$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa File: 7991b3d4-102a-3e92-9a21-d22eda3d7344.roa (raw, json) Hash identifier: bfxOj3meM01Dqo+WNPi+uLtNP4LgBlvDMJeI+VcoUhY= Subject key identifier: 06:24:DB:DE:C9:70:59:AA:6F:76:7E:C1:72:19:4B:E0:61:72:2A:2C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4989DA4D66F4CA40E315A520 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8a:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:da:4d:66:f4:ca:40:e3:15:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d08dc2ad-ddab-40d2-9097-afa33fd9aaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:ba:ed:55:3d:de:31:00:8c:21:33:98:ff: 33:b4:14:b6:60:29:a3:15:66:16:e7:ad:81:1a:2a: 45:5f:12:c3:a0:fd:9e:5f:33:17:08:fa:5e:5a:2a: 71:10:13:48:4c:ed:e0:0c:9b:a4:cb:6e:f4:a5:64: 76:1c:f5:fa:2e:86:86:69:44:42:f4:c6:f2:27:c5: cc:e0:b3:f6:6d:73:93:51:44:98:f6:e8:d9:13:3d: 0e:01:d9:95:72:c3:24:ec:35:66:4c:18:e8:68:f6: 2a:ae:72:72:24:c9:e5:0d:87:8b:2d:e4:73:01:7f: 2d:cd:ae:93:87:3a:7b:fb:98:99:9c:5d:be:11:a6: fd:72:cd:7f:b0:37:58:af:42:30:02:a1:52:93:dd: b9:b9:0f:fc:ca:b3:7d:c3:24:89:6b:1d:a8:af:b0: d7:52:4a:ef:c1:6f:ac:53:e1:ac:4c:77:cb:c2:0f: ff:b2:1f:f0:87:fa:ec:ef:84:ce:fe:1e:f5:41:b9: 6d:6a:c0:be:4f:e9:09:be:25:fb:40:e9:4c:95:d2: 21:6c:5b:63:b5:ae:ab:66:65:8a:a1:af:1f:82:31: 57:51:91:08:e3:99:e3:3e:2f:a3:65:92:f6:46:7d: bd:b6:0e:29:08:0e:56:a3:72:57:ac:63:ec:8e:09: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:24:DB:DE:C9:70:59:AA:6F:76:7E:C1:72:19:4B:E0:61:72:2A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7991b3d4-102a-3e92-9a21-d22eda3d7344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:03:2b:fc:e0:7d:66:32:a6:17:b4:bd:c0:96:94:92:09:b8: 65:cc:99:9a:f9:ee:f6:71:22:28:18:a7:55:f7:d0:58:52:d1: 31:0b:9f:d0:0f:f7:60:75:3f:0f:c3:68:5b:b8:c7:88:41:6a: a9:82:ac:d7:44:ac:ed:97:9c:dd:10:ec:de:8b:bb:99:56:d8: ec:55:2b:b9:f5:1c:01:56:fa:ca:f0:f0:45:96:2d:4f:88:22: ef:79:8b:a4:14:80:87:6a:4d:83:e7:e6:0a:64:5c:03:6b:7f: 84:fe:2a:b5:57:ed:66:b5:b8:65:7f:45:21:9d:02:ae:43:2e: 99:43:5b:96:ff:40:d3:69:8c:a7:fe:dc:4c:45:a7:3e:db:18: 89:4e:0b:ea:7d:f3:23:58:43:08:5d:1a:a9:84:0b:70:b9:21: f6:6f:2d:ee:5a:34:29:db:15:b2:c8:84:50:65:43:74:5e:4e: 1f:21:77:6f:74:59:de:85:a1:95:19:38:41:42:06:af:dd:23: ec:e5:44:7d:84:d3:52:b7:18:7a:4d:68:ff:57:67:cd:d3:47: ea:83:cb:dd:7f:33:ac:f5:6b:71:8d:b6:b3:bf:79:a2:8a:b1: af:2a:de:37:f3:11:23:4b:1a:7c:a1:a4:07:37:ad:8a:db:79: 28:21:5f:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JidpNZvTKQOMVpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDA4ZGMyYWQtZGRhYi00MGQyLTkwOTctYWZhMzNmZDlhYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7667VU93jEAjCEzmP8ztBS2YCmjFWYW562B GipFXxLDoP2eXzMXCPpeWipxEBNITO3gDJuky270pWR2HPX6LoaGaURC9MbyJ8XM 4LP2bXOTUUSY9ujZEz0OAdmVcsMk7DVmTBjoaPYqrnJyJMnlDYeLLeRzAX8tza6T hzp7+5iZnF2+Eab9cs1/sDdYr0IwAqFSk925uQ/8yrN9wySJax2or7DXUkrvwW+s U+GsTHfLwg//sh/wh/rs74TO/h71QbltasC+T+kJviX7QOlMldIhbFtjta6rZmWK oa8fgjFXUZEI45njPi+jZZL2Rn29tg4pCA5Wo3JXrGPsjgmAgQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAYk297JcFmqb3Z+wXIZS+BhciosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzk5MWIzZDQtMTAyYS0z ZTkyLTlhMjEtZDIyZWRhM2Q3MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUQMr/OB9ZjKmF7S9wJaUkgm4ZcyZmvnu9nEiKBinVffQWFLRMQuf 0A/3YHU/D8NoW7jHiEFqqYKs10Ss7Zec3RDs3ou7mVbY7FUrufUcAVb6yvDwRZYt T4gi73mLpBSAh2pNg+fmCmRcA2t/hP4qtVftZrW4ZX9FIZ0CrkMumUNblv9A02mM p/7cTEWnPtsYiU4L6n3zI1hDCF0aqYQLcLkh9m8t7lo0KdsVssiEUGVDdF5OHyF3 b3RZ3oWhlRk4QUIGr90j7OVEfYTTUrcYek1o/1dnzdNH6oPL3X8zrPVrcY22s795 ooqxryreN/MRI0safKGkBzetitt5KCFftA== -----END CERTIFICATE-----Generated at Tue Sep 29 12:38:49 2026 by rpki-client