$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa File: a2f09972-83a4-3240-871a-2619e0b0b11e.roa (raw, json) Hash identifier: EVjVgiW8IczbGKiXqwkmZd01KXtWhBSVGUMyupiGMQo= Subject key identifier: FE:03:89:4F:3C:01:19:A3:5E:EE:B0:7D:6C:1A:0D:ED:C6:11:88:4D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3DEC1482124101E91EAC40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8c:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ec:14:82:12:41:01:e9:1e:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fbe9a922-e6fa-4e99-aa52-703c08e272b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:5d:d1:2d:59:66:b3:29:51:fd:40:29:fe: 04:3f:a4:ce:f9:c4:e6:51:18:0a:24:e8:81:b5:16: d2:2a:91:84:f9:59:d2:b7:65:2d:c3:96:74:ed:9c: 56:fd:77:49:79:dc:9b:04:11:bb:c1:dd:61:ee:67: 4c:5b:ea:39:36:03:67:ee:10:5b:b2:2c:fd:07:29: db:3b:7d:e7:b5:6b:11:29:da:20:30:a0:23:7e:a9: 96:26:8d:af:47:66:2f:71:5c:5c:d4:57:ba:3c:95: 27:0e:b1:b1:f3:f2:e6:25:e9:d7:99:1e:28:9a:d4: 73:12:9b:01:e4:18:f3:47:40:8f:97:d5:52:51:00: a6:ca:94:98:d4:58:e4:4d:f6:9b:6e:08:9e:4e:79: 59:db:cd:85:38:c3:0c:58:62:2a:25:af:07:04:67: 15:ae:fa:e8:55:35:45:ed:f8:bd:36:2c:d7:73:8b: b6:23:cc:a9:15:b8:ac:9e:66:43:b1:6c:0a:9a:42: 34:ed:59:ee:af:5c:19:ed:e7:c9:65:39:e6:05:cb: 7c:16:fa:5e:47:1e:a5:90:e1:04:20:d4:ee:d6:69: 9c:91:4a:ba:df:28:22:d4:f4:7b:3d:03:1f:0e:d3: 3e:9c:59:09:33:80:2b:e6:d9:6a:03:8a:d0:8f:f1: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:03:89:4F:3C:01:19:A3:5E:EE:B0:7D:6C:1A:0D:ED:C6:11:88:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:44:ee:11:5d:75:b1:c2:8a:91:54:e6:5c:9c:70:5c:5f:4c: 4a:a6:b1:33:04:25:94:9c:e4:40:63:d1:f9:19:17:e5:51:45: d2:92:6b:60:bc:3a:97:0e:77:6d:83:ff:70:a9:14:3d:d1:7b: f9:fb:ca:9d:09:5c:8a:18:5b:26:d2:85:dc:31:aa:44:92:62: c7:ef:db:e9:dc:7e:c3:ab:77:89:7a:36:b1:59:86:77:a7:af: b4:1d:14:40:3b:27:a8:f4:a8:af:da:93:44:dd:f6:dc:af:b6: 08:c9:f0:cc:ca:5b:be:70:2f:9c:36:09:19:a3:cb:8d:34:a7: cb:1e:ab:14:45:24:8d:d1:41:3d:09:35:8d:bf:10:9a:89:4a: 39:52:64:ee:5c:d5:24:27:79:db:d2:1d:21:c7:ba:c5:1a:2f: 3e:5b:35:5a:27:43:2d:6a:1e:63:35:95:1c:e0:18:b3:44:a8: c0:d1:a6:78:3c:21:e2:8b:7b:da:2b:81:34:14:04:18:be:bc: 89:7a:24:19:4d:41:f6:a4:3a:8d:f5:b0:6a:28:2a:80:23:af: 08:85:1a:7e:78:8c:e2:9c:ea:7d:c0:0b:69:17:ef:5a:6f:63: 0e:c7:67:b5:41:07:18:63:6e:5f:48:03:63:53:7e:ba:df:2a: eb:20:27:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPewUghJBAekerEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmJlOWE5MjItZTZmYS00ZTk5LWFhNTItNzAzYzA4ZTI3MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Jd0S1ZZrMpUf1AKf4EP6TO+cTmURgKJOiB tRbSKpGE+VnSt2Utw5Z07ZxW/XdJedybBBG7wd1h7mdMW+o5NgNn7hBbsiz9Bynb O33ntWsRKdogMKAjfqmWJo2vR2YvcVxc1Fe6PJUnDrGx8/LmJenXmR4omtRzEpsB 5BjzR0CPl9VSUQCmypSY1FjkTfabbgieTnlZ282FOMMMWGIqJa8HBGcVrvroVTVF 7fi9NizXc4u2I8ypFbisnmZDsWwKmkI07Vnur1wZ7efJZTnmBct8FvpeRx6lkOEE INTu1mmckUq63ygi1PR7PQMfDtM+nFkJM4Ar5tlqA4rQj/GcpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP4DiU88ARmjXu6wfWwaDe3GEYhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmMDk5NzItODNhNC0z MjQwLTg3MWEtMjYxOWUwYjBiMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujEQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXkTuEV11scKKkVTmXJxwXF9MSqaxMwQllJzkQGPR+RkX5VFF0pJr YLw6lw53bYP/cKkUPdF7+fvKnQlcihhbJtKF3DGqRJJix+/b6dx+w6t3iXo2sVmG d6evtB0UQDsnqPSor9qTRN323K+2CMnwzMpbvnAvnDYJGaPLjTSnyx6rFEUkjdFB PQk1jb8QmolKOVJk7lzVJCd529IdIce6xRovPls1WidDLWoeYzWVHOAYs0SowNGm eDwh4ot72iuBNBQEGL68iXokGU1B9qQ6jfWwaigqgCOvCIUafniM4pzqfcALaRfv Wm9jDsdntUEHGGNuX0gDY1N+ut8q6yAn7Q== -----END CERTIFICATE-----Generated at Sun Sep 27 05:36:41 2026 by rpki-client