$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa File: 3b98607c-312f-3adf-a754-290a30263a4d.roa (raw, json) Hash identifier: GqAL8GZUrznnQvievuESBIdn0wWfs0k0zTnFYpDluAo= Subject key identifier: F7:B2:41:CE:F6:62:B7:58:63:73:4A:08:E1:C8:7D:93:AE:44:FD:1F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497483F55D61C2963B10ACC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:83:f5:5d:61:c2:96:3b:10:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35a5f0c5-9112-47d3-8530-9d1ea5dfd6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:4d:9b:91:15:2f:31:f7:6f:13:77:3b:b7: 2b:9f:f6:f7:15:31:27:c4:6f:57:6b:46:78:bf:b3: 41:a9:c4:19:5d:0a:9a:35:94:b9:46:44:23:4b:e2: 2d:e6:6b:cf:f7:ec:e8:52:1e:28:6f:59:12:3c:d3: 9c:fd:35:b3:c6:62:aa:0f:45:59:47:56:6b:af:87: 16:66:e1:e8:e7:05:fa:64:57:c6:d4:3a:71:d3:d7: 4e:de:05:ee:65:2b:6c:e8:44:94:48:9a:fa:0b:1f: 99:f0:e4:92:e1:ab:76:2e:6b:09:3c:66:15:13:80: 45:68:f5:79:2f:32:f4:e3:61:64:23:19:8a:25:2f: 5d:72:92:ff:7c:aa:e6:d9:3c:45:90:5b:c3:cb:27: 1b:ef:4b:69:a0:3c:39:8c:18:4a:c7:4d:fd:6b:64: c8:a0:67:b6:ae:f8:e4:2c:d5:a3:e9:68:31:6a:5a: e1:a0:27:21:63:e1:58:95:ec:57:9b:f6:4b:ec:e8: 08:09:e7:0b:cf:b9:06:c2:f8:23:00:2a:cd:4f:10: f2:ca:4c:9d:58:f4:0d:74:b7:cd:23:26:4d:6f:c6: 91:ec:72:50:34:25:67:86:c6:cb:9d:90:96:61:ca: 10:02:57:5a:af:67:07:7d:4d:6b:aa:3c:d8:20:f1: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:41:CE:F6:62:B7:58:63:73:4A:08:E1:C8:7D:93:AE:44:FD:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:38:c9:9d:b2:3e:9d:a7:24:e8:df:53:ad:d0:19:56:81:56: 50:1e:41:92:a7:38:0f:e8:76:1c:2c:aa:ca:05:39:20:c0:a7: eb:cb:59:0f:59:16:1d:27:73:3c:80:6f:7c:13:58:c6:4a:b8: c6:d8:61:f8:3b:79:40:99:7c:8b:98:06:ce:1c:c4:c7:8b:ba: 4e:fa:64:dc:83:e5:2e:c8:da:11:52:55:97:07:98:69:8c:e6: fe:0e:6b:c0:d7:a6:78:41:9d:12:88:47:45:4d:8a:78:48:21: b5:29:ea:de:df:02:85:b3:41:a7:76:21:93:e2:de:28:69:f9: f2:25:db:aa:e0:3f:7f:d8:73:cc:22:eb:36:96:ab:ba:82:2f: e6:0c:af:07:f4:d3:76:0a:20:33:46:89:c4:59:9f:10:cb:85: 87:cf:c2:e4:0f:df:bc:36:67:37:84:07:92:bc:69:06:2d:95: fc:53:b5:69:f4:55:34:ab:fb:49:be:2a:5d:68:ff:7b:83:0c: 29:88:1a:68:34:11:74:da:a9:77:dd:66:92:57:3a:3f:14:19: 83:ba:99:fb:2f:06:6a:41:3f:55:eb:7d:21:a7:08:a1:20:60: d6:2f:5f:dd:82:4d:4f:b4:eb:74:e7:3e:da:19:10:bf:fa:45: 1b:fc:3f:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdIP1XWHCljsQrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVhNWYwYzUtOTExMi00N2QzLTg1MzAtOWQxZWE1ZGZkNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DdNm5EVLzH3bxN3O7crn/b3FTEnxG9Xa0Z4 v7NBqcQZXQqaNZS5RkQjS+It5mvP9+zoUh4ob1kSPNOc/TWzxmKqD0VZR1Zrr4cW ZuHo5wX6ZFfG1Dpx09dO3gXuZSts6ESUSJr6Cx+Z8OSS4at2LmsJPGYVE4BFaPV5 LzL042FkIxmKJS9dcpL/fKrm2TxFkFvDyycb70tpoDw5jBhKx039a2TIoGe2rvjk LNWj6WgxalrhoCchY+FYlexXm/ZL7OgICecLz7kGwvgjACrNTxDyykydWPQNdLfN IyZNb8aR7HJQNCVnhsbLnZCWYcoQAldar2cHfU1rqjzYIPH8NQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPeyQc72YrdYY3NKCOHIfZOuRP0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2I5ODYwN2MtMzEyZi0z YWRmLWE3NTQtMjkwYTMwMjYzYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMzjJnbI+nack6N9TrdAZVoFWUB5Bkqc4D+h2HCyqygU5IMCn68tZ D1kWHSdzPIBvfBNYxkq4xthh+Dt5QJl8i5gGzhzEx4u6Tvpk3IPlLsjaEVJVlweY aYzm/g5rwNemeEGdEohHRU2KeEghtSnq3t8ChbNBp3Yhk+LeKGn58iXbquA/f9hz zCLrNparuoIv5gyvB/TTdgogM0aJxFmfEMuFh8/C5A/fvDZnN4QHkrxpBi2V/FO1 afRVNKv7Sb4qXWj/e4MMKYgaaDQRdNqpd91mklc6PxQZg7qZ+y8GakE/Vet9IacI oSBg1i9f3YJNT7TrdOc+2hkQv/pFG/w/QA== -----END CERTIFICATE-----Generated at Tue Sep 29 00:53:56 2026 by rpki-client