$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa File: 70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa (raw, json) Hash identifier: P4kYGzHt1FpGT0uaUqwgMeQExK4mSPM8AdV++KY6plI= Subject key identifier: 44:76:47:F4:2B:88:74:0A:F5:F5:26:D8:3D:D0:79:14:37:31:56:C7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497394A456E73E4452D73F60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:94:a4:56:e7:3e:44:52:d7:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24b87073-0dd9-4235-aba8-ee8080f3fb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:da:45:8d:cc:4d:49:08:84:e7:96:2d:ed: 8f:b4:80:df:b9:07:a6:7e:14:33:af:94:d3:53:45: 70:28:3a:f4:e9:e2:71:16:27:28:d3:3c:88:c1:08: b0:ca:c8:a0:ee:a2:0f:65:63:2c:3f:28:e1:90:43: b0:be:18:c5:e7:15:27:55:48:79:b2:6a:88:29:b8: 1c:81:a0:35:42:18:f9:ee:11:c2:d1:5b:82:19:87: 41:82:ac:84:63:90:10:4a:76:74:e6:1a:44:86:ce: 4d:80:76:e3:66:40:69:26:dd:61:3a:d2:c7:d5:aa: 44:18:55:45:16:c5:12:1d:6f:84:e8:99:1e:ea:e2: 67:e1:32:84:0b:91:72:20:b1:0c:5e:38:8b:98:4e: 33:5e:c6:4e:11:43:a8:e4:54:8a:3a:6e:15:fe:5d: 97:a5:42:a9:9c:71:3e:5f:8d:37:d8:7c:0b:ef:06: 13:66:98:c6:07:79:e8:9f:07:5b:a0:f9:1f:8e:bf: 95:fe:5a:f9:bc:90:1d:bd:0c:8d:15:d5:76:2f:0f: 25:e9:27:77:19:24:42:2c:9d:8c:6d:f1:55:72:cc: e1:85:8c:f4:d6:18:ea:0a:1a:c3:3f:86:71:72:55: 02:b7:b1:c9:26:8c:6c:eb:3c:71:af:49:70:b0:ed: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:47:F4:2B:88:74:0A:F5:F5:26:D8:3D:D0:79:14:37:31:56:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/70e66e26-5bcf-3125-81e5-f60c38db0f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:11:e4:1c:01:1c:b2:90:d3:ca:75:a9:3d:c7:52:c9:d0:fe: 5c:e9:9c:7c:8c:17:d1:d7:27:a5:b0:f2:65:7d:ce:15:a9:42: 32:90:76:42:ae:ed:03:84:9a:78:a5:7a:5e:59:84:74:06:cc: 7e:e3:eb:19:55:59:e4:15:33:d9:37:41:50:0c:a8:34:bb:88: f5:28:0c:40:ad:8c:77:f9:62:c6:23:b2:9a:d2:69:1f:7f:74: 5f:9c:4e:86:f1:c7:e9:6c:bd:8f:5c:54:5d:2b:8a:5f:3f:c7: df:3b:f7:8c:38:fb:94:39:c4:a0:5d:fd:03:46:e0:56:c7:41: 21:ee:4b:7f:19:68:58:44:2a:90:5e:e2:72:19:e1:6c:93:95: 06:eb:ef:a2:b4:ae:8f:c4:b6:d3:6f:18:f3:64:e2:38:e2:b2: 55:6c:de:98:5b:bf:1c:02:8b:dc:3a:70:05:9f:c0:f6:7d:da: dd:87:db:0b:b1:5e:e4:d7:c7:93:93:73:0a:d9:07:1e:ab:d7: c1:bf:5b:dc:ec:91:aa:e0:e7:29:0e:07:e2:e6:7a:70:0a:d6: c3:ff:be:4b:9d:3a:d3:3e:35:b8:e5:41:46:bb:02:4f:3b:3d: 6b:ff:c8:db:28:73:8b:db:f1:b4:7b:c7:4d:68:b6:5c:d8:bc: 40:5d:bc:35 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc5SkVuc+RFLXP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRiODcwNzMtMGRkOS00MjM1LWFiYTgtZWU4MDgwZjNmYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BHaRY3MTUkIhOeWLe2PtIDfuQemfhQzr5TT U0VwKDr06eJxFico0zyIwQiwysig7qIPZWMsPyjhkEOwvhjF5xUnVUh5smqIKbgc gaA1Qhj57hHC0VuCGYdBgqyEY5AQSnZ05hpEhs5NgHbjZkBpJt1hOtLH1apEGFVF FsUSHW+E6Jke6uJn4TKEC5FyILEMXjiLmE4zXsZOEUOo5FSKOm4V/l2XpUKpnHE+ X4032HwL7wYTZpjGB3nonwdboPkfjr+V/lr5vJAdvQyNFdV2Lw8l6Sd3GSRCLJ2M bfFVcszhhYz01hjqChrDP4ZxclUCt7HJJoxs6zxxr0lwsO2g7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFER2R/QriHQK9fUm2D3QeRQ3MVbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzBlNjZlMjYtNWJjZi0z MTI1LTgxZTUtZjYwYzM4ZGIwZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADhHkHAEcspDTynWpPcdSydD+XOmcfIwX0dcnpbDyZX3OFalCMpB2 Qq7tA4SaeKV6XlmEdAbMfuPrGVVZ5BUz2TdBUAyoNLuI9SgMQK2Md/lixiOymtJp H390X5xOhvHH6Wy9j1xUXSuKXz/H3zv3jDj7lDnEoF39A0bgVsdBIe5LfxloWEQq kF7ichnhbJOVBuvvorSuj8S2028Y82TiOOKyVWzemFu/HAKL3DpwBZ/A9n3a3Yfb C7Fe5NfHk5NzCtkHHqvXwb9b3OyRquDnKQ4H4uZ6cArWw/++S5060z41uOVBRrsC Tzs9a//I2yhzi9vxtHvHTWi2XNi8QF28NQ== -----END CERTIFICATE-----Generated at Sun Oct 4 22:13:07 2026 by rpki-client