$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa File: 2b09540b-f295-348b-86b7-42a32bfc97fd.roa (raw, json) Hash identifier: sgq0hFAgz8rlRAIoPdrmrx4Pmh8NQeQlpKNwbsQhe6I= Subject key identifier: 2D:9D:ED:DB:11:E3:9F:4F:D0:3B:67:BD:2A:C7:C6:A7:FD:C1:AC:99 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3DE03A5AF4EBF34A838D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e89:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:3a:5a:f4:eb:f3:4a:83:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4fc6f87a-864b-4af2-8cc3-666023d29437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:28:99:25:bd:48:38:e3:96:dd:0d:ac:4e: e7:47:7a:4c:21:c3:7d:38:ff:c7:33:43:14:48:47: bf:9d:b9:32:4e:53:58:f2:03:88:97:aa:86:5f:fc: 93:e6:7f:ce:79:62:1d:37:18:ec:fa:4b:47:68:05: 10:de:0b:f8:6e:5d:17:ca:df:ce:92:7f:ce:5e:ca: 5e:c6:a5:5d:ed:83:d9:02:4f:95:f2:df:51:4c:2a: 1c:b3:77:23:29:7c:73:26:2d:fc:00:1b:89:06:a5: 9e:91:49:ee:b9:0b:e2:a6:73:0f:9a:28:a6:92:08: 32:cd:d0:40:62:43:43:b8:80:58:c1:8f:f7:ed:e4: 47:21:3f:74:cb:79:1d:56:2f:ff:73:ac:6f:4c:fd: b0:8a:02:da:74:e4:2e:0b:ef:39:02:ce:00:21:39: 47:ae:c8:2c:78:81:53:82:ae:98:30:6e:63:f9:2b: a1:f5:13:b3:ea:16:6d:f5:3d:81:93:8f:f1:65:c0: 83:8c:72:bb:55:38:44:96:55:cf:3b:1e:7f:e8:1b: 87:d9:5c:70:0c:77:6f:35:4c:68:0e:87:63:f6:2c: 28:32:18:c6:b6:42:a4:39:b6:84:26:e2:c6:28:6e: ef:84:3b:ef:bc:e3:fd:bf:d7:d7:5a:45:6e:09:61: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:ED:DB:11:E3:9F:4F:D0:3B:67:BD:2A:C7:C6:A7:FD:C1:AC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b09540b-f295-348b-86b7-42a32bfc97fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:02:32:0c:c1:2a:80:15:96:02:dc:45:5f:e3:23:75:60:8f: 64:9c:9a:2f:1d:12:af:d1:1e:11:d5:e5:a1:38:4d:4d:b1:72: 16:48:18:83:2e:5f:2f:e2:70:1d:a3:be:4a:f5:4e:9b:fe:f7: 52:7a:e9:68:1b:17:b6:32:13:31:23:74:1e:3d:6c:c2:7e:63: 10:e2:11:77:c8:b0:6c:7e:16:5f:9d:84:5c:b2:26:17:ce:e1: 47:36:57:8d:a9:69:18:b7:06:34:ab:64:02:d0:b5:05:2e:6c: 33:02:fc:b2:a2:a0:eb:92:a6:b8:ec:1f:4e:e7:dd:4e:18:07: 1f:44:a1:8c:15:59:b5:5c:dc:ec:e7:5a:45:27:74:a3:61:f5: f1:17:6d:30:f8:39:3b:45:50:ee:d5:c9:80:46:d6:9c:f7:26: b9:e2:01:fb:24:a1:a5:55:2a:5b:4c:a5:a2:20:ae:2e:2d:22: 26:bc:4d:ea:2d:3e:d1:02:a7:84:ca:26:28:9c:8f:12:bd:9f: 45:0b:e1:fc:63:01:08:6d:4d:ee:c5:ff:25:80:88:12:84:90: fd:a9:42:a5:03:bd:b1:ed:b6:da:60:6a:bb:94:20:d9:81:55: 7f:82:6c:4c:0b:7d:66:c2:bc:f9:ac:a2:b6:d6:9c:da:a8:ab: 25:8a:6d:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPeA6WvTr80qDjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGZjNmY4N2EtODY0Yi00YWYyLThjYzMtNjY2MDIzZDI5NDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMMomSW9SDjjlt0NrE7nR3pMIcN9OP/HM0MU SEe/nbkyTlNY8gOIl6qGX/yT5n/OeWIdNxjs+ktHaAUQ3gv4bl0Xyt/Okn/OXspe xqVd7YPZAk+V8t9RTCocs3cjKXxzJi38ABuJBqWekUnuuQvipnMPmiimkggyzdBA YkNDuIBYwY/37eRHIT90y3kdVi//c6xvTP2wigLadOQuC+85As4AITlHrsgseIFT gq6YMG5j+Suh9ROz6hZt9T2Bk4/xZcCDjHK7VThEllXPOx5/6BuH2VxwDHdvNUxo Dodj9iwoMhjGtkKkObaEJuLGKG7vhDvvvOP9v9fXWkVuCWH2PQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC2d7dsR459P0DtnvSrHxqf9wayZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmIwOTU0MGItZjI5NS0z NDhiLTg2YjctNDJhMzJiZmM5N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiZAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJAIyDMEqgBWWAtxFX+MjdWCPZJyaLx0Sr9EeEdXloThNTbFyFkgY gy5fL+JwHaO+SvVOm/73UnrpaBsXtjITMSN0Hj1swn5jEOIRd8iwbH4WX52EXLIm F87hRzZXjalpGLcGNKtkAtC1BS5sMwL8sqKg65KmuOwfTufdThgHH0ShjBVZtVzc 7OdaRSd0o2H18RdtMPg5O0VQ7tXJgEbWnPcmueIB+yShpVUqW0yloiCuLi0iJrxN 6i0+0QKnhMomKJyPEr2fRQvh/GMBCG1N7sX/JYCIEoSQ/alCpQO9se222mBqu5Qg 2YFVf4JsTAt9ZsK8+ayittac2qirJYptig== -----END CERTIFICATE-----Generated at Tue Sep 29 20:21:48 2026 by rpki-client