$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa File: 5af117be-6302-321b-9b42-6f7e31c1219f.roa (raw, json) Hash identifier: 4Mgz7X+ko7RXmbuJ6janQuh9paIEYq3HRnoXVMN7T1k= Subject key identifier: 2C:BA:AD:D2:CF:52:96:55:93:95:FC:92:DA:E6:F6:45:4E:09:47:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498BA54A5D410B61EA2BC080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a5:4a:5d:41:0b:61:ea:2b:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d547a0ff-ca70-4c77-b2eb-8d245180cefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:5c:d2:67:54:59:bb:20:58:73:62:d1:70: 80:fd:1a:c9:b7:46:68:08:8f:95:ce:3c:70:73:32: 29:d4:89:ea:d1:3d:0c:09:39:8c:7e:f8:65:57:1d: af:6a:22:df:1d:3d:74:99:04:20:41:1f:69:fb:49: 5b:11:ac:51:cc:94:9f:9e:e4:82:19:72:e7:8c:5d: 8a:c3:b5:a0:73:12:5d:07:d3:b1:86:58:e6:2f:b3: c3:2a:ab:27:bf:c9:25:f0:4b:11:3a:e1:1e:5d:ff: 88:34:e8:3b:bf:e8:e4:64:8d:26:29:2d:07:f4:01: 5b:94:e5:43:a1:f7:ff:1d:96:62:77:01:57:81:ba: 89:15:d9:55:56:8c:d7:73:c5:b8:32:1c:ce:18:60: 1b:ac:ea:ef:6c:36:3a:87:8b:1a:e2:bc:4f:df:1f: 38:42:aa:37:f3:04:40:2a:41:9a:dc:00:6d:ef:48: 29:66:12:a9:59:4f:f3:ff:91:c6:12:e7:84:32:4e: 40:8c:86:05:0e:c8:2e:47:f0:56:22:b4:3a:df:cf: eb:45:c0:5c:0b:3d:f4:12:44:a5:33:e7:8e:90:67: 4e:2f:01:69:57:28:cc:87:5b:7a:86:ef:8d:20:f2: 4e:41:39:5b:ff:9a:ae:97:bb:15:fa:c3:33:9e:ad: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:AD:D2:CF:52:96:55:93:95:FC:92:DA:E6:F6:45:4E:09:47:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:ab:f9:bc:03:db:99:d9:05:63:bf:07:86:cc:12:91:7d: a9:87:88:6a:ae:0a:b5:42:65:e0:a9:10:ef:24:36:03:cf:94: 56:11:3a:2e:36:14:b9:42:d8:13:d8:a3:21:98:4e:d8:4b:ce: 30:14:de:b9:6a:38:83:9a:c4:64:59:25:60:9b:4e:33:4c:a6: a8:c3:08:a7:4a:02:35:f2:14:6b:f5:ce:33:e9:35:4d:64:4b: 74:a5:9b:91:bb:24:03:9a:9e:04:cd:c4:a1:f0:bb:26:ec:c4: db:32:de:6b:f2:11:54:2e:66:55:ee:3e:3a:03:2b:e0:2f:e2: bc:2a:c0:94:fa:0f:f2:ec:87:20:e1:d9:15:b6:9d:d5:35:5d: 90:57:3e:b4:94:4c:30:32:7d:0f:cc:f7:db:7f:3e:f9:12:64: 60:82:db:f3:85:aa:f4:88:cb:7f:63:77:8a:e5:62:04:33:24: 30:ef:19:0c:49:52:a3:31:5c:65:69:ee:06:5f:45:68:ba:4c: f4:78:55:7f:8c:ce:c2:0e:cf:35:97:14:f8:01:1b:6b:08:d5: df:6b:9a:fe:a2:ae:69:d9:c4:8e:3a:4e:a8:a3:b9:87:f0:c9: 44:51:78:a4:d9:7b:21:d7:27:e0:cc:12:d8:0d:32:47:c3:f7: 69:25:aa:f0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Ji6VKXUELYeorwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU0N2EwZmYtY2E3MC00Yzc3LWIyZWItOGQyNDUxODBjZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyFc0mdUWbsgWHNi0XCA/RrJt0ZoCI+Vzjxw czIp1Inq0T0MCTmMfvhlVx2vaiLfHT10mQQgQR9p+0lbEaxRzJSfnuSCGXLnjF2K w7WgcxJdB9OxhljmL7PDKqsnv8kl8EsROuEeXf+INOg7v+jkZI0mKS0H9AFblOVD off/HZZidwFXgbqJFdlVVozXc8W4MhzOGGAbrOrvbDY6h4sa4rxP3x84Qqo38wRA KkGa3ABt70gpZhKpWU/z/5HGEueEMk5AjIYFDsguR/BWIrQ638/rRcBcCz30EkSl M+eOkGdOLwFpVyjMh1t6hu+NIPJOQTlb/5qul7sV+sMznq22AwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCy6rdLPUpZVk5X8ktrm9kVOCUeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFmMTE3YmUtNjMwMi0z MjFiLTliNDItNmY3ZTMxYzEyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG6er+bwD25nZBWO/B4bMEpF9qYeIaq4KtUJl4KkQ7yQ2A8+UVhE6 LjYUuULYE9ijIZhO2EvOMBTeuWo4g5rEZFklYJtOM0ymqMMIp0oCNfIUa/XOM+k1 TWRLdKWbkbskA5qeBM3EofC7JuzE2zLea/IRVC5mVe4+OgMr4C/ivCrAlPoP8uyH IOHZFbad1TVdkFc+tJRMMDJ9D8z3238++RJkYILb84Wq9IjLf2N3iuViBDMkMO8Z DElSozFcZWnuBl9FaLpM9HhVf4zOwg7PNZcU+AEbawjV32ua/qKuadnEjjpOqKO5 h/DJRFF4pNl7Idcn4MwS2A0yR8P3aSWq8A== -----END CERTIFICATE-----Generated at Fri Oct 9 23:09:31 2026 by rpki-client