$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa File: 35833895-0e41-32bf-815e-27e190285c7d.roa (raw, json) Hash identifier: tUMp1yyep1kOFrjo5SOr9Jp6XLmk93t77Eet1TQL8TA= Subject key identifier: DB:66:E0:11:45:0A:C4:8D:24:76:87:07:CF:35:D5:5A:FD:76:A8:30 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498821EE1468B2A23BEC0F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:21:ee:14:68:b2:a2:3b:ec:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b3c6a1b-6443-4111-be2e-cecd31c99b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:a9:0a:41:06:2a:58:18:87:12:36:e5:18: 14:80:e0:fa:95:50:9d:8e:3a:f8:ff:76:ce:cf:25: c3:6a:8d:1e:21:7f:86:86:56:40:0c:10:07:27:64: 32:7f:32:85:80:43:9f:76:f8:b3:c8:27:5e:ed:52: cc:34:bb:ef:9b:da:d0:56:f0:1d:ef:48:9f:8e:9a: 7b:a2:c0:75:3d:7d:8b:53:5d:a6:59:1b:68:1c:06: e6:e2:7d:d7:09:fc:44:b4:22:64:f0:4e:ea:a0:0d: 45:23:d4:2e:7b:51:93:25:85:7a:09:78:ab:7c:b6: db:60:2a:c2:70:ff:d5:1e:65:d1:f8:8b:5a:d4:e8: 0b:6c:40:81:25:b7:a2:af:d4:e1:88:94:b7:4b:17: 92:9f:39:3f:05:87:3c:8b:38:45:2b:82:da:8e:00: 69:3a:ae:85:6c:43:73:0f:f2:eb:3e:54:1c:86:74: de:5e:bb:83:fe:4d:57:ae:99:cf:a2:b6:ae:d3:f0: b8:c0:74:8a:9a:72:33:56:8c:9d:79:cc:3e:13:b6: 7f:41:79:f5:73:b5:e5:8c:e8:b4:95:97:85:58:e2: bb:da:b4:b9:fb:69:32:e9:c9:ef:c2:19:42:a5:92: 3a:98:d6:2b:dd:b2:57:d6:8e:0a:7e:a2:d8:ae:2e: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:66:E0:11:45:0A:C4:8D:24:76:87:07:CF:35:D5:5A:FD:76:A8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35833895-0e41-32bf-815e-27e190285c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4a:8d:a8:67:dd:fd:5b:cc:ac:65:9e:74:5d:3f:7b:e6:3a: c2:b0:a5:2d:40:3b:84:96:d5:d5:2c:b4:4e:cd:9a:a2:81:7f: a5:be:c1:bc:f1:a8:2a:1e:fe:36:74:94:4f:8d:8d:f2:0c:d3: 33:a8:76:82:fd:72:51:16:a8:80:bf:e7:c8:7e:00:4f:1f:d7: 0f:20:74:1c:19:17:bd:4d:4e:db:92:6b:0a:e1:bf:52:47:68: 4b:06:38:f1:93:58:97:a7:7d:f2:be:0b:43:59:87:be:c6:01: 72:21:7f:d7:d3:25:4a:ea:96:a7:bd:54:91:d0:87:4f:b8:21: 60:dd:1f:c1:ac:50:22:d4:62:4c:fb:82:c0:19:5b:75:92:b0: 2c:86:80:6a:91:02:5e:5f:39:e6:a1:a2:88:99:ff:67:7d:ac: 12:98:8c:02:a7:50:91:fb:fb:be:68:85:83:9d:3c:be:a9:c7: d2:77:8f:8e:5a:a4:fd:2d:ea:7f:87:61:d1:be:11:c3:1a:74: 8f:e5:cc:97:f7:81:ac:05:e7:6c:d1:c3:19:48:56:c9:1b:33: 20:54:fe:2a:ea:b7:2a:b5:2f:49:14:39:d3:fb:43:12:2d:cb: f4:43:2f:d1:c9:d7:f1:e2:dc:0b:3d:86:14:0d:48:01:a0:38: e5:f7:57:b0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiCHuFGiyojvsD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWIzYzZhMWItNjQ0My00MTExLWJlMmUtY2VjZDMxYzk5YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovOpCkEGKlgYhxI25RgUgOD6lVCdjjr4/3bO zyXDao0eIX+GhlZADBAHJ2QyfzKFgEOfdvizyCde7VLMNLvvm9rQVvAd70ifjpp7 osB1PX2LU12mWRtoHAbm4n3XCfxEtCJk8E7qoA1FI9Que1GTJYV6CXirfLbbYCrC cP/VHmXR+Ita1OgLbECBJbeir9ThiJS3SxeSnzk/BYc8izhFK4LajgBpOq6FbENz D/LrPlQchnTeXruD/k1XrpnPorau0/C4wHSKmnIzVoydecw+E7Z/QXn1c7XljOi0 lZeFWOK72rS5+2ky6cnvwhlCpZI6mNYr3bJX1o4KfqLYri7ZxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNtm4BFFCsSNJHaHB8811Vr9dqgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzU4MzM4OTUtMGU0MS0z MmJmLTgxNWUtMjdlMTkwMjg1YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui/ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmEqNqGfd/VvMrGWedF0/e+Y6wrClLUA7hJbV1Sy0Ts2aooF/pb7B vPGoKh7+NnSUT42N8gzTM6h2gv1yURaogL/nyH4ATx/XDyB0HBkXvU1O25JrCuG/ UkdoSwY48ZNYl6d98r4LQ1mHvsYBciF/19MlSuqWp71UkdCHT7ghYN0fwaxQItRi TPuCwBlbdZKwLIaAapECXl855qGiiJn/Z32sEpiMAqdQkfv7vmiFg508vqnH0neP jlqk/S3qf4dh0b4Rwxp0j+XMl/eBrAXnbNHDGUhWyRszIFT+Kuq3KrUvSRQ50/tD Ei3L9EMv0cnX8eLcCz2GFA1IAaA45fdXsA== -----END CERTIFICATE-----Generated at Sat Sep 26 14:41:45 2026 by rpki-client