$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa File: a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa (raw, json) Hash identifier: pi7Zsg/Oohem1DJVmbVw4kK020fzNKVllgsB9FRs668= Subject key identifier: 43:EE:AC:A2:F8:BB:CA:E8:F3:49:10:17:6B:A6:04:88:BA:12:5D:F4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4972A6AB03F307686604D040 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:c000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a6:ab:03:f3:07:68:66:04:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78818dc2-9d4b-48ad-9b50-a9bd75284014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:30:10:ea:f0:e2:ef:4a:39:51:fa:48:71: 60:35:7d:2e:74:49:9a:df:92:8c:89:a3:33:52:67: 24:9f:a2:db:4e:0d:5a:72:6a:19:06:39:73:87:a8: bc:a4:b3:ed:22:d2:57:bf:22:8d:39:4c:3a:ed:1c: ff:cf:5a:e8:03:37:4a:c4:4d:1b:d8:70:c5:87:1b: d2:c6:06:f8:a3:0b:c2:e1:65:d2:6a:e5:c2:d0:6f: 4c:26:dc:50:ce:cc:61:eb:63:ae:d7:20:66:8f:ce: bc:ec:66:16:91:e7:d1:80:a6:99:32:d6:61:f7:5b: 44:c4:6c:e4:ba:fe:f1:0e:ac:85:5a:03:e3:08:29: cf:fc:5e:36:db:49:53:14:27:71:77:1d:7a:76:b4: 20:9f:ec:18:23:8a:1f:2b:53:ba:82:be:6f:52:1b: 3f:9f:ca:b9:cd:1a:d1:3a:5a:27:60:f2:4d:cd:68: 18:7e:89:71:cb:8f:a5:1d:ad:10:29:34:58:8e:01: 02:0d:87:2d:b7:ba:e7:5d:f1:ee:49:33:46:cd:d3: 99:14:fe:ac:34:77:1e:25:85:fc:23:4b:86:3e:9e: f5:df:a1:61:63:e8:87:a1:89:31:c8:bb:8b:df:03: 2e:05:2f:1c:45:aa:8c:11:36:62:c1:ff:2a:8d:ba: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:AC:A2:F8:BB:CA:E8:F3:49:10:17:6B:A6:04:88:BA:12:5D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3abdce7-938a-32b3-8fa8-2b2b207e59d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:c000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:23:7f:36:70:ce:4b:ad:15:8f:dc:ca:ed:a0:40:83:6c: a2:8b:0c:8f:42:22:47:17:ee:a3:5a:e3:e4:e6:21:b5:69:4b: 36:09:e5:80:2a:7a:ab:50:02:cc:92:f0:8a:55:ec:aa:1e:bc: 24:d3:db:42:9c:dd:77:0c:2e:c8:a2:fc:16:55:0e:4b:27:78: 9d:9f:8a:b7:fc:f3:94:95:86:c9:ba:a6:b0:96:e5:5a:2a:be: 9b:d7:61:31:dc:f2:c1:f6:90:09:49:f0:1e:e2:d0:a8:ee:87: 6b:e9:1b:04:30:57:d9:58:56:38:fd:67:9a:cc:ab:24:93:af: 30:c0:c6:55:46:bd:fc:f7:65:c7:5c:f9:ca:67:83:64:ee:60: f1:60:5d:53:d7:21:01:1a:f4:b1:17:b8:cc:07:48:cd:75:23: 49:ce:16:20:70:ca:e4:52:ff:88:f7:9c:5b:3c:1a:de:20:d0: 47:da:83:ee:69:4c:0c:f8:45:23:ca:02:79:24:9b:02:24:a8: 9f:a6:2c:e0:77:71:75:88:40:bc:46:66:1a:a9:da:da:bc:40: a7:6d:8b:7e:86:06:32:a1:b2:55:6b:81:25:d1:0c:bb:ef:a8: e2:df:ed:02:09:88:1a:01:49:ea:98:d9:2f:47:92:47:35:c9: 83:83:22:73 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcqarA/MHaGYE0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg4MThkYzItOWQ0Yi00OGFkLTliNTAtYTliZDc1Mjg0MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCkwEOrw4u9KOVH6SHFgNX0udEma35KMiaMz Umckn6LbTg1acmoZBjlzh6i8pLPtItJXvyKNOUw67Rz/z1roAzdKxE0b2HDFhxvS xgb4owvC4WXSauXC0G9MJtxQzsxh62Ou1yBmj8687GYWkefRgKaZMtZh91tExGzk uv7xDqyFWgPjCCnP/F4220lTFCdxdx16drQgn+wYI4ofK1O6gr5vUhs/n8q5zRrR OlonYPJNzWgYfolxy4+lHa0QKTRYjgECDYctt7rnXfHuSTNGzdOZFP6sNHceJYX8 I0uGPp7136FhY+iHoYkxyLuL3wMuBS8cRaqMETZiwf8qjbqDQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEPurKL4u8ro80kQF2umBIi6El30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNhYmRjZTctOTM4YS0z MmIzLThmYTgtMmIyYjIwN2U1OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHPojfzZwzkutFY/cyu2gQINsoosMj0IiRxfuo1rj5OYhtWlLNgnl gCp6q1ACzJLwilXsqh68JNPbQpzddwwuyKL8FlUOSyd4nZ+Kt/zzlJWGybqmsJbl Wiq+m9dhMdzywfaQCUnwHuLQqO6Ha+kbBDBX2VhWOP1nmsyrJJOvMMDGVUa9/Pdl x1z5ymeDZO5g8WBdU9chARr0sRe4zAdIzXUjSc4WIHDK5FL/iPecWzwa3iDQR9qD 7mlMDPhFI8oCeSSbAiSon6Ys4HdxdYhAvEZmGqna2rxAp22LfoYGMqGyVWuBJdEM u++o4t/tAgmIGgFJ6pjZL0eSRzXJg4Micw== -----END CERTIFICATE-----Generated at Sat Sep 26 18:13:53 2026 by rpki-client