$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa File: 25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa (raw, json) Hash identifier: PlrKzJSiguFtnJbm/yYaKlZ5ljCn6j0BlMLG4BygI+M= Subject key identifier: 0E:C2:93:14:58:E7:37:E4:07:59:4D:56:00:43:59:FA:2D:17:7E:71 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F5A32CB0D2941BFAA5FEF8780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8f:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:cb:0d:29:41:bf:aa:5f:ef:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=aaa7edff-57a3-4da0-b61f-8b0c83b1862b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:b0:58:35:aa:67:13:57:c8:87:29:50:72: 18:4e:96:24:41:18:e1:d2:61:24:a7:c0:66:31:b3: 91:6e:9d:ab:60:1f:5b:25:ba:a8:0a:04:2f:f3:ed: ba:81:53:82:13:ba:cb:e4:2a:43:9b:ad:50:09:59: 74:b5:b3:ed:f6:a3:f0:b3:15:da:cd:35:73:86:f2: 56:40:c2:fa:a7:69:d5:2a:53:fe:10:76:24:4a:15: 5f:cd:78:18:86:46:5a:fc:bb:14:fc:1b:6f:55:c0: 3c:e3:96:f4:f4:9d:55:ae:a9:6c:3e:c9:8e:3c:8b: 52:c0:29:04:80:dd:56:97:73:5f:7c:09:6f:1d:c6: 4f:6d:dc:08:d0:af:92:90:22:8e:df:a2:4a:3c:d9: d8:98:bb:55:36:3d:d8:33:d8:e9:ed:7f:f1:d2:3d: 7a:74:45:af:e0:3c:3e:2c:bf:1f:fb:fd:3e:4a:59: f5:b2:06:04:30:3e:b3:4a:93:7c:0e:b5:82:30:af: f1:b9:e5:2c:de:1f:d5:38:7d:9e:d3:46:96:15:5d: 2f:2b:60:82:f9:ff:d4:95:be:b9:6c:c0:7f:a0:28: 4d:a4:45:e2:5b:c0:41:14:9e:2b:82:65:da:98:a5: 8d:33:c0:dc:e6:44:cc:78:50:8e:a9:7d:67:41:10: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C2:93:14:58:E7:37:E4:07:59:4D:56:00:43:59:FA:2D:17:7E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:14:fd:cb:8c:64:36:12:e2:71:b6:e2:8b:93:a1:e5:99:37: 1b:ee:99:9c:49:2d:48:dc:1b:0c:0a:0c:f5:99:ba:31:b7:85: c6:d8:97:4a:5a:bc:91:14:2b:1d:f3:47:ef:96:7d:50:25:62: c2:0c:76:f5:ce:49:7f:ce:cb:19:f1:d6:41:c1:1f:48:0b:c7: 54:a2:d4:b0:23:44:ba:50:8d:73:0e:57:3d:57:dd:0e:42:1e: be:26:95:53:b5:17:cd:b3:72:d3:80:ac:90:ce:0e:3b:e3:0d: c8:f2:1e:e5:b5:24:f5:40:d6:89:0f:9c:3d:d1:08:05:5c:02: 95:c7:8c:0f:88:5c:31:e8:81:9e:84:b7:5b:da:fe:10:ec:24: 3f:c1:22:8c:33:06:56:eb:4d:27:44:ae:55:13:28:52:be:5f: c2:cd:64:51:49:83:c4:27:79:3a:24:23:a6:2f:fc:9d:fa:ee: 51:69:42:70:a3:6c:5f:37:cb:3c:f1:be:38:7a:6f:93:01:cb: 8b:92:26:d5:ed:45:b9:19:e3:fd:09:74:d9:a7:6c:e2:d5:8f: 3c:15:75:33:39:02:be:1f:93:f5:38:83:24:9d:5c:46:44:f8: 98:2f:bb:94:23:04:ae:35:57:89:73:b7:cd:53:9a:da:36:70: f5:44:2f:74 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9aMssNKUG/ql/vh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YWFhN2VkZmYtNTdhMy00ZGEwLWI2MWYtOGIwYzgzYjE4NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozOwWDWqZxNXyIcpUHIYTpYkQRjh0mEkp8Bm MbORbp2rYB9bJbqoCgQv8+26gVOCE7rL5CpDm61QCVl0tbPt9qPwsxXazTVzhvJW QML6p2nVKlP+EHYkShVfzXgYhkZa/LsU/BtvVcA845b09J1VrqlsPsmOPItSwCkE gN1Wl3NffAlvHcZPbdwI0K+SkCKO36JKPNnYmLtVNj3YM9jp7X/x0j16dEWv4Dw+ LL8f+/0+Sln1sgYEMD6zSpN8DrWCMK/xueUs3h/VOH2e00aWFV0vK2CC+f/Ulb65 bMB/oChNpEXiW8BBFJ4rgmXamKWNM8Dc5kTMeFCOqX1nQRBU6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA7CkxRY5zfkB1lNVgBDWfotF35xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjVhMzNmN2EtZmYyNS0z OTc2LTg3ZjEtOWE5MDAyZDdhYmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj0ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYBT9y4xkNhLicbbii5Oh5Zk3G+6ZnEktSNwbDAoM9Zm6MbeFxtiX Slq8kRQrHfNH75Z9UCViwgx29c5Jf87LGfHWQcEfSAvHVKLUsCNEulCNcw5XPVfd DkIeviaVU7UXzbNy04CskM4OO+MNyPIe5bUk9UDWiQ+cPdEIBVwClceMD4hcMeiB noS3W9r+EOwkP8EijDMGVutNJ0SuVRMoUr5fws1kUUmDxCd5OiQjpi/8nfruUWlC cKNsXzfLPPG+OHpvkwHLi5Im1e1FuRnj/Ql02ads4tWPPBV1MzkCvh+T9TiDJJ1c RkT4mC+7lCMErjVXiXO3zVOa2jZw9UQvdA== -----END CERTIFICATE-----Generated at Sun Oct 4 10:16:02 2026 by rpki-client