$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/436b80bf-e20c-35a0-8a05-e7570e389520.roa File: 436b80bf-e20c-35a0-8a05-e7570e389520.roa (raw, json) Hash identifier: IK2nhaVyWDaMIz+iG9OrCUQFS0ZjM9Cl7A1J+sGSC/A= Subject key identifier: 58:4D:78:72:90:86:84:98:D4:F8:C9:ED:98:1F:E7:5B:4B:2A:3E:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4973561624115F8416410E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/436b80bf-e20c-35a0-8a05-e7570e389520.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8e:4800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:56:16:24:11:5f:84:16:41:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=278f6afd-5095-4aac-8f0d-5a884ed796c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:a7:e5:9f:ec:45:c8:8c:6b:34:4a:93:3d: 68:4e:6e:36:1e:e0:28:51:fd:af:9c:68:2a:1e:3a: da:96:87:ce:41:f6:d1:3c:e8:8e:1c:00:bc:1e:c4: c9:df:29:f4:c5:da:f6:ec:11:38:76:e6:7d:ad:40: 2d:eb:ff:1d:db:d8:52:75:70:2a:e4:c6:9d:c6:07: f7:86:ec:e1:1c:3b:90:bc:e0:ca:36:c3:7d:14:79: 6c:88:1f:c8:df:00:2d:52:46:83:10:b3:40:1d:95: ef:63:e7:cb:af:93:de:4f:8c:45:a5:cc:f9:45:68: 7d:e8:cf:0a:82:eb:aa:5c:7f:00:59:ef:59:34:dc: 2a:6c:87:85:2b:87:ce:ff:7f:7d:6c:db:38:d6:36: ea:1a:30:e3:fb:13:ce:1b:4c:30:3e:f3:8a:a4:b4: b9:d7:58:bc:99:71:fb:ec:4d:62:6a:e1:42:00:b4: 73:c8:16:d0:5f:95:36:97:7b:1e:d7:aa:67:72:e0: 8d:ec:8b:ef:3c:d8:de:b1:e7:36:bb:c2:75:1b:cb: 80:d2:f6:cb:3e:0d:6c:3e:71:46:26:b5:6c:2b:9e: 6f:18:86:5d:65:26:ae:df:c7:4d:52:c5:77:3d:9d: 13:59:f5:7e:13:2e:d4:55:08:1a:37:24:e0:5c:52: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4D:78:72:90:86:84:98:D4:F8:C9:ED:98:1F:E7:5B:4B:2A:3E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/436b80bf-e20c-35a0-8a05-e7570e389520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:4800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cc:28:be:bd:06:2c:ae:0c:5e:e0:34:ec:42:13:d1:0f:cb: 02:37:0d:18:2f:c5:77:72:43:31:d0:d9:82:cf:3a:32:d7:10: 92:1a:9d:7d:81:63:24:65:3c:8a:c4:e3:17:39:bb:0c:51:0b: 15:80:d3:2c:5b:8b:2e:76:b9:97:fc:82:ba:73:4c:98:27:67: 12:06:d7:d6:77:47:51:83:67:62:1c:62:e7:58:a4:02:4c:b3: de:aa:e3:d1:3e:83:e9:74:f3:be:73:53:e6:67:04:c2:3a:42: f3:61:7b:6a:f6:da:e5:d3:ff:a7:80:15:e2:f2:e3:7f:04:45: 9d:d7:26:08:f3:b6:f8:08:c9:43:59:b1:0a:6b:c2:bd:47:86: 8e:56:c9:59:a9:d2:52:11:da:53:60:b6:f1:34:5f:66:28:77: 6f:d9:ed:82:21:f7:88:b4:6f:0b:eb:38:4c:08:e9:b2:a9:6d: c8:1c:d3:b6:dd:46:c7:1d:e0:5f:1b:0f:de:b5:70:44:5b:d6: df:49:a6:c8:52:e9:43:ab:1c:5b:b2:35:34:aa:f4:38:71:27: 8d:c4:59:9b:cb:65:45:bd:f2:9c:d6:40:51:9d:62:8d:1b:7e: 07:94:41:e4:36:ed:be:c7:be:54:68:ad:af:ad:58:9e:39:cb: bc:b5:c9:94 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc1YWJBFfhBZBDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjc4ZjZhZmQtNTA5NS00YWFjLThmMGQtNWE4ODRlZDc5NmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluKn5Z/sRciMazRKkz1oTm42HuAoUf2vnGgq HjralofOQfbRPOiOHAC8HsTJ3yn0xdr27BE4duZ9rUAt6/8d29hSdXAq5Madxgf3 huzhHDuQvODKNsN9FHlsiB/I3wAtUkaDELNAHZXvY+fLr5PeT4xFpcz5RWh96M8K guuqXH8AWe9ZNNwqbIeFK4fO/399bNs41jbqGjDj+xPOG0wwPvOKpLS511i8mXH7 7E1iauFCALRzyBbQX5U2l3se16pncuCN7IvvPNjesec2u8J1G8uA0vbLPg1sPnFG JrVsK55vGIZdZSau38dNUsV3PZ0TWfV+Ey7UVQgaNyTgXFIS/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFhNeHKQhoSY1PjJ7Zgf51tLKj4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDM2YjgwYmYtZTIwYy0z NWEwLThhMDUtZTc1NzBlMzg5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujkgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALMwovr0GLK4MXuA07EIT0Q/LAjcNGC/Fd3JDMdDZgs86MtcQkhqd fYFjJGU8isTjFzm7DFELFYDTLFuLLna5l/yCunNMmCdnEgbX1ndHUYNnYhxi51ik Akyz3qrj0T6D6XTzvnNT5mcEwjpC82F7avba5dP/p4AV4vLjfwRFndcmCPO2+AjJ Q1mxCmvCvUeGjlbJWanSUhHaU2C28TRfZih3b9ntgiH3iLRvC+s4TAjpsqltyBzT tt1Gxx3gXxsP3rVwRFvW30mmyFLpQ6scW7I1NKr0OHEnjcRZm8tlRb3ynNZAUZ1i jRt+B5RB5Dbtvse+VGitr61YnjnLvLXJlA== -----END CERTIFICATE-----Generated at Fri Sep 25 10:46:24 2026 by rpki-client