$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa File: 3d5a4791-0867-39ae-aad3-f703055da2e1.roa (raw, json) Hash identifier: 2rh7FR4/5y08CtlAItyZOirA689WlDiANAUs+CyAEYs= Subject key identifier: 55:67:DB:EE:1C:7C:59:60:E3:9C:71:1B:A0:19:A5:56:E8:46:07:77 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497467F16466FD0F6B4A3B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:67:f1:64:66:fd:0f:6b:4a:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f82d84ed-a4bf-428a-887e-4f93bf3d3cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:34:a3:a4:ce:10:ea:0c:35:41:0c:06:01:40: a1:8b:86:7d:87:cc:29:23:90:e9:a1:dd:f3:71:ea: e7:58:b1:01:6c:f1:17:c5:17:2c:c1:03:2a:51:41: ef:37:bc:f8:2b:f3:30:7d:ab:d2:85:16:2e:ed:2f: cb:a8:a0:d8:39:0b:ea:7d:2b:c8:d6:62:39:a2:79: 44:bc:d5:86:5d:14:63:bf:e6:1d:89:7c:bd:15:05: 91:d1:99:f0:5f:b8:86:af:89:12:cf:60:dc:98:4b: ee:b2:48:69:f7:eb:fa:61:e9:61:0a:aa:86:e5:cf: 86:62:8a:d2:12:0b:cf:58:51:69:72:76:24:35:43: c5:57:33:25:2c:f2:9c:e9:8b:9a:f3:9e:ba:58:e4: e8:2e:42:16:76:e4:8b:71:f0:c1:14:e2:17:a9:4a: aa:db:ca:50:5b:d3:7d:32:48:88:d2:07:78:f5:2f: 2a:b2:37:3a:14:ba:fe:9e:59:dd:99:d8:c0:ff:63: d7:d4:48:4b:2b:dd:26:ae:db:61:bf:92:24:fa:e7: c4:a1:78:9d:73:41:e6:ea:f9:bc:00:c5:ca:67:51: 36:7d:e2:2a:2d:7f:38:29:9c:ec:09:68:55:48:57: 5e:05:ad:c5:d0:c3:64:ed:b5:e5:4a:e2:11:4e:99: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:DB:EE:1C:7C:59:60:E3:9C:71:1B:A0:19:A5:56:E8:46:07:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4a:c1:d0:d5:d7:ff:4b:11:a7:75:05:be:3e:f2:01:5c:df: e9:d7:5a:9a:a1:85:fa:7a:9b:e8:a6:ba:b6:61:ac:15:de:5b: fe:2c:1e:d8:ab:ca:0a:b9:82:ad:38:03:23:56:c5:12:c1:27: ae:4d:13:cf:49:5e:b5:18:f4:8c:43:66:d0:4b:17:64:93:5f: 09:cc:32:5c:a7:0c:0c:1d:f8:d7:3e:39:07:2f:b2:b8:97:5d: 23:06:02:17:c7:a3:a6:d4:d2:e3:f8:0b:78:65:57:c1:3f:15: 86:b7:51:74:06:50:73:9b:5c:8d:0a:c4:50:53:f4:48:11:77: 96:33:f8:42:f3:38:20:6b:6a:d5:6a:12:0c:0b:bb:0d:b4:0e: d1:c9:89:5f:1d:1a:6b:3e:81:aa:6b:d3:15:48:ab:6b:a0:f6: a0:97:f0:99:28:b3:ad:cc:b2:74:0e:2a:4e:2a:ee:bb:0d:89: 1b:1a:95:99:cb:c6:61:50:c0:11:fc:e0:73:aa:0d:2a:c3:ed: 53:22:17:45:b1:e5:33:bd:55:8e:2f:25:c1:59:36:9a:cf:df: 9b:32:f1:cc:00:74:3f:db:fa:c2:cf:c2:61:d5:44:19:88:8b: 18:bc:6c:f6:d1:af:9f:93:3a:32:e5:86:f5:56:23:61:fe:0c: 1b:fe:09:8e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdGfxZGb9D2tKOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjgyZDg0ZWQtYTRiZi00MjhhLTg4N2UtNGY5M2JmM2QzY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjSjpM4Q6gw1QQwGAUChi4Z9h8wpI5Dpod3z cernWLEBbPEXxRcswQMqUUHvN7z4K/MwfavShRYu7S/LqKDYOQvqfSvI1mI5onlE vNWGXRRjv+YdiXy9FQWR0ZnwX7iGr4kSz2DcmEvuskhp9+v6YelhCqqG5c+GYorS EgvPWFFpcnYkNUPFVzMlLPKc6Yua8566WOToLkIWduSLcfDBFOIXqUqq28pQW9N9 MkiI0gd49S8qsjc6FLr+nlndmdjA/2PX1EhLK90mrtthv5Ik+ufEoXidc0Hm6vm8 AMXKZ1E2feIqLX84KZzsCWhVSFdeBa3F0MNk7bXlSuIRTpnWKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFVn2+4cfFlg45xxG6AZpVboRgd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Q1YTQ3OTEtMDg2Ny0z OWFlLWFhZDMtZjcwMzA1NWRhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWkrB0NXX/0sRp3UFvj7yAVzf6ddamqGF+nqb6Ka6tmGsFd5b/iwe 2KvKCrmCrTgDI1bFEsEnrk0Tz0letRj0jENm0EsXZJNfCcwyXKcMDB341z45By+y uJddIwYCF8ejptTS4/gLeGVXwT8VhrdRdAZQc5tcjQrEUFP0SBF3ljP4QvM4IGtq 1WoSDAu7DbQO0cmJXx0aaz6BqmvTFUira6D2oJfwmSizrcyydA4qTiruuw2JGxqV mcvGYVDAEfzgc6oNKsPtUyIXRbHlM71Vji8lwVk2ms/fmzLxzAB0P9v6ws/CYdVE GYiLGLxs9tGvn5M6MuWG9VYjYf4MG/4Jjg== -----END CERTIFICATE-----Generated at Mon Sep 28 06:16:24 2026 by rpki-client