$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa File: 386697e9-daff-344a-823d-ac4db132b4d8.roa (raw, json) Hash identifier: s0kS6qLcgtmcNBjIatHV/xKH6OXPx5eUZqZ7RncGM7k= Subject key identifier: 0D:AC:CA:F7:E5:B2:5B:B7:69:10:0E:79:10:2A:40:82:6B:46:19:47 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49729F1312ED732A0C2F0200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:9f:13:12:ed:73:2a:0c:2f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=84e61d24-5a3d-4e3d-9c99-75b258d280ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:97:96:1f:57:43:9d:18:a7:ae:bb:08:89: 6e:95:2d:0b:b1:a6:17:fd:08:7a:a1:9f:97:cd:eb: 53:a4:64:b2:c0:6a:04:04:91:eb:f0:b3:87:76:44: 25:3f:13:89:3f:d0:8f:3b:9b:e5:1c:ef:01:65:42: ff:04:93:f1:08:47:4b:04:f3:c1:78:1c:d4:4f:e6: 76:3b:28:f2:73:f6:4e:f1:c5:37:0a:6c:0b:98:e7: 0b:a6:fe:b5:02:7c:29:e8:12:a4:93:27:5a:38:c0: 33:4b:12:f3:63:1c:98:5b:35:26:53:ae:63:9e:5f: d0:a1:e5:85:4d:73:2b:fe:75:ab:da:7b:f2:15:56: 30:91:db:b5:1c:1b:45:6c:69:41:e8:8d:23:5f:f3: c6:94:c2:7d:a3:e1:cb:1d:87:e5:1e:f1:b8:09:b5: 3c:c5:bd:39:c5:a1:fe:f3:4b:b0:a3:e4:91:32:0e: 7f:4d:f9:be:6f:5a:f4:d6:01:7f:1b:aa:47:a1:40: aa:2b:ba:95:91:23:fe:de:d9:c4:a7:c9:5f:89:04: 86:c9:1f:27:99:df:cc:39:75:be:80:31:e0:f5:cc: c9:6c:b6:b4:cd:ce:7e:db:51:90:04:83:f4:ea:0f: d7:47:40:fe:c7:b6:bb:14:98:4f:0c:2f:6e:a3:7b: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:CA:F7:E5:B2:5B:B7:69:10:0E:79:10:2A:40:82:6B:46:19:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a8:1c:7c:1d:d6:9c:9e:d4:5d:82:90:4d:e7:d4:07:67:15: a2:27:14:f0:c7:fe:c4:63:6b:df:43:9d:51:25:9a:88:39:30: 4f:0e:b4:18:dd:b8:25:e4:88:f8:01:8b:59:d2:ea:2e:36:42: ad:53:98:a8:be:6c:b9:f3:dc:21:33:ea:1d:04:d9:69:f1:95: 47:22:92:f9:80:4d:01:91:fa:ee:c0:16:3f:2b:f9:03:44:aa: ed:ed:9b:6d:f9:65:30:e7:05:af:cd:21:57:db:f4:5f:82:e8: 62:3a:47:ec:af:5d:36:ea:14:a6:bc:19:58:2f:dd:0f:0a:1f: 8a:40:cc:4c:e0:19:3e:72:2f:55:86:17:3a:c9:74:22:bf:08: a5:6b:dd:1d:d6:a6:30:38:f2:20:10:a6:f1:ce:04:2e:37:69: ad:f1:d0:6c:a7:75:b5:b8:e7:bc:a8:ee:c5:71:fb:f0:1b:d8: 06:81:fe:35:00:57:83:2e:0a:f4:a3:dc:4a:6c:ca:a6:e8:3f: ef:86:fa:36:9b:13:22:b4:69:59:72:b4:3f:f4:47:78:ce:4c: 2d:11:be:ba:fa:11:69:8a:2f:e4:c0:a8:d6:7c:31:a5:d8:9a: a5:54:d7:50:82:e9:ee:34:dd:b7:95:a7:24:aa:0c:e4:c5:ee: 17:16:e3:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcp8TEu1zKgwvAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODRlNjFkMjQtNWEzZC00ZTNkLTljOTktNzViMjU4ZDI4MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx6Xlh9XQ50Yp667CIlulS0LsaYX/Qh6oZ+X zetTpGSywGoEBJHr8LOHdkQlPxOJP9CPO5vlHO8BZUL/BJPxCEdLBPPBeBzUT+Z2 Oyjyc/ZO8cU3CmwLmOcLpv61Anwp6BKkkydaOMAzSxLzYxyYWzUmU65jnl/QoeWF TXMr/nWr2nvyFVYwkdu1HBtFbGlB6I0jX/PGlMJ9o+HLHYflHvG4CbU8xb05xaH+ 80uwo+SRMg5/Tfm+b1r01gF/G6pHoUCqK7qVkSP+3tnEp8lfiQSGyR8nmd/MOXW+ gDHg9czJbLa0zc5+21GQBIP06g/XR0D+x7a7FJhPDC9uo3sKlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA2syvflslu3aRAOeRAqQIJrRhlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzg2Njk3ZTktZGFmZi0z NDRhLTgyM2QtYWM0ZGIxMzJiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG6gcfB3WnJ7UXYKQTefUB2cVoicU8Mf+xGNr30OdUSWaiDkwTw60 GN24JeSI+AGLWdLqLjZCrVOYqL5sufPcITPqHQTZafGVRyKS+YBNAZH67sAWPyv5 A0Sq7e2bbfllMOcFr80hV9v0X4LoYjpH7K9dNuoUprwZWC/dDwofikDMTOAZPnIv VYYXOsl0Ir8IpWvdHdamMDjyIBCm8c4ELjdprfHQbKd1tbjnvKjuxXH78BvYBoH+ NQBXgy4K9KPcSmzKpug/74b6NpsTIrRpWXK0P/RHeM5MLRG+uvoRaYov5MCo1nwx pdiapVTXUILp7jTdt5WnJKoM5MXuFxbjmw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:57:26 2026 by rpki-client