$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa File: a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa (raw, json) Hash identifier: YqzEwhfT9tzhGC4rQrM360ZGFCyk28TcA/VXvY2gkBg= Subject key identifier: 45:A7:A1:46:DD:52:EE:FF:AE:86:AB:CF:66:77:46:4C:4D:5D:59:29 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49743ECDFBA9E5FAF989A280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3e:cd:fb:a9:e5:fa:f9:89:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72a75c1f-3b02-4a4d-8db4-e7c82429f688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:78:bc:55:bd:18:2c:ce:bf:d2:ec:e4:ce: f1:d5:d1:1d:70:e4:31:07:1c:12:d8:cf:8c:78:ea: db:15:4d:83:be:3a:1f:92:88:58:bb:28:ef:71:06: ba:a0:ec:9a:0b:6b:04:8a:4e:bb:d5:4d:06:e3:ee: 96:d6:e9:4d:44:fa:d7:7a:7a:ce:26:af:eb:85:ff: 93:78:e4:c6:a8:0d:ca:01:79:d9:56:8c:25:a8:ec: ab:19:24:70:65:1d:c8:9c:69:24:c0:ee:03:b1:66: 43:1b:40:37:45:ed:d1:98:dc:2e:72:46:41:48:42: 17:fb:a7:9a:4a:ef:4f:8c:90:c3:ec:10:e3:ef:09: 3a:22:0a:8a:a0:60:16:6a:6d:7c:0c:41:61:f1:8c: 9c:27:72:17:1c:f3:4e:89:ce:6f:f6:de:2f:78:ab: f8:fd:5c:5f:57:37:94:8a:17:4e:6c:96:f9:3f:b3: b0:d8:e9:80:e4:ac:43:cd:9b:a5:0f:a7:e4:6b:87: 35:d1:38:2f:b5:5e:66:fb:4b:85:af:0e:b9:7d:ba: 10:72:0b:3c:35:58:57:99:23:bf:c8:5d:c8:17:bd: 91:db:5a:03:fe:90:f1:39:a9:24:d0:b3:63:91:0e: 8d:c7:c8:6d:29:ed:61:03:dc:0a:22:9b:46:5d:ef: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:A1:46:DD:52:EE:FF:AE:86:AB:CF:66:77:46:4C:4D:5D:59:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ae:5b:02:97:16:7f:eb:b3:db:30:74:52:87:19:45:b4:c9: 0f:9d:1f:ba:d5:c4:3f:d2:a7:9a:f7:27:47:af:77:d3:c2:73: 5c:3c:7f:cc:eb:f5:cd:c4:49:5d:6d:3e:44:a0:42:8f:32:a3: 4a:4b:cc:2d:3d:70:e4:3b:44:71:82:6e:4e:01:b7:d2:76:03: 2a:ae:63:a3:0a:5a:a3:29:68:32:86:7a:ec:d6:d5:7f:fe:9d: 0a:9b:dc:48:6d:5c:6a:da:dd:ef:87:5d:8d:d7:80:b6:11:65: ee:13:83:e6:84:bf:4f:ff:ca:8a:d2:e0:98:14:81:2e:a1:45: 51:51:5d:18:a0:1d:a5:17:21:25:cc:50:e9:15:d3:0e:71:6c: 2c:94:5f:d8:5d:3a:58:1c:c1:0a:0d:37:9e:15:8b:ae:6e:0a: bb:fa:d0:4e:d8:3e:5c:d1:70:68:91:ba:58:b6:76:6b:4c:6d: e1:50:e0:82:56:2f:55:38:f4:ef:7a:67:3a:39:c3:c3:b5:f1: 49:29:c1:f5:36:77:99:58:85:87:fe:77:34:59:fd:00:f4:c4: 4b:a9:8c:c8:4e:b7:a3:30:6e:11:86:9d:54:40:44:c5:e3:ce: 26:ad:5a:7b:35:8b:db:9c:75:f8:bd:83:f0:13:dc:2e:92:34: bc:08:f0:c1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdD7N+6nl+vmJooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJhNzVjMWYtM2IwMi00YTRkLThkYjQtZTdjODI0MjlmNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVp4vFW9GCzOv9Ls5M7x1dEdcOQxBxwS2M+M eOrbFU2DvjofkohYuyjvcQa6oOyaC2sEik671U0G4+6W1ulNRPrXenrOJq/rhf+T eOTGqA3KAXnZVowlqOyrGSRwZR3InGkkwO4DsWZDG0A3Re3RmNwuckZBSEIX+6ea Su9PjJDD7BDj7wk6IgqKoGAWam18DEFh8YycJ3IXHPNOic5v9t4veKv4/VxfVzeU ihdObJb5P7Ow2OmA5KxDzZulD6fka4c10TgvtV5m+0uFrw65fboQcgs8NVhXmSO/ yF3IF72R21oD/pDxOakk0LNjkQ6Nx8htKe1hA9wKIptGXe8p3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEWnoUbdUu7/roarz2Z3RkxNXVkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmYzUwYTktMGIzMS0z YWRiLWIyMTctNzM0MGIwMjM3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAN65bApcWf+uz2zB0UocZRbTJD50futXEP9KnmvcnR69308JzXDx/ zOv1zcRJXW0+RKBCjzKjSkvMLT1w5DtEcYJuTgG30nYDKq5jowpaoyloMoZ67NbV f/6dCpvcSG1catrd74ddjdeAthFl7hOD5oS/T//KitLgmBSBLqFFUVFdGKAdpRch JcxQ6RXTDnFsLJRf2F06WBzBCg03nhWLrm4Ku/rQTtg+XNFwaJG6WLZ2a0xt4VDg glYvVTj073pnOjnDw7XxSSnB9TZ3mViFh/53NFn9APTES6mMyE63ozBuEYadVEBE xePOJq1aezWL25x1+L2D8BPcLpI0vAjwwQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:14:06 2026 by rpki-client