$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a71f6be0-7a58-3095-b894-fc450ca9f8b1.roa File: a71f6be0-7a58-3095-b894-fc450ca9f8b1.roa (raw, json) Hash identifier: MqXFZJiBSDzJiB1racXKbyLUikeHQZPJrGwvC5Fd7LU= Subject key identifier: 3F:64:E1:E6:34:0F:C3:6A:BE:50:66:5C:7E:6C:72:70:03:7B:44:7F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4988419CFBD6CE748E206800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a71f6be0-7a58-3095-b894-fc450ca9f8b1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:41:9c:fb:d6:ce:74:8e:20:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ae99439-ec64-4b70-bc73-bc361ad4c1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:dd:29:55:09:34:82:dd:55:77:e6:ca:6d: 1b:66:a5:9c:f0:f7:1a:eb:80:39:e4:59:0b:45:24: 11:82:42:9f:74:2c:69:70:21:22:9f:e7:5d:12:86: 9e:0d:b0:32:2d:7b:75:19:15:64:3e:85:1a:61:4c: 5a:7d:b0:e1:e5:75:8e:44:1e:9b:e3:37:82:ac:da: aa:af:28:59:59:f1:c2:e0:1d:0f:26:73:00:e3:fd: 2b:03:10:7a:ea:f6:7c:f6:2d:c2:d0:80:01:fe:88: 0a:d1:ad:02:08:09:27:af:72:db:bf:53:b6:96:09: 10:8c:71:52:1e:fc:c3:11:09:3a:2c:08:23:00:8a: 37:1f:72:e8:0f:0a:0a:f3:7f:c8:88:4f:db:b4:90: 38:b6:c2:e0:f2:14:f5:c6:98:e6:83:c9:27:66:54: bf:0e:43:46:a0:cb:c0:40:80:ae:e7:85:45:0d:45: c3:51:85:51:89:f4:0c:e8:50:2d:2b:61:ee:db:8c: 65:cd:77:94:86:29:f7:b5:c5:ed:68:7b:46:8f:ce: 26:e0:fb:34:e6:95:71:63:79:1e:fc:2c:2b:df:7b: 63:c3:fb:f1:76:55:77:63:4d:b1:7e:12:ce:cf:ad: 98:cf:32:3e:3d:05:9f:83:db:82:3e:23:2d:81:3e: fd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:64:E1:E6:34:0F:C3:6A:BE:50:66:5C:7E:6C:72:70:03:7B:44:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a71f6be0-7a58-3095-b894-fc450ca9f8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f7:7a:d8:db:c5:5c:f7:31:ec:1b:c8:2d:74:f6:ce:b9:9a: 56:ba:03:ae:1d:7f:f0:a3:8b:ab:c0:d5:75:4b:44:7e:75:3c: 64:a1:b8:21:9b:d5:70:c5:6f:27:fc:2b:5c:36:55:59:25:7a: 84:82:0f:ad:c1:79:97:40:41:21:2b:9d:44:38:23:95:ea:d5: c3:59:56:03:c9:f0:fa:ff:86:3a:27:ec:45:fb:a0:5c:55:8a: 8d:5e:42:43:1d:cc:9e:71:74:18:bf:8c:34:6e:76:05:3e:7c: 12:61:0d:ce:7a:84:f8:88:82:94:f1:72:a9:9a:b2:fd:7b:6e: 71:90:f3:e8:5c:3d:89:e3:08:94:43:c6:3f:9d:5b:46:c2:2d: 7f:67:c1:2b:37:a4:ca:21:8b:68:af:82:90:6d:38:ce:8e:4a: 79:30:57:72:c9:8a:2d:88:1f:bb:34:fd:93:ea:ce:99:e6:ec: 81:bd:c7:a3:42:45:3f:39:9c:a7:b9:19:38:ea:20:d2:80:3a: e9:e8:1f:fa:76:dd:a3:be:4b:74:75:11:77:d0:c3:1b:2c:83: 9b:b4:6c:69:47:6e:41:2f:db:59:2e:33:cd:15:16:4e:b6:93: 71:69:f5:ec:cf:7d:93:f1:33:8a:06:bd:68:9e:54:37:5b:d3: 89:1f:0f:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiEGc+9bOdI4gaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmFlOTk0MzktZWM2NC00YjcwLWJjNzMtYmMzNjFhZDRjMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kXdKVUJNILdVXfmym0bZqWc8Pca64A55FkL RSQRgkKfdCxpcCEin+ddEoaeDbAyLXt1GRVkPoUaYUxafbDh5XWORB6b4zeCrNqq ryhZWfHC4B0PJnMA4/0rAxB66vZ89i3C0IAB/ogK0a0CCAknr3Lbv1O2lgkQjHFS HvzDEQk6LAgjAIo3H3LoDwoK83/IiE/btJA4tsLg8hT1xpjmg8knZlS/DkNGoMvA QICu54VFDUXDUYVRifQM6FAtK2Hu24xlzXeUhin3tcXtaHtGj84m4Ps05pVxY3ke /Cwr33tjw/vxdlV3Y02xfhLOz62YzzI+PQWfg9uCPiMtgT79zwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD9k4eY0D8NqvlBmXH5scnADe0R/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTcxZjZiZTAtN2E1OC0z MDk1LWI4OTQtZmM0NTBjYTlmOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiFAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATPd62NvFXPcx7BvILXT2zrmaVroDrh1/8KOLq8DVdUtEfnU8ZKG4 IZvVcMVvJ/wrXDZVWSV6hIIPrcF5l0BBISudRDgjlerVw1lWA8nw+v+GOifsRfug XFWKjV5CQx3MnnF0GL+MNG52BT58EmENznqE+IiClPFyqZqy/XtucZDz6Fw9ieMI lEPGP51bRsItf2fBKzekyiGLaK+CkG04zo5KeTBXcsmKLYgfuzT9k+rOmebsgb3H o0JFPzmcp7kZOOog0oA66egf+nbdo75LdHURd9DDGyyDm7RsaUduQS/bWS4zzRUW TraTcWn17M99k/Eziga9aJ5UN1vTiR8PcA== -----END CERTIFICATE-----Generated at Sun Oct 4 19:45:43 2026 by rpki-client