5a:59:0e:fd:71:08:32:98:ff:65:79:d1:ca:14: 9f:73:3f:07 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPXPHviDKqWipE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGU2ODhiYTEtOTZlYi00YjAzLWFkMmEtMzA5OGRjY2Q4ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9KnCpN/C4DGpMgbkeJ2TXRchc77+OteV3db zZf1WqdIUaVmN4uGo65Tgw+w7yNq1jvB/5dZHt4w304pIHtMP8UGhxXKgGgJ/6uv EJ0AgcytshvflcKoxqjYPeCwLxjAaQLvD26UuH6LBcnFbmqEc79ftoJfbmFXN+3K OtvYkL/rZjFDKM90wsfoGW3V3TaFvcdEzuO8J1800XQJQI/5M6+51lNZ4uXxd0qG eUTAI3J72SKq+gtNPe//+F6BWYYEgeqtXT2Lp6swkUX6LyEbxHkViEzPU/qbfNa0 F150EVTVpHWmy6a0mEL9F5+4f6PePaAgiHjIB6d0c85WeLe0hQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG5J/CzQCpwzGuXVxNFNYj8yd8CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDQzZTFkMWMtNzAzMC0z Y2VhLThlNmMtNmNiZTJkZTliNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQItwIXM3qgMNVAk57QxYjogte+7lrxeQGA9/gsV+i+Vya4UOo/Zm XZ0lrVDDjGGgROey3CRYV8VFJtyJm9GshYe47Lf7HEXHofPUJqLYsB0QK1flIytd F9kcBuXRpv3SVAzyG4SkKc4gKW0RRNZCTFas1cXc94P9iFhpPY+ZgK2Bkya+TK/M MFSQ8Oe8M4dX2cG+yOoEuWSdPkNNSVRgUMtuU85/ejUhtyfLCu0K3cFxPg1C9Cj7 QpaGbw7bpjjSMaR88lZhpJRGEl/m6/MCnuiGH9pcD/4XSC0ZT8mDSFgpifjfNKGj p0ij4RYHvFpZDv1xCDKY/2V50coUn3M/Bw== -----END CERTIFICATE-----Generated at Sun Sep 27 19:23:50 2026 by rpki-client