$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa File: 13f1be87-f0fe-33e2-bb02-2b398d03b667.roa (raw, json) Hash identifier: xjjvFc67p6Ka25T0sStutdHD0Wu+y2wSMvxcJaJi98c= Subject key identifier: A8:02:3D:06:10:87:28:B6:FA:8C:24:22:A9:8E:65:8C:DF:B5:97:66 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4973808F15A7BAA9D7465680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e89:3800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:80:8f:15:a7:ba:a9:d7:46:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e9ce2083-1359-4fd1-9b6c-502e5becb4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:a4:4c:5c:72:7f:8c:42:dc:1d:0b:59:88: 2f:59:d7:ec:fa:1f:be:fe:d9:68:42:48:0a:3a:a3: 5c:57:51:8c:c8:12:e3:ac:82:55:bf:36:34:81:cc: 73:f8:50:2b:09:30:b0:dc:69:65:46:61:98:a5:b1: c6:81:82:5c:c6:da:6b:08:14:2c:40:83:1b:be:8e: 1f:47:9f:78:b1:b4:86:19:f6:aa:01:64:7f:54:8e: b6:7a:e8:96:15:5d:b4:06:a9:0a:9f:fe:fc:d1:a9: a1:16:b6:35:bb:a6:20:8b:2f:8b:e6:9c:93:e4:99: 87:9d:68:86:82:b7:4b:a6:6a:37:ad:76:de:95:f8: 22:4b:a6:45:d5:98:0b:f9:1a:c9:bc:b0:65:e5:94: de:1a:e4:34:74:79:44:c2:22:5c:26:00:3d:2d:4d: b0:ba:d6:ef:4a:0c:b1:d8:97:ab:f3:90:79:b8:e1: a2:c6:cd:22:ea:f5:65:70:cd:a6:55:54:36:5d:6b: 00:2b:6c:ba:7a:d7:0e:bf:86:39:25:a4:c8:2b:34: a4:cf:af:86:6a:da:4d:4c:84:70:96:d0:43:25:ff: bb:50:a3:f4:c1:b8:a2:f3:9c:65:e6:9b:a8:43:d1: 07:4b:81:cc:17:3b:15:a3:fa:cb:94:19:fc:9a:94: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:3D:06:10:87:28:B6:FA:8C:24:22:A9:8E:65:8C:DF:B5:97:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13f1be87-f0fe-33e2-bb02-2b398d03b667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:82:a3:25:df:ec:dd:fa:57:ec:ba:28:72:a0:3c:f3:20:4b: 6a:db:c3:46:ef:0d:59:34:f3:e1:b2:88:34:60:75:74:de:59: 34:86:9a:b4:76:6d:a5:db:ab:3c:6e:37:1f:1f:74:c3:9b:31: 15:ee:ee:aa:91:09:e4:e0:9b:0a:d2:0e:5b:1d:76:d3:28:12: 57:43:d1:ce:76:7c:cb:6b:bf:17:98:6e:29:31:66:11:18:a2: 3d:7c:16:40:80:2e:df:4a:59:80:e8:90:81:52:41:4c:16:0a: d4:47:9a:d0:71:53:77:ef:37:fd:50:ca:57:97:77:77:9e:9f: 0b:a4:b9:6c:4c:71:ff:8e:f5:f9:31:fb:3d:07:1c:08:5d:6e: 91:6b:fb:f5:31:2c:6f:ca:36:1c:bc:00:93:9a:4f:c6:60:08: e4:47:ec:b0:14:75:63:bd:13:81:84:49:95:66:c8:c3:41:2c: 7c:b2:82:29:a9:44:59:7a:b6:b5:36:13:d9:1b:04:3a:67:00: 55:0f:1a:26:29:5f:a6:49:b3:34:ef:fc:1b:f1:f8:01:ca:36: 3f:86:ad:54:20:0e:ec:6e:e1:b2:f7:a4:6a:1e:66:0f:f4:8e: 8e:8e:72:14:16:b9:56:74:b7:c4:c7:1f:5c:a9:01:4f:d6:3a: 95:61:d6:84 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc4CPFae6qddGVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTljZTIwODMtMTM1OS00ZmQxLTliNmMtNTAyZTViZWNiNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKOkTFxyf4xC3B0LWYgvWdfs+h++/tloQkgK OqNcV1GMyBLjrIJVvzY0gcxz+FArCTCw3GllRmGYpbHGgYJcxtprCBQsQIMbvo4f R594sbSGGfaqAWR/VI62euiWFV20BqkKn/780amhFrY1u6Ygiy+L5pyT5JmHnWiG grdLpmo3rXbelfgiS6ZF1ZgL+RrJvLBl5ZTeGuQ0dHlEwiJcJgA9LU2wutbvSgyx 2Jer85B5uOGixs0i6vVlcM2mVVQ2XWsAK2y6etcOv4Y5JaTIKzSkz6+GatpNTIRw ltBDJf+7UKP0wbii85xl5puoQ9EHS4HMFzsVo/rLlBn8mpRn3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKgCPQYQhyi2+owkIqmOZYzftZdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTNmMWJlODctZjBmZS0z M2UyLWJiMDItMmIzOThkMDNiNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkIKjJd/s3fpX7LoocqA88yBLatvDRu8NWTTz4bKINGB1dN5ZNIaa tHZtpdurPG43Hx90w5sxFe7uqpEJ5OCbCtIOWx120ygSV0PRznZ8y2u/F5huKTFm ERiiPXwWQIAu30pZgOiQgVJBTBYK1Eea0HFTd+83/VDKV5d3d56fC6S5bExx/471 +TH7PQccCF1ukWv79TEsb8o2HLwAk5pPxmAI5EfssBR1Y70TgYRJlWbIw0EsfLKC KalEWXq2tTYT2RsEOmcAVQ8aJilfpkmzNO/8G/H4Aco2P4atVCAO7G7hsvekah5m D/SOjo5yFBa5VnS3xMcfXKkBT9Y6lWHWhA== -----END CERTIFICATE-----Generated at Sun Sep 27 07:59:26 2026 by rpki-client